Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYIdNwx0Dp9c7u4IcFXPgmJ0C_E.roa
File:                     TYIdNwx0Dp9c7u4IcFXPgmJ0C_E.roa (raw, json)
Hash identifier:          0Ppfy5riiQ8O6vonVkOQu+ze5zjVO/2wdH4ADQXOFK8=
Subject key identifier:   4D:82:1D:37:0C:74:0E:9F:5C:EE:EE:08:70:55:CF:82:62:74:0B:F1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01869B8F9D0F90F35BADB1DB8D125E64D124
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYIdNwx0Dp9c7u4IcFXPgmJ0C_E.roa
Signing time:             Wed 01 Mar 2023 05:05:25 +0000
ROA not before:           Wed 01 Mar 2023 05:05:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9b8e:d758/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9b:8f:9d:0f:90:f3:5b:ad:b1:db:8d:12:5e:64:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  1 05:05:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d821d370c740e9f5ceeee087055cf8262740bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:98:48:d8:b2:99:85:0f:b3:73:4c:80:a7:
                    b7:f8:54:38:95:0d:89:e6:a4:e4:4c:6c:2d:84:cc:
                    6b:61:8e:2d:0d:2e:38:71:41:87:c4:97:4d:8e:46:
                    70:47:1f:68:7d:99:ae:c4:8f:ca:3a:0f:49:df:dd:
                    ad:64:b2:47:a3:c6:d9:fa:59:86:8d:c8:d4:21:01:
                    9e:14:88:1d:18:d2:84:fb:cc:d4:20:76:08:7b:60:
                    09:e7:b8:5e:71:76:18:f5:8f:c3:4b:7d:15:93:c5:
                    f6:88:e3:6b:2e:70:18:48:42:ec:a7:00:86:9d:04:
                    42:f9:16:10:e0:50:c1:ec:85:d0:6b:f6:11:5f:85:
                    da:a4:20:42:a0:2b:96:ec:55:62:b2:66:19:ef:72:
                    f5:5b:f0:47:39:14:a8:31:7c:8f:14:68:02:53:7e:
                    26:46:5d:fe:a0:84:36:05:94:d6:3d:f6:5b:d7:1c:
                    a4:d4:5e:d1:80:5d:96:95:3a:99:c9:b7:93:bc:75:
                    e5:0e:08:43:e9:98:19:ef:05:41:70:39:32:7b:69:
                    78:be:f3:42:27:e0:ac:d3:90:dc:ba:8a:db:ac:c0:
                    6d:c6:ef:48:23:c2:b2:7b:2c:6d:de:8c:67:ef:41:
                    ba:09:7b:47:d0:3d:93:5a:98:ba:ad:76:4c:d0:f0:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:82:1D:37:0C:74:0E:9F:5C:EE:EE:08:70:55:CF:82:62:74:0B:F1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TYIdNwx0Dp9c7u4IcFXPgmJ0C_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:83:f0:81:5c:a1:db:c6:79:25:6c:35:1c:19:68:3d:12:f8:
         da:a8:10:f1:dc:e0:76:f6:1f:c1:45:fc:fb:a2:31:eb:1b:68:
         1d:c3:18:36:d4:8a:dd:7e:48:3f:e4:c9:79:4b:35:9c:42:56:
         51:48:d8:f0:cc:55:3a:df:8a:7e:43:f9:04:6e:e0:fb:f1:48:
         03:59:f4:49:87:8b:f3:23:2d:de:20:03:18:0e:ce:51:4e:91:
         b2:40:a5:86:4e:31:4f:b3:ad:5a:fc:d6:8e:70:92:fb:df:ac:
         f1:bf:6e:f7:90:0a:25:b7:83:30:df:46:25:a8:13:d8:40:7e:
         c9:dc:32:28:32:ce:c7:57:98:ba:29:2b:91:54:d1:bb:60:d2:
         c8:01:bd:ef:af:b9:76:a6:e4:d7:de:c9:a3:15:30:f4:88:1f:
         63:44:95:77:4c:f6:6e:55:43:3f:a1:0b:90:fe:43:be:b6:9a:
         2e:4d:8b:c2:f9:4f:41:13:b6:ef:18:40:10:9a:2c:94:37:67:
         1c:12:f5:2c:23:84:eb:a1:76:37:d2:2a:e9:74:91:3e:d8:26:
         47:15:5a:f1:1f:e4:d7:5d:1d:5d:5f:d7:23:61:d2:e1:be:c8:
         a2:e7:dd:80:49:fb:06:43:85:e9:46:e0:38:1c:af:be:b0:17:
         64:61:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----