Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zeb7BQxCthn8udodNqCZbiuCi_Y.roa
File:                     Zeb7BQxCthn8udodNqCZbiuCi_Y.roa (raw, json)
Hash identifier:          U5KiqdMroGzQOYJPZz8GhkPqhMpnGEnfFyKR45XHGHs=
Subject key identifier:   65:E6:FB:05:0C:42:B6:19:FC:B9:DA:1D:36:A0:99:6E:2B:82:8B:F6
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA60FD5E6B1BBE8D988805154257DABFC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zeb7BQxCthn8udodNqCZbiuCi_Y.roa
Signing time:             Mon 18 Sep 2023 02:12:50 +0000
ROA not before:           Mon 18 Sep 2023 02:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a6:0f:d5:e6:b1:bb:e8:d9:88:80:51:54:25:7d:ab:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 02:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65e6fb050c42b619fcb9da1d36a0996e2b828bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:e6:f7:73:1f:d6:3b:27:70:07:8d:05:82:
                    a7:e2:7b:6b:df:13:0a:07:fe:42:56:43:48:a6:63:
                    b3:93:f3:3e:38:3f:f6:34:b9:42:27:18:61:8e:4d:
                    fc:01:2c:94:4f:59:e9:b2:64:25:3b:6b:32:34:dc:
                    c1:c7:e1:52:a9:98:1a:19:1c:27:96:c3:4a:d0:79:
                    ae:37:ba:3a:4b:d9:13:df:e9:00:33:52:ab:2f:f5:
                    43:a3:90:04:a9:53:97:e3:5e:62:24:bb:74:a3:f7:
                    ce:95:d6:28:25:1f:63:05:d1:fb:e9:e2:4c:78:9f:
                    e1:8c:3f:68:b8:60:da:61:65:23:5a:c3:f5:40:cd:
                    f8:c7:7c:74:1d:62:e9:63:55:1c:21:83:d7:bb:11:
                    68:79:0d:20:19:d5:91:2a:b2:ec:01:3b:48:31:01:
                    c7:20:eb:75:93:7e:cb:77:b3:04:38:2b:78:41:45:
                    10:72:2b:bb:c8:d4:1f:fe:24:0c:2c:cb:e9:dd:70:
                    20:68:68:86:9a:a5:22:e3:60:93:00:d2:dd:69:51:
                    84:d4:cf:5b:9c:65:f1:0c:ec:72:78:03:48:6a:ab:
                    d7:8e:2f:e0:b3:ff:eb:b2:88:ec:08:61:ca:19:0a:
                    c2:8d:95:d7:d1:78:20:74:36:46:ed:c4:9b:fd:99:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E6:FB:05:0C:42:B6:19:FC:B9:DA:1D:36:A0:99:6E:2B:82:8B:F6
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Zeb7BQxCthn8udodNqCZbiuCi_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:d2:1f:c9:55:03:5c:9b:58:dd:17:f7:49:8d:74:a8:bc:
         c8:05:73:b5:66:eb:3e:6c:93:c6:91:00:27:b5:26:94:4e:17:
         23:d0:2f:11:f2:55:78:5c:81:a7:65:da:75:73:fb:48:b9:ae:
         cf:b3:ef:dc:61:50:07:98:f1:f1:53:19:8f:ae:19:e1:b5:66:
         74:d5:5d:cc:8d:23:75:a6:84:3e:c1:c5:d6:f2:f5:d0:0a:c7:
         0e:44:66:89:36:fd:8d:ac:37:55:10:41:67:9b:b8:dc:56:0f:
         6d:2e:e7:55:f2:20:37:16:7a:87:6e:57:d1:be:84:38:72:52:
         60:81:ce:13:76:d6:da:1b:83:c9:e3:8c:3e:b3:9b:2d:a1:5a:
         cd:51:8e:35:17:60:1f:71:43:d0:5a:73:91:bd:b6:e8:b0:b0:
         74:55:c8:98:b2:1f:fe:f6:81:e0:01:81:eb:06:68:8f:b8:76:
         39:09:f0:fb:3e:52:70:75:4d:29:c8:eb:5d:da:0f:f6:fe:19:
         f0:90:e5:59:3b:f0:f1:a8:96:a0:9d:67:ae:82:b8:5f:27:c6:
         3e:89:ce:48:6e:cd:ec:21:9d:94:56:86:23:88:b5:c7:91:1b:
         0c:11:83:78:00:a3:c0:d6:d9:c2:66:71:60:95:2b:c7:cf:a4:
         84:68:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----