Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Id1rV_9P9tLLts771VcNcolfOPU.roa
File:                     Id1rV_9P9tLLts771VcNcolfOPU.roa (raw, json)
Hash identifier:          rqfY/jGwdiNy1MeR/PktCprkVm9eHo/gCROKjE0uBgE=
Subject key identifier:   21:DD:6B:57:FF:4F:F6:D2:CB:B6:CE:FB:D5:57:0D:72:89:5F:38:F5
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA6E43C3C0E7ED51EBC303ECD091C4C81
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Id1rV_9P9tLLts771VcNcolfOPU.roa
Signing time:             Mon 18 Sep 2023 06:04:50 +0000
ROA not before:           Mon 18 Sep 2023 06:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:a6e4:3703/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a6:e4:3c:3c:0e:7e:d5:1e:bc:30:3e:cd:09:1c:4c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 06:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21dd6b57ff4ff6d2cbb6cefbd5570d72895f38f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:13:84:21:58:f5:65:29:19:ee:cc:87:4e:
                    c0:a4:dc:2b:9b:8e:bb:4f:58:95:3b:d4:4f:aa:02:
                    55:6c:c3:0d:3e:31:c7:cb:c6:7c:b8:6d:a0:71:e0:
                    65:55:d8:be:16:a8:53:cf:66:f5:23:a2:0a:e9:3e:
                    27:4b:87:27:ec:d5:31:bc:0d:ef:31:ad:0a:29:7d:
                    59:a7:76:05:9f:92:15:0e:3b:41:49:60:d1:b4:bc:
                    a8:c6:58:2b:aa:4c:9a:d7:5b:2f:05:d7:cc:26:a1:
                    17:09:74:a5:26:cd:c2:14:e9:32:6c:de:8b:e8:a8:
                    a6:aa:3b:51:53:f8:1b:2a:e6:7f:89:72:a9:2b:ed:
                    65:ca:84:7e:46:f2:a9:23:54:4f:ec:bf:43:d5:98:
                    06:af:93:1e:2d:e1:d4:e3:e3:8e:b9:5d:8e:70:0b:
                    f1:5c:93:cc:64:e2:2c:43:50:86:05:f2:18:ce:fe:
                    56:77:f2:c4:9d:a7:1a:f0:d0:5f:70:a5:05:43:23:
                    9b:a9:1e:1d:81:ba:ec:ca:1e:c9:b8:a2:9d:c4:be:
                    40:08:21:0e:b0:88:83:b1:0b:28:87:b4:5a:77:ae:
                    f5:37:dd:7d:d7:f3:f8:97:37:bf:3b:7f:36:a0:14:
                    42:71:68:7a:ed:fe:f6:ae:6b:a4:ca:e7:e9:08:00:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:6B:57:FF:4F:F6:D2:CB:B6:CE:FB:D5:57:0D:72:89:5F:38:F5
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Id1rV_9P9tLLts771VcNcolfOPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:cb:ae:3a:2e:5f:34:71:a7:1f:34:d6:ab:3d:41:ee:05:e8:
         b8:d2:77:77:b2:fd:7f:26:d8:27:1e:a4:a7:81:c1:2b:01:0c:
         03:95:f8:ad:3e:42:3b:59:8a:5a:ec:63:ed:35:15:39:4e:bc:
         68:a9:31:ed:2c:5e:20:18:78:c6:cb:e6:5f:26:47:ff:b8:13:
         ca:74:d6:d9:48:c8:d7:4e:32:c8:56:f8:2a:b8:33:10:a5:8f:
         72:7f:a6:0a:0b:0e:a4:46:91:93:b3:06:59:b2:08:be:76:8b:
         f8:9f:35:cd:67:62:d1:e1:b2:60:b7:11:0b:3f:c7:84:5d:03:
         39:bd:b6:1f:fa:2d:ed:4c:6d:3b:aa:c3:78:3f:f6:b2:b0:f6:
         84:58:7e:db:e9:37:61:3b:99:bc:49:0a:64:0b:b7:61:f6:82:
         d3:3e:0f:38:21:ec:8c:b8:bd:21:b5:ad:d0:21:cd:52:a9:a3:
         20:91:2a:d0:ac:f0:0c:42:99:57:c7:b5:6b:c6:0e:00:8d:f0:
         ed:c2:5a:09:53:36:e9:b5:42:ba:4a:e7:42:c8:13:7a:86:fb:
         73:4f:23:38:75:44:fd:31:90:c6:4c:5f:c8:61:41:15:11:bc:
         6c:ab:af:91:5b:bc:a5:b8:70:2b:da:7a:90:40:d1:74:10:f8:
         ba:80:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----