Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/C71JdRH1S25FBJk9_IoxQJoNK7Y.roa
File:                     C71JdRH1S25FBJk9_IoxQJoNK7Y.roa (raw, json)
Hash identifier:          5HpjYsejHbbB8fBgg3Y35d+h5JNwlttVS3TOGMt/cKE=
Subject key identifier:   0B:BD:49:75:11:F5:4B:6E:45:04:99:3D:FC:8A:31:40:9A:0D:2B:B6
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A5001B81D6DB19A8482FBC24BAD7C9EDF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/C71JdRH1S25FBJk9_IoxQJoNK7Y.roa
Signing time:             Fri 01 Sep 2023 09:10:04 +0000
ROA not before:           Fri 01 Sep 2023 09:10:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:5001:4d2f/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:50:01:b8:1d:6d:b1:9a:84:82:fb:c2:4b:ad:7c:9e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  1 09:10:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bbd497511f54b6e4504993dfc8a31409a0d2bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:0c:a5:28:58:c8:d5:4f:5f:fd:41:2c:09:
                    99:00:30:64:f6:68:63:ca:9b:5c:99:eb:bb:cd:c8:
                    6e:67:0a:16:52:f0:d6:d8:f6:43:7c:07:66:92:c5:
                    22:27:96:74:fc:b3:24:e4:f9:cc:41:30:d6:44:84:
                    aa:14:65:b3:9f:db:e1:01:e6:b9:7e:81:c2:dc:25:
                    fa:23:c1:43:23:58:5c:38:89:41:89:f2:0c:cd:cf:
                    59:b5:19:e5:f7:4d:f8:38:63:9e:13:eb:5d:df:7f:
                    18:dd:e3:6c:df:6d:61:1e:7b:35:0c:4e:26:24:29:
                    48:27:12:6a:e8:3a:09:87:ea:4f:f6:ca:d1:9a:3c:
                    b4:72:e5:69:e5:14:2c:6c:d9:d6:2a:79:ad:1f:ae:
                    f3:48:2a:60:03:e1:7c:d1:eb:8d:21:72:56:d4:58:
                    5f:f4:cf:ae:af:32:5a:3a:ef:79:47:22:4a:c7:9b:
                    68:7b:dd:92:15:32:86:e8:49:24:49:e6:b4:ba:3f:
                    3e:99:2f:e4:a6:6d:59:1b:08:b1:83:99:4b:d7:86:
                    db:2c:14:d2:a4:bd:e7:04:f0:fa:bb:1b:cd:60:3a:
                    e7:d9:05:e5:8f:cc:af:59:bb:c1:d5:5c:39:71:e6:
                    25:3b:6c:97:75:cd:6f:16:52:de:e3:60:a8:51:60:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:49:75:11:F5:4B:6E:45:04:99:3D:FC:8A:31:40:9A:0D:2B:B6
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/C71JdRH1S25FBJk9_IoxQJoNK7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:51:30:fe:c0:53:47:72:c1:11:46:93:c2:93:72:2a:d8:
         41:a8:23:69:d8:a4:55:8a:ca:3f:4a:bf:bd:55:65:a1:72:ca:
         29:e8:2f:57:67:97:39:a4:43:5d:89:ba:8e:52:8c:f8:35:04:
         2a:78:54:40:82:35:30:2f:64:0d:3e:6a:2c:67:8a:dd:26:e2:
         5e:38:c4:3d:a2:2e:25:5c:f7:d2:27:0c:53:04:74:90:96:bf:
         2d:a8:31:6b:2c:be:f9:2f:84:02:b5:05:ae:00:c8:46:5c:e9:
         57:20:5f:9b:c4:f3:69:c0:5f:ca:15:1d:65:b4:ee:a3:64:d5:
         3d:98:f6:4c:d6:7b:3d:62:82:0a:7d:14:fa:c7:f1:4e:f8:5e:
         87:ff:61:70:b2:0d:72:ab:9f:54:56:b0:ca:9b:8a:b1:6b:91:
         72:36:3f:a1:d5:10:4a:b2:53:71:ff:c6:4e:b5:5c:07:b1:40:
         ee:7a:03:1b:b6:2b:46:18:bf:82:b9:97:e8:3f:51:d3:19:01:
         69:94:e7:9c:da:31:0a:16:91:78:ae:db:b1:84:2f:d8:ae:65:
         67:d6:1b:c7:21:84:c6:bf:9b:d4:73:77:f6:65:e7:0e:82:b6:
         77:51:d6:12:bd:08:d2:a6:4a:35:1d:16:c3:dc:93:36:05:16:
         07:37:22:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----