Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Jm-5ErUusSIR7CkD6l5_Ofa4Ui8.roa
File:                     Jm-5ErUusSIR7CkD6l5_Ofa4Ui8.roa (raw, json)
Hash identifier:          xutm4KQXSu4//nyzlYAjEJik7iLhT4gSwqTeWa2pzmc=
Subject key identifier:   26:6F:B9:12:B5:2E:B1:22:11:EC:29:03:EA:5E:7F:39:F6:B8:52:2F
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F871C759DCDA635A7E064D0DEBD2EC900
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Jm-5ErUusSIR7CkD6l5_Ofa4Ui8.roa
Signing time:             Fri 17 May 2024 15:12:20 +0000
ROA not before:           Fri 17 May 2024 15:12:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:1c:75:9d:cd:a6:35:a7:e0:64:d0:de:bd:2e:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 17 15:12:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=266fb912b52eb12211ec2903ea5e7f39f6b8522f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:ae:9d:8d:eb:e8:24:e9:5e:82:c4:d1:24:
                    93:d5:25:97:2b:4f:6a:bb:5d:69:d3:4e:aa:7b:79:
                    76:f9:94:2e:b9:a2:cb:35:c9:dc:53:0f:38:29:f3:
                    5b:f1:d7:28:6c:77:62:2c:b6:0d:9f:b2:ac:7e:8b:
                    a5:9a:26:33:03:b8:cc:7d:69:fa:c2:40:3d:93:84:
                    32:44:26:1d:a4:ae:d3:05:23:83:20:09:35:74:38:
                    6f:0b:c8:e0:bd:19:2b:a7:81:03:79:24:8c:cf:d4:
                    59:50:e8:40:33:a9:ba:71:de:c0:fd:0a:20:80:c3:
                    d4:06:c7:7e:35:67:77:b6:ec:6e:91:9a:64:7e:ab:
                    0a:60:5a:31:6d:7b:86:c6:5a:e6:a3:87:33:8b:ee:
                    6a:89:cb:92:39:73:fd:12:ec:98:12:89:7f:5b:00:
                    6c:12:f3:b1:89:6d:d9:a3:69:f4:f1:dc:74:84:f3:
                    bb:78:02:71:80:22:f5:e1:0e:ff:d0:ad:e9:a4:39:
                    bd:bf:30:4c:fc:72:8f:89:18:31:c2:dd:bc:5e:8f:
                    20:e3:37:f1:f2:93:0e:1c:8e:5d:8a:a0:61:ab:e1:
                    e2:ca:71:a2:38:0b:b4:8d:ed:e1:97:2d:e9:a2:be:
                    80:8a:e5:ad:68:e3:cf:ad:56:c1:da:99:12:08:ff:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6F:B9:12:B5:2E:B1:22:11:EC:29:03:EA:5E:7F:39:F6:B8:52:2F
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Jm-5ErUusSIR7CkD6l5_Ofa4Ui8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:58:16:3d:14:a0:41:0c:9c:be:7f:a6:f2:cd:cb:c6:7b:
         ab:0e:3c:cb:46:68:a7:9f:56:25:3a:60:73:c6:f4:40:55:54:
         45:ca:b7:cf:28:99:9d:c4:ad:be:1d:a7:13:fe:08:21:98:a7:
         be:63:fc:6c:d6:4c:e9:d7:4e:70:16:51:b7:4c:31:ed:90:e9:
         55:8a:cf:e0:24:6a:2d:ab:5c:a6:c8:4f:a4:1e:40:36:f3:25:
         7d:7f:9e:59:7a:f1:39:1a:ee:d5:3d:7b:4d:09:56:ea:52:2b:
         45:d1:a2:08:84:ef:49:9e:12:aa:59:80:25:fb:e1:ec:a0:9e:
         5e:55:73:36:d5:ed:7f:68:0c:22:cc:af:37:2d:e1:ad:9c:f9:
         fe:91:84:ce:f3:40:b3:5e:58:48:db:8e:66:a5:e7:df:11:c2:
         2b:95:30:d1:36:ba:42:f0:57:fd:7f:0f:a8:5b:70:be:b6:c4:
         50:99:cd:fe:4f:92:fb:ee:fc:80:50:42:0d:da:01:8d:8d:f1:
         64:81:f9:60:a3:27:b3:12:65:02:0e:d2:aa:3a:8e:a1:61:3e:
         7f:71:fe:ae:97:73:5d:55:d5:17:82:a0:d0:4f:11:bc:c0:d2:
         19:fb:06:32:27:0b:af:c6:7f:7f:06:ba:db:fc:41:8e:a9:f9:
         14:88:73:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+HHHWdzaY1p+Bk0N69LskAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE3MTUxMjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjZmYjkxMmI1MmViMTIyMTFlYzI5MDNlYTVlN2YzOWY2Yjg1MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPuunY3r6CTpXoLE0SST1SWXK09q
u11p006qe3l2+ZQuuaLLNcncUw84KfNb8dcobHdiLLYNn7KsfoulmiYzA7jMfWn6
wkA9k4QyRCYdpK7TBSODIAk1dDhvC8jgvRkrp4EDeSSMz9RZUOhAM6m6cd7A/Qog
gMPUBsd+NWd3tuxukZpkfqsKYFoxbXuGxlrmo4czi+5qicuSOXP9EuyYEol/WwBs
EvOxiW3Zo2n08dx0hPO7eAJxgCL14Q7/0K3ppDm9vzBM/HKPiRgxwt28Xo8g4zfx
8pMOHI5diqBhq+HiynGiOAu0je3hly3por6AiuWtaOPPrVbB2pkSCP+uQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCZvuRK1LrEiEewpA+pefzn2uFIvMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvSm0tNUVyVXVzU0lSN0NrRDZsNV9PZmE0VWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKR2WBY9FKBBDJy+f6by
zcvGe6sOPMtGaKefViU6YHPG9EBVVEXKt88omZ3Erb4dpxP+CCGYp75j/GzWTOnX
TnAWUbdMMe2Q6VWKz+Akai2rXKbIT6QeQDbzJX1/nll68Tka7tU9e00JVupSK0XR
ogiE70meEqpZgCX74eygnl5VczbV7X9oDCLMrzct4a2c+f6RhM7zQLNeWEjbjmal
598RwiuVMNE2ukLwV/1/D6hbcL62xFCZzf5Pkvvu/IBQQg3aAY2N8WSB+WCjJ7MS
ZQIO0qo6jqFhPn9x/q6Xc11V1ReCoNBPEbzA0hn7BjInC6/Gf38Gutv8QY6p+RSI
c+k=
-----END CERTIFICATE-----