Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa
File:                     ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa (raw, json)
Hash identifier:          w9QD0cu2xxttciwtMoKgRn4VgvOEHxcdtrWynEFjQq8=
Subject key identifier:   6A:32:1B:CE:51:B6:E2:56:2E:D8:E9:74:C3:F3:DC:5F:F6:8B:EC:64
Certificate issuer:       /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial:       018CC8DF6B442EC1D3E73A6B7C161E96AC51
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa
Signing time:             Tue 02 Jan 2024 06:32:14 +0000
ROA not before:           Tue 02 Jan 2024 06:32:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59829
IP address blocks:        185.131.206.0/24 maxlen: 24
                          2a12:b340::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:6b:44:2e:c1:d3:e7:3a:6b:7c:16:1e:96:ac:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
        Validity
            Not Before: Jan  2 06:32:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6a321bce51b6e2562ed8e974c3f3dc5ff68bec64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:7d:42:7b:e1:93:53:34:f0:ed:4f:05:e7:
                    03:a8:2c:69:d6:c0:73:5a:3f:23:37:1b:f2:01:17:
                    53:c2:55:9b:52:a8:4d:b0:8f:c9:da:b1:ed:03:70:
                    55:26:56:c1:3d:ea:b0:54:44:ff:07:04:4a:f2:6b:
                    93:76:af:fd:eb:00:ff:3c:2e:ea:07:78:c8:c2:8b:
                    f9:d6:3b:fc:9b:11:d1:7b:29:39:77:ef:dd:d6:71:
                    e6:c3:bc:01:65:57:a5:97:60:fc:9f:bf:2f:7e:97:
                    23:37:2a:20:65:f4:c9:e9:fe:fe:fa:af:22:2b:c7:
                    43:58:ed:f0:0d:7b:8a:f6:cb:f4:15:0b:6d:89:c5:
                    64:ff:80:fa:dc:6f:51:53:12:de:02:a9:80:4e:d4:
                    91:8c:c9:a6:2c:6b:0f:d4:ad:b8:2a:f0:ef:11:41:
                    b1:9e:cb:e9:0f:17:df:98:0f:00:4a:af:d3:23:b5:
                    d4:2e:51:e9:3f:de:10:86:ea:bb:67:47:93:80:bf:
                    19:ca:9c:83:20:6b:67:74:73:11:57:8a:b2:99:46:
                    1b:2e:bb:95:c9:e5:67:2e:e9:f9:23:7d:50:b0:5c:
                    8e:f1:9c:79:5b:86:3d:b0:6b:97:93:50:17:08:f9:
                    14:69:3a:1a:89:b0:29:a1:17:76:98:31:9c:57:a3:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:1B:CE:51:B6:E2:56:2E:D8:E9:74:C3:F3:DC:5F:F6:8B:EC:64
            X509v3 Authority Key Identifier:
                keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/ajIbzlG24lYu2Ol0w_PcX_aL7GQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.131.206.0/24
                IPv6:
                  2a12:b340::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:a4:ff:18:08:47:81:29:93:a7:04:06:06:e3:80:aa:58:
         25:32:7e:a8:7a:4a:4b:97:58:da:6b:a2:73:d1:cc:27:b2:60:
         6f:7f:b1:a0:73:c7:c5:fd:43:bf:09:ff:0d:11:da:38:b2:63:
         f5:68:43:ac:7e:37:97:f6:46:ad:fb:a1:e9:17:28:4c:89:a4:
         e3:3b:44:33:2e:19:21:44:a2:e9:7e:cc:cc:c5:fb:6c:ee:02:
         37:08:2e:99:83:43:1a:c1:07:b9:69:09:11:54:dd:30:70:8a:
         5c:22:ad:ac:f3:7f:54:1d:04:14:bb:7c:17:38:3e:4b:11:4b:
         fa:d7:d2:a5:d6:b7:fd:ec:14:ba:11:94:3c:43:e2:38:29:d3:
         b6:0a:f3:63:94:43:a1:af:4d:a1:5a:31:fc:e7:bc:38:c7:20:
         31:29:be:33:f4:f3:05:f0:90:fb:f2:08:07:a9:a4:6a:52:00:
         88:8d:25:f8:aa:75:28:e5:33:9d:49:18:ed:3e:73:f7:b5:e9:
         16:b8:99:21:96:6c:32:a1:4f:f5:91:73:5e:2d:8c:fd:96:57:
         7d:e4:00:c1:48:87:33:f1:f6:78:b9:0d:bb:d6:b0:fe:86:0c:
         c3:05:09:c5:e9:4a:cd:0f:21:49:fb:30:1a:cf:e6:db:26:61:
         36:c6:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----