Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/x7kSPxUg5wkY943N2wQmEeYZaXs.roa
File:                     x7kSPxUg5wkY943N2wQmEeYZaXs.roa (raw, json)
Hash identifier:          pH+cp/UO36qnqmhXnWiL+aVsvQtYLozm/6T6rEehC0o=
Subject key identifier:   C7:B9:12:3F:15:20:E7:09:18:F7:8D:CD:DB:04:26:11:E6:19:69:7B
Certificate issuer:       /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial:       0193F31B7C3D6B58E096906FE1BFC578B43F
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/x7kSPxUg5wkY943N2wQmEeYZaXs.roa
Signing time:             Mon 23 Dec 2024 10:41:24 +0000
ROA not before:           Mon 23 Dec 2024 10:41:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9121
IP address blocks:        81.30.103.0/24 maxlen: 24
                          2a13:ae00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f3:1b:7c:3d:6b:58:e0:96:90:6f:e1:bf:c5:78:b4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
        Validity
            Not Before: Dec 23 10:41:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c7b9123f1520e70918f78dcddb042611e619697b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:30:1c:05:db:c0:f0:92:5c:5d:53:24:55:
                    97:8c:3f:44:fe:41:fc:90:05:64:55:6c:93:a0:4d:
                    f4:fc:25:c1:a3:d0:0c:c4:7e:7e:fc:73:bd:a8:f5:
                    8c:87:d8:33:c6:7a:6f:09:86:1b:5d:a6:d3:5e:08:
                    94:2a:2d:91:14:e3:b4:d0:6f:9f:e3:98:8e:e9:87:
                    89:81:43:64:8d:9a:2a:f7:64:68:89:6b:85:6c:e7:
                    b2:2c:1c:d0:ce:80:46:40:47:09:f9:10:bb:83:47:
                    d4:bb:6d:2e:ad:2c:8f:0a:31:20:16:c4:5b:c2:40:
                    ff:77:33:ad:5a:86:0c:fc:14:7b:d4:07:9e:21:c0:
                    32:d3:c9:c7:a0:38:5f:6d:f5:e9:64:68:b1:1f:c2:
                    4c:73:eb:a7:6c:a6:2d:61:1c:c2:bc:24:af:1e:80:
                    a2:c0:43:b7:17:ba:42:ec:7d:41:99:74:c2:c5:11:
                    22:b0:22:13:36:45:f6:b5:1f:da:07:22:83:ca:50:
                    57:82:57:43:a4:61:23:4a:5c:c3:8e:ad:17:6d:bc:
                    3e:d1:1c:3a:2e:ec:a8:81:17:30:b5:65:19:8b:ff:
                    d8:9d:62:5c:55:16:c2:ff:9a:28:b4:35:c2:64:5a:
                    26:0f:1f:ff:c0:c9:2d:77:2a:31:7d:1f:fa:21:d8:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:12:3F:15:20:E7:09:18:F7:8D:CD:DB:04:26:11:E6:19:69:7B
            X509v3 Authority Key Identifier:
                keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/x7kSPxUg5wkY943N2wQmEeYZaXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.30.103.0/24
                IPv6:
                  2a13:ae00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:5b:c3:65:e0:08:a0:7a:93:6e:27:fc:8c:80:20:bc:1b:
         5c:b8:33:ef:cd:c2:80:58:86:c5:bb:27:95:a8:87:5a:5d:e3:
         54:04:f6:39:eb:57:4e:25:8e:9b:bc:1a:72:be:65:2f:b2:7d:
         bd:1c:d5:50:b5:4c:1e:ef:74:44:02:2b:17:85:27:c5:bc:18:
         81:6c:01:45:a0:db:ee:44:d5:a6:95:ca:ac:75:a0:5f:3c:97:
         86:76:7e:99:3a:21:b9:a2:07:1b:a3:ce:0c:31:cb:6c:32:74:
         11:ad:a8:85:0f:9c:c2:b4:41:e8:e5:0a:24:f0:b9:67:51:ca:
         ae:e5:65:c3:75:9c:af:28:df:5d:6b:cc:f7:d9:5a:3b:58:e4:
         e3:e8:81:a8:a4:f1:1b:79:92:73:9f:35:3d:af:4a:23:48:a0:
         14:9a:62:66:fb:48:76:3e:40:30:c6:4f:08:f7:02:81:4c:69:
         c2:47:5b:77:3f:9f:2d:32:98:d7:cf:f7:53:d6:f7:dd:6a:76:
         d5:e3:67:9c:92:99:eb:30:31:b0:e2:15:d2:0e:d4:3b:27:19:
         d9:b2:c9:eb:12:fa:f2:ba:4d:0e:5f:72:f5:6f:ca:13:03:4d:
         c9:5e:3d:b0:7a:8a:8e:6a:5c:a1:d2:99:5a:7f:6c:39:a3:41:
         23:35:5e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----