Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sI3QDgu8N7fCEfFH8oEPG1c5Hbw.roa
File:                     sI3QDgu8N7fCEfFH8oEPG1c5Hbw.roa (raw, json)
Hash identifier:          QhiS284GWiDy7qwRIcEEqkPUbhD+hxOQdBf5vdo3ZzI=
Subject key identifier:   B0:8D:D0:0E:0B:BC:37:B7:C2:11:F1:47:F2:81:0F:1B:57:39:1D:BC
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018702C4D901AD33269F851540BFC5FD2D5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sI3QDgu8N7fCEfFH8oEPG1c5Hbw.roa
Signing time:             Tue 21 Mar 2023 06:04:27 +0000
ROA not before:           Tue 21 Mar 2023 06:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:2c4:bac6/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:02:c4:d9:01:ad:33:26:9f:85:15:40:bf:c5:fd:2d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 21 06:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b08dd00e0bbc37b7c211f147f2810f1b57391dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:b4:94:a4:65:e9:3d:34:68:ec:47:77:05:
                    db:75:ce:a2:67:6f:be:04:6c:5e:e4:8b:d4:df:3c:
                    61:af:86:61:1e:4b:7a:c5:e1:bd:97:79:2b:a1:e0:
                    d1:06:71:38:26:c7:67:6b:6a:0c:b9:23:a2:a2:b3:
                    6e:a8:37:7a:fc:13:74:5b:85:a6:19:16:e8:45:18:
                    6b:aa:b1:72:c5:d4:34:d7:35:44:c3:ef:04:1f:96:
                    54:16:cf:50:26:93:e6:45:0b:4f:27:a5:84:2c:ef:
                    ad:6c:3b:a5:15:f1:62:d8:73:90:e4:a4:55:93:2d:
                    fe:4a:88:3c:af:48:58:cb:0f:61:50:76:56:43:2b:
                    72:21:42:b8:87:b7:74:a8:4d:fa:82:1c:22:af:a0:
                    e1:b8:d1:e0:48:37:ef:77:9e:20:8f:de:29:c8:7b:
                    66:92:9f:c1:6a:86:ac:65:ad:28:08:a7:e4:0f:4a:
                    63:01:a1:b4:44:a2:0e:38:f8:70:9e:70:e3:48:c1:
                    57:24:0c:2d:8d:e0:0e:c3:44:d8:db:29:67:b3:f8:
                    07:2b:87:13:40:2d:f9:88:ca:41:42:bb:e1:7c:3c:
                    78:21:88:ac:e4:2d:6f:3b:de:02:76:80:40:47:cd:
                    47:dc:6b:28:af:98:9c:e8:f1:1b:cf:55:08:4a:fd:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:D0:0E:0B:BC:37:B7:C2:11:F1:47:F2:81:0F:1B:57:39:1D:BC
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sI3QDgu8N7fCEfFH8oEPG1c5Hbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:f3:da:42:76:a6:8d:90:6e:e2:ef:4e:d9:7e:bb:0a:6d:
         cb:85:88:9b:f8:d9:ec:cf:1f:7e:9b:b3:f8:4b:34:c2:a1:70:
         37:6b:dc:c7:b1:3e:85:e3:b4:69:3b:e2:53:7a:77:eb:9c:a1:
         b4:06:26:7c:af:f5:be:65:f5:70:20:82:90:70:12:f6:b0:04:
         51:37:42:69:1c:05:9b:4f:48:af:2b:06:e4:97:59:91:28:4c:
         44:a8:bc:fd:f4:0f:03:7a:3d:a7:b2:a4:34:17:8d:5a:9b:ba:
         3d:f5:25:ed:64:64:44:da:0e:2a:33:e9:8b:13:5d:66:d5:d6:
         09:00:4e:b8:84:fb:29:8a:95:be:10:20:b2:6e:41:44:4c:4f:
         47:84:09:e1:65:de:9a:e0:f8:a9:b0:a2:3a:8d:e5:05:08:47:
         9e:d5:75:47:c3:ef:40:79:95:06:55:f6:3e:37:3f:06:6d:79:
         e7:d4:1c:38:f2:6e:a0:36:7b:55:1a:28:d5:7c:ec:39:13:34:
         8e:81:62:68:20:93:32:29:51:8a:0c:3a:b9:68:8e:ef:67:1c:
         c0:c3:53:43:13:d4:da:58:d8:a9:16:49:14:3c:c7:94:ee:15:
         a3:02:65:97:41:76:14:3a:6e:c5:38:37:de:55:6e:0c:fb:76:
         51:29:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----