Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/e5ki9ZApD3seMKBgdUHkya61Gi8.roa
File:                     e5ki9ZApD3seMKBgdUHkya61Gi8.roa (raw, json)
Hash identifier:          /hrVXinF9x/cGHdCuz9s0PSZdkOxC38hIluzH5qEjXQ=
Subject key identifier:   7B:99:22:F5:90:29:0F:7B:1E:30:A0:60:75:41:E4:C9:AE:B5:1A:2F
Certificate issuer:       /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial:       018FA00572D2847F04B653CAAC0A677789BE
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/e5ki9ZApD3seMKBgdUHkya61Gi8.roa
Signing time:             Wed 22 May 2024 11:17:42 +0000
ROA not before:           Wed 22 May 2024 11:17:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206880
IP address blocks:        193.164.147.0/24 maxlen: 24
                          2a12:6ac0::/29 maxlen: 29
                          2a12:6ac0:5121::/48 maxlen: 48
                          2a12:6ac0:dc10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a0:05:72:d2:84:7f:04:b6:53:ca:ac:0a:67:77:89:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
        Validity
            Not Before: May 22 11:17:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b9922f590290f7b1e30a0607541e4c9aeb51a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:07:ac:58:16:45:0e:e9:0e:b5:a7:4d:4b:
                    f9:a1:d2:db:22:1e:3f:c3:38:f3:62:30:85:f6:b7:
                    bf:b5:af:85:a1:c5:cf:43:82:d3:c5:0c:05:3c:e5:
                    1a:a7:07:7e:73:f9:3e:f7:91:38:e6:60:1f:a3:54:
                    9d:0f:20:36:a3:cd:7e:94:68:b2:88:24:65:92:d9:
                    8a:22:de:3a:9c:c8:7e:2f:fb:07:8c:2a:e3:b9:91:
                    c9:cd:57:78:a4:39:2c:16:4c:26:e4:03:44:ab:0d:
                    86:4d:e7:ba:14:a2:ee:44:1e:8b:65:d0:10:9e:c4:
                    06:c4:8b:ff:65:08:50:e6:a1:ed:4c:14:bf:5a:6e:
                    52:66:17:f1:70:d1:a0:b4:31:b1:74:e2:09:17:2b:
                    dd:01:8e:df:fe:c8:12:72:c7:45:01:8b:5a:29:56:
                    17:57:19:50:ed:49:4c:d5:30:38:59:00:d6:7b:55:
                    9b:db:75:8c:66:f5:40:a6:92:c7:6f:3d:54:6b:f4:
                    4b:f0:69:d3:ba:d5:f8:2e:d5:94:f4:2b:ed:e3:6a:
                    26:44:93:a8:cf:72:83:71:50:2a:61:7e:8d:7c:87:
                    b1:65:6d:aa:15:af:be:ee:85:2e:d9:4c:bc:b9:52:
                    6a:95:64:cc:01:7b:2e:32:09:ef:bc:00:7f:7d:99:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:22:F5:90:29:0F:7B:1E:30:A0:60:75:41:E4:C9:AE:B5:1A:2F
            X509v3 Authority Key Identifier:
                keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/e5ki9ZApD3seMKBgdUHkya61Gi8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.147.0/24
                IPv6:
                  2a12:6ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:48:5f:d6:1d:b5:7c:0f:65:d1:23:f9:8f:11:7d:c9:bb:33:
         ca:6b:d4:c7:38:47:82:bb:40:68:b3:db:9e:75:6f:e2:cc:14:
         8c:95:eb:e5:2b:d4:48:96:e0:f9:76:d2:5d:e4:7d:bd:44:31:
         12:ea:f9:c6:45:d9:40:c8:a3:e3:49:a2:38:6a:f9:e8:b7:1e:
         e6:fe:52:0a:dc:39:c2:48:19:c6:31:de:40:d0:62:3e:c2:46:
         d4:29:f0:54:34:e8:4f:ba:b5:2c:cd:b3:1b:af:81:a0:93:14:
         e3:c1:cd:f5:86:53:06:88:c4:26:1f:cf:42:f2:bb:8a:ee:90:
         c5:d3:10:96:51:01:68:d8:f1:0b:33:76:5b:36:7f:e0:b9:0a:
         e9:44:63:42:02:1b:fd:e9:25:dd:d1:ef:b6:99:4b:58:9c:d2:
         5f:b4:9f:1f:c5:50:9b:07:39:a7:66:0a:92:bc:4b:3c:e4:78:
         5a:c4:f9:09:a4:0b:56:ab:d8:7b:e2:3a:68:6d:7c:20:9b:09:
         a9:34:cd:5e:f3:57:92:bf:96:6e:51:2c:16:72:79:7e:25:c2:
         d7:34:cd:9f:d0:26:cd:21:68:02:7c:cb:51:02:2f:ac:51:03:
         3f:57:6a:8e:08:e9:75:10:35:b9:bd:21:7e:da:6c:90:53:5a:
         58:eb:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----