Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/q-Lw8h2EJywXlT482QP768StpvA.roa
File:                     q-Lw8h2EJywXlT482QP768StpvA.roa (raw, json)
Hash identifier:          vwLnuPa7H8655PJcHfCubZwvAKMNWjEAYV0iqVAOxoE=
Subject key identifier:   AB:E2:F0:F2:1D:84:27:2C:17:95:3E:3C:D9:03:FB:EB:C4:AD:A6:F0
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F995300FF3CB4B425ECF30D25089FCE77
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/q-Lw8h2EJywXlT482QP768StpvA.roa
Signing time:             Tue 21 May 2024 04:05:04 +0000
ROA not before:           Tue 21 May 2024 04:05:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
                          2001:67c:64:ffff:0:18f:9952:5acc/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:53:00:ff:3c:b4:b4:25:ec:f3:0d:25:08:9f:ce:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 21 04:05:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=abe2f0f21d84272c17953e3cd903fbebc4ada6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:6e:c5:f6:0f:65:6a:37:af:76:06:c9:f3:
                    c2:4c:46:fb:ac:5d:f7:61:34:10:02:6e:28:71:a4:
                    a1:4b:88:4d:47:fa:3c:35:1c:17:c1:0c:8a:7a:8d:
                    b2:28:34:8c:97:95:e9:81:e3:5d:3f:be:a9:bc:36:
                    f0:51:7d:32:5f:74:73:fc:13:99:15:2b:dc:be:b5:
                    8a:5c:01:d2:be:f8:c0:36:e8:76:85:e5:0c:e7:90:
                    39:fe:31:ef:b3:b5:5b:09:aa:1e:e4:3b:04:18:83:
                    c2:d4:6b:37:5e:a4:7a:f1:a7:35:67:03:bf:02:06:
                    6c:12:b7:23:4c:41:1a:f6:4c:e4:92:0c:d0:10:97:
                    7b:5d:fc:e4:4b:14:0d:37:90:0f:62:dc:cc:06:f7:
                    86:bf:45:06:94:2d:f8:60:6d:30:7f:c4:fb:ca:3f:
                    a8:19:8c:1f:5b:f7:ed:10:42:41:08:c9:c4:4e:b9:
                    bb:03:3f:60:7c:60:a0:c2:9c:f4:d4:aa:c2:65:a5:
                    fe:4a:27:55:f1:39:f4:a6:0a:61:bd:08:bf:95:f8:
                    9f:55:26:a1:5c:ca:b7:0b:7e:5a:dd:2f:27:fb:ff:
                    82:f8:af:0c:c1:3c:7b:8b:1c:cd:55:d8:83:a1:0c:
                    d8:1b:67:cb:e7:0e:fc:74:80:fd:7b:9a:b1:e8:6a:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E2:F0:F2:1D:84:27:2C:17:95:3E:3C:D9:03:FB:EB:C4:AD:A6:F0
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/q-Lw8h2EJywXlT482QP768StpvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:2b:3e:e9:11:31:5c:03:51:06:1e:59:cb:56:68:73:0d:
         ca:83:fe:d1:57:a5:e5:d5:f8:41:35:27:a4:1c:4d:2e:7d:2a:
         5c:a3:ae:05:fa:29:58:89:b0:ed:1c:79:6d:31:78:f0:e4:f7:
         a1:66:20:53:d4:2a:2c:15:fe:4c:b3:ae:6c:50:1b:00:13:ed:
         ce:a5:57:87:ec:a9:b5:6f:f3:27:be:85:48:ae:55:2a:65:8d:
         2a:bc:f2:5c:ec:16:fd:22:22:fe:15:b6:ce:2f:8a:0a:61:9e:
         e4:06:65:bd:88:58:a4:27:d5:b7:60:ee:6a:6e:95:90:5f:c5:
         22:29:06:e0:a5:aa:24:9c:d7:dd:17:21:f9:b1:59:88:87:81:
         d8:16:a3:dd:a0:ad:eb:48:0a:6e:71:ba:e6:ff:ae:d3:9e:50:
         f0:69:44:9b:18:17:98:a9:b7:fb:31:3d:13:9b:17:54:9b:ca:
         cd:93:2e:67:b5:d2:36:65:bc:5b:7f:96:54:df:17:88:75:88:
         ed:e6:81:99:39:ba:a4:16:12:fd:51:30:fe:a4:1d:0d:5f:14:
         54:f6:5e:c8:22:01:5e:30:f5:3a:46:26:58:2d:02:bc:ce:bc:
         c3:da:93:d8:19:40:7c:a2:c6:1c:d2:9d:6a:d9:52:94:53:aa:
         fd:e2:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----