Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pHS-2dO9HeU-iyil15kZF1I_9Xc.roa
File:                     pHS-2dO9HeU-iyil15kZF1I_9Xc.roa (raw, json)
Hash identifier:          PieYRSeMnrDaNafhQavJfSM8UBNejTLh85ju6x9uBKM=
Subject key identifier:   A4:74:BE:D9:D3:BD:1D:E5:3E:8B:28:A5:D7:99:19:17:52:3F:F5:77
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AAC80B2E4539294E2B2CE5739D41ABBEA
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pHS-2dO9HeU-iyil15kZF1I_9Xc.roa
Signing time:             Tue 19 Sep 2023 08:13:50 +0000
ROA not before:           Tue 19 Sep 2023 08:13:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ac:80:b2:e4:53:92:94:e2:b2:ce:57:39:d4:1a:bb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 19 08:13:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a474bed9d3bd1de53e8b28a5d7991917523ff577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:e6:0d:c4:4e:83:9b:7e:15:e1:6c:6b:e6:
                    96:d5:58:cd:70:5e:73:4f:74:2a:3e:35:03:8c:1e:
                    7e:c0:ae:e1:80:06:91:4d:13:d5:39:e0:29:ab:d3:
                    2d:6e:c9:84:ac:d3:af:5f:bb:3e:16:eb:bc:d2:78:
                    b3:6c:b3:88:09:85:6e:c6:db:75:85:fc:4e:56:66:
                    c9:17:c9:41:09:07:97:af:65:87:fb:f8:eb:2d:ea:
                    89:9d:49:dc:74:44:fa:7a:18:df:c7:bc:d7:21:ab:
                    55:6c:49:a7:67:3f:ce:35:f4:d2:bf:ac:0b:8d:2d:
                    9f:b3:ed:94:05:7b:f0:79:d5:cf:48:cb:d6:56:8f:
                    46:33:65:ed:cb:20:84:b1:18:43:98:0e:25:78:ff:
                    62:ed:5d:65:83:ff:4c:56:15:4f:17:56:f3:bd:4d:
                    07:11:4b:16:46:fd:d4:77:e0:c9:6c:1c:4d:8d:7c:
                    4e:01:eb:a3:47:08:6a:c3:7b:e2:89:e9:7d:3f:da:
                    db:ff:1b:c8:e3:a0:f3:cb:43:1a:e7:c4:92:6c:5a:
                    4a:c8:20:bd:13:70:f7:80:94:4e:c7:3b:0d:9e:e9:
                    94:4f:20:67:64:6b:ea:be:17:73:bf:57:bd:d7:b4:
                    d7:5d:0f:c3:41:3f:9f:4b:ca:7c:02:1d:79:a4:91:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:BE:D9:D3:BD:1D:E5:3E:8B:28:A5:D7:99:19:17:52:3F:F5:77
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/pHS-2dO9HeU-iyil15kZF1I_9Xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:40:f5:9c:aa:49:c4:60:5b:78:79:1d:7f:ee:b6:d1:22:
         c3:38:52:13:7f:22:d6:5c:1c:b3:8d:7b:a3:f9:5b:af:af:f7:
         5a:de:48:d3:48:c1:6d:50:6d:d5:03:cb:ed:4e:b9:42:4a:5c:
         b1:55:63:e6:89:1e:b5:7f:85:ab:54:b5:c8:8d:14:37:87:a7:
         a6:3d:e0:0e:e6:40:9b:35:f7:15:72:17:74:a8:74:65:ef:8b:
         ad:46:da:f5:90:af:62:b8:a2:ae:9a:2c:92:d6:aa:05:9d:a3:
         5c:62:53:2d:11:53:33:3a:31:48:74:65:45:5f:40:bc:6c:12:
         51:37:4f:67:8e:0a:4a:4a:42:b9:5f:6c:b5:bd:e8:0e:50:dc:
         b5:b0:12:cc:6b:72:3f:45:de:92:2f:06:db:86:fd:e3:2e:a6:
         34:1b:1c:c8:4e:5d:b6:87:c5:7b:7c:d3:04:23:56:b2:cd:a0:
         f1:cd:a6:f0:dd:71:d7:90:4b:08:60:7c:41:d4:73:89:69:72:
         0b:cf:1e:7d:eb:f0:20:fc:83:35:d8:4b:87:2b:f1:4e:ee:59:
         d3:2b:76:3d:27:1e:94:19:af:5d:f7:d8:be:45:05:7d:c9:e0:
         4e:a4:11:42:37:5e:0a:47:ea:a2:e4:26:2b:b4:50:53:3e:28:
         fa:7f:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----