Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa
File:                     eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa (raw, json)
Hash identifier:          OS5Y0dVKD+SIL0QDKQgW5o6NZSGfrgs8Wg+BUTvYIjs=
Subject key identifier:   78:46:DA:25:6C:24:48:F5:80:F3:1D:54:D8:FF:89:D4:CB:AC:F4:83
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F50D34EEEC750D925D7F1040DDA60ABEA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa
Signing time:             Tue 07 May 2024 02:12:56 +0000
ROA not before:           Tue 07 May 2024 02:12:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:d3:4e:ee:c7:50:d9:25:d7:f1:04:0d:da:60:ab:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May  7 02:12:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7846da256c2448f580f31d54d8ff89d4cbacf483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:5b:a8:b6:85:cc:c8:e7:c5:ae:e2:5d:91:
                    c1:39:a8:4a:63:67:44:bb:b2:ad:cd:de:b6:0f:77:
                    5e:61:8f:cc:4d:4f:d2:b8:a6:cf:c4:26:3a:4d:2e:
                    c4:be:07:f7:34:14:a7:88:72:86:af:7a:78:62:68:
                    a8:fd:24:47:10:5c:c9:15:dd:04:c0:eb:28:84:76:
                    39:19:af:e8:95:96:01:30:06:a6:e5:85:d0:a8:9b:
                    ac:6b:68:cc:78:a5:65:e8:13:40:ef:5b:f4:b6:3e:
                    4d:74:61:33:0f:77:5d:e4:3e:71:8e:4c:5b:75:c8:
                    51:84:e1:47:06:bc:71:d3:08:68:8d:83:a5:41:00:
                    aa:74:7a:57:49:70:25:5c:d4:85:9b:3e:0e:d2:d0:
                    1d:5c:9c:ad:17:b8:15:ef:23:5c:c0:54:e7:e9:21:
                    f1:6f:23:c8:66:64:90:e0:e0:07:ba:8f:0b:52:bb:
                    66:94:11:6a:6e:fc:f4:0e:21:1b:cc:e4:48:01:bf:
                    de:64:c3:d4:c0:77:e8:e0:c6:56:fe:f1:96:2c:82:
                    13:92:4d:e0:bc:27:1a:95:57:57:65:f9:2c:40:bc:
                    ee:44:b5:35:4e:d8:fe:11:7e:f4:22:33:8f:3a:eb:
                    5d:c5:65:06:64:6b:6d:93:d3:12:de:b0:70:b9:84:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:46:DA:25:6C:24:48:F5:80:F3:1D:54:D8:FF:89:D4:CB:AC:F4:83
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/eEbaJWwkSPWA8x1U2P-J1Mus9IM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:f1:b0:71:e0:1d:cd:04:8f:6c:8e:fb:ad:43:23:14:bc:75:
         c6:c8:65:f7:74:ef:00:fd:0f:bc:b7:a6:5b:9a:fa:98:8f:87:
         7b:94:13:17:16:7b:4d:7f:04:9a:da:8b:2f:a6:02:b3:f6:04:
         f5:2b:eb:e0:aa:43:bf:8b:87:d0:06:aa:61:23:60:26:29:45:
         e7:42:21:67:25:38:5b:43:76:04:f1:b3:1c:eb:01:b1:cd:c2:
         2f:30:8c:db:f1:fe:c7:8a:3b:6f:b4:e8:8e:77:ce:7b:25:69:
         96:ed:53:ab:1c:b1:55:9f:b0:7d:ba:71:59:e6:a1:6a:0b:39:
         14:59:3b:93:e5:9a:35:49:24:41:19:49:84:5c:92:20:2c:38:
         c4:3f:c1:0f:29:2a:fc:05:52:59:08:97:12:a4:e2:5b:22:21:
         a7:2c:a1:ec:6d:57:fb:1f:4f:1b:0b:b4:c2:03:3e:23:3b:63:
         14:c3:9c:32:94:84:a2:a9:ec:2a:e4:54:ca:55:31:73:a0:c2:
         34:c2:5c:c0:ae:cc:87:56:e2:2d:d8:0b:cf:30:ec:a5:38:5d:
         7d:a4:4c:78:26:76:9d:6a:8c:9b:20:bb:ec:14:25:cb:bd:96:
         58:4e:cc:27:4b:cc:09:3a:b2:37:9e:ed:96:12:fb:50:90:08:
         59:94:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----