Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5EcMjl4-cFt_AnXzDF01wCLvOr8.roa
File:                     5EcMjl4-cFt_AnXzDF01wCLvOr8.roa (raw, json)
Hash identifier:          y49Sv4C5glUCorlEb6INVSXCjFw4kF1WIygVkB6Zm6U=
Subject key identifier:   E4:47:0C:8E:5E:3E:70:5B:7F:02:75:F3:0C:5D:35:C0:22:EF:3A:BF
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       063A4E4F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5EcMjl4-cFt_AnXzDF01wCLvOr8.roa
Signing time:             Tue 26 Apr 2022 04:51:10 +0000
ROA not before:           Tue 26 Apr 2022 04:51:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104484431 (0x63a4e4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 26 04:51:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4470c8e5e3e705b7f0275f30c5d35c022ef3abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f8:e6:c9:40:b3:82:f3:c0:80:bf:c7:f7:ee:
                    f3:49:ae:fd:73:ca:65:54:df:51:b9:0b:c4:6d:f5:
                    b1:65:98:64:c1:da:c9:5e:f5:de:d8:d1:f5:6c:78:
                    9d:31:c6:68:b2:b1:f5:d7:ba:26:08:3d:13:df:66:
                    51:f3:8f:91:c2:40:62:5b:47:c4:d1:77:ea:e1:a9:
                    02:4e:5f:41:26:63:8a:0a:1f:bc:b2:20:a5:06:4f:
                    ac:5c:d6:b5:8b:c6:f6:06:28:55:7c:ad:b7:45:3a:
                    7c:85:a3:ed:ac:5d:63:ea:9e:d2:f4:ce:a1:02:db:
                    05:79:f6:70:99:80:48:22:a4:83:5e:17:b6:88:b1:
                    91:71:e2:36:15:ab:01:05:13:02:1a:c4:e1:16:5a:
                    4b:24:86:dd:43:29:bb:e0:a7:28:25:dc:d3:1d:7e:
                    25:04:6d:03:24:bb:3b:38:f2:26:0d:c5:39:a7:60:
                    a5:fd:64:ce:09:e8:ef:3d:6d:5d:e2:1e:a7:ab:c0:
                    26:76:72:20:15:f4:0d:bf:bd:43:1a:bb:7b:88:0c:
                    b2:3a:ae:37:9a:70:eb:5b:81:ce:d7:ee:d3:e0:c7:
                    7e:f2:4f:a4:5c:93:a9:f7:3b:d3:c0:00:63:dd:71:
                    b3:cb:7f:3a:07:52:1d:8d:af:6f:0d:0a:a4:0d:11:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:0C:8E:5E:3E:70:5B:7F:02:75:F3:0C:5D:35:C0:22:EF:3A:BF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5EcMjl4-cFt_AnXzDF01wCLvOr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:3a:3d:48:85:8c:12:3b:16:2e:11:e9:ab:7a:06:d3:6a:
         cb:e1:01:ce:71:be:ca:42:c7:a1:02:43:c6:2a:be:58:d7:be:
         bd:a6:83:03:06:00:ce:7f:1e:10:62:81:87:7c:69:13:dd:27:
         cd:d4:31:2b:04:8d:f1:a1:ec:48:7e:31:b8:ac:cc:fc:a7:80:
         f3:5a:53:c4:1a:48:53:1c:2e:1a:4a:b3:8d:6f:35:20:9f:ad:
         fc:8a:35:23:08:29:95:de:d1:36:c2:e5:70:c4:d5:1b:72:9d:
         40:23:7e:a0:d8:cd:32:2c:da:73:a7:9a:4b:dd:cb:62:37:73:
         35:f0:cb:96:ab:15:25:10:9f:c0:c5:8b:8d:70:d1:fd:d4:32:
         5d:1e:63:c8:ae:90:e2:b1:d4:17:8c:f9:0a:d9:fe:eb:ee:bf:
         a4:fa:0c:0a:60:a7:d0:91:a8:6e:a9:b0:85:84:a9:8e:fb:d5:
         6d:c4:3f:d6:48:23:b3:f2:b0:02:23:8b:df:20:5b:49:61:d5:
         a5:58:dd:8c:72:40:38:e6:27:26:f4:49:b6:6e:48:73:a7:77:
         b4:d3:6e:0a:74:62:9f:b1:6d:25:29:20:83:1a:77:45:1d:24:
         85:89:1b:c1:51:ed:48:e5:4b:83:0c:b7:24:4c:17:30:bf:8e:
         47:5e:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org