Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ijbat0qpirstekMlAwjSkWNDac0.roa
File:                     ijbat0qpirstekMlAwjSkWNDac0.roa (raw, json)
Hash identifier:          uHM0SpCbHbnvt+HOWgLCabTqDmQM4P/BwMrnmb0rNhY=
Subject key identifier:   8A:36:DA:B7:4A:A9:8A:BB:2D:7A:43:25:03:08:D2:91:63:43:69:CD
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D4EE271C73FE70B2B2FB482E78D4E055E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ijbat0qpirstekMlAwjSkWNDac0.roa
Signing time:             Sun 28 Jan 2024 07:04:39 +0000
ROA not before:           Sun 28 Jan 2024 07:04:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:4ee1:cef4/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:4e:e2:71:c7:3f:e7:0b:2b:2f:b4:82:e7:8d:4e:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 28 07:04:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8a36dab74aa98abb2d7a43250308d291634369cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:c7:7a:19:bd:ba:c2:46:d2:1d:a6:d0:a7:
                    ec:3e:b1:ae:09:be:05:01:8f:8e:2f:e7:33:fb:87:
                    a3:29:05:ae:3d:42:87:90:7f:e3:64:12:b8:3d:14:
                    03:ec:b6:f1:8d:c6:91:2b:1c:98:2f:2a:4b:02:67:
                    c5:4d:11:32:19:ab:0c:55:8b:1a:5a:13:c8:a0:cc:
                    03:a0:9a:b1:70:44:00:d1:bb:8b:94:ce:4a:c3:57:
                    bd:17:65:56:bc:4d:cc:54:c5:f5:01:23:2a:75:14:
                    85:5c:04:fe:a3:bb:a1:74:7b:7c:eb:ea:e5:ae:5a:
                    b8:62:20:8a:3c:36:46:98:ac:43:2b:30:70:1d:ec:
                    57:26:6f:3b:16:d7:2e:b8:b6:f0:af:90:93:1f:ed:
                    95:68:45:87:a4:05:a7:a1:19:ae:e6:49:e4:6f:f6:
                    6c:f7:14:88:b1:8c:37:78:97:af:7a:57:b1:91:44:
                    b0:d8:73:2e:75:ae:ab:fc:5c:0a:86:b0:42:4a:fe:
                    ed:52:fb:65:22:34:b6:5a:65:ec:d6:93:46:dc:1b:
                    3d:cc:12:fb:9b:53:e1:d0:24:8d:36:3b:94:57:cb:
                    88:9b:cc:2f:74:8c:b1:eb:cb:ef:78:88:af:24:86:
                    a9:9a:cb:be:4d:7e:c2:7f:57:dc:e5:f0:43:0a:4d:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:DA:B7:4A:A9:8A:BB:2D:7A:43:25:03:08:D2:91:63:43:69:CD
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ijbat0qpirstekMlAwjSkWNDac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:a4:92:85:38:17:73:c7:b6:33:2c:17:b0:52:87:3c:c3:
         51:d3:34:0c:76:8f:4c:11:df:13:4e:40:fd:63:e9:56:14:cd:
         4c:89:01:f3:d8:e9:83:cb:ec:fe:b3:6c:02:d5:c4:7a:36:31:
         66:4f:68:28:3d:8e:be:09:58:63:c6:61:24:fe:5c:c3:65:23:
         30:9c:dd:37:7b:06:5a:a0:69:2a:57:b2:ba:a3:36:25:ad:b9:
         31:4e:73:d9:9b:7c:88:1b:b0:77:6e:c0:44:39:fa:5d:b8:b0:
         20:51:17:a5:3c:fb:99:9a:58:0a:c4:f7:40:b5:7a:fc:af:93:
         75:5c:39:42:7d:78:cf:12:96:99:ea:d5:b1:b1:29:48:c3:36:
         ed:70:f2:e2:96:87:c8:9b:4d:98:53:8d:b6:53:99:4a:a4:ff:
         9a:3d:21:90:5e:10:29:5c:a4:a0:b1:90:e3:83:27:4d:24:8a:
         c9:e0:81:f1:69:b7:82:12:22:69:c9:6c:d9:63:9d:c9:55:fa:
         f2:6d:11:02:03:01:22:83:b4:b4:d5:6f:f3:bf:4b:16:10:f3:
         fd:9d:3c:63:43:02:90:e7:76:a9:e4:41:bc:62:47:03:0a:20:
         a5:78:82:66:09:ec:11:aa:34:54:87:b5:9c:79:a3:c2:ce:82:
         d7:34:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----