Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7SVJRlFVlIddPbJfGuObR9zK8jI.roa
File:                     7SVJRlFVlIddPbJfGuObR9zK8jI.roa (raw, json)
Hash identifier:          p7pGD8L4O4dltqzBxJbJSw6SZRE/4FDqFgmMwkkHZoI=
Subject key identifier:   ED:25:49:46:51:55:94:87:5D:3D:B2:5F:1A:E3:9B:47:DC:CA:F2:32
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07BB5B3C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7SVJRlFVlIddPbJfGuObR9zK8jI.roa
Signing time:             Mon 30 May 2022 04:45:16 +0000
ROA not before:           Mon 30 May 2022 04:45:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129719100 (0x7bb5b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 30 04:45:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed254946515594875d3db25f1ae39b47dccaf232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:25:8a:97:93:b4:fe:5c:91:92:11:8e:85:
                    34:ea:e5:e6:12:ac:56:cd:5f:37:76:62:8e:6e:89:
                    bf:17:ff:c3:9c:6f:6b:52:7a:e6:68:76:78:94:67:
                    60:f5:3b:1c:a1:4b:4f:fa:fc:5a:73:d6:8f:e6:6a:
                    59:e5:e5:3b:39:69:20:06:72:40:8d:2f:55:88:97:
                    97:ed:fd:70:4b:21:8e:42:76:16:d3:d6:29:97:bd:
                    ed:db:b7:ae:34:f4:c3:dd:e6:d5:21:7f:5e:19:1f:
                    1c:02:9b:32:e3:e2:55:57:e1:32:9d:e2:8a:91:5b:
                    db:c4:1d:d2:93:b1:d7:40:63:fc:32:b3:92:3e:22:
                    06:0d:81:05:e8:ee:5c:d8:27:41:31:47:cc:2a:ff:
                    f0:09:81:de:27:e6:7e:e5:cc:45:dd:a0:28:c8:66:
                    ff:56:09:2a:88:c9:04:8e:f9:7a:69:da:56:08:87:
                    21:60:42:a3:f2:b4:72:3d:0c:90:48:32:ff:0f:20:
                    8f:a5:83:9c:9e:fb:a8:53:54:3f:1c:c0:85:5e:a8:
                    54:0e:f2:0f:28:85:b1:f7:8a:66:e5:0e:af:cc:e0:
                    c6:f4:be:4d:1a:d2:b4:6c:c4:b4:74:89:f8:fa:c4:
                    49:ed:40:f9:b3:74:6a:bf:91:0b:a7:f2:36:23:7f:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:25:49:46:51:55:94:87:5D:3D:B2:5F:1A:E3:9B:47:DC:CA:F2:32
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7SVJRlFVlIddPbJfGuObR9zK8jI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:60:b9:8b:64:46:e0:34:7e:9a:8a:07:5f:5d:d7:00:eb:b1:
         88:e4:d1:6d:12:2e:2d:6d:cd:fd:48:d0:85:d9:1f:2a:7c:5f:
         13:36:d5:e8:f6:0f:45:4f:b3:f8:33:6d:d5:05:bf:28:33:49:
         12:4e:7b:d6:b5:34:88:cf:47:68:08:bc:47:cb:2d:c4:8d:a5:
         16:c2:b4:03:0c:fb:de:53:01:2b:ae:89:d4:74:81:93:fd:3a:
         3d:5f:9f:e3:2d:ab:45:aa:02:18:55:71:a1:15:8b:9a:72:64:
         0c:73:df:69:01:00:76:54:d1:09:84:ce:84:84:ee:40:2e:2c:
         68:e4:91:ec:38:f4:b5:07:78:37:cf:d5:c4:40:42:60:6f:78:
         fe:2b:10:94:42:5b:47:8f:dd:94:35:d4:a7:bd:55:e7:ef:66:
         a5:f5:3c:0b:df:aa:f9:c4:10:0c:ab:0b:5b:b1:45:38:f9:a1:
         b8:d5:00:95:4e:5f:0c:7d:cb:5b:c2:24:e7:c4:e1:90:6b:63:
         c3:21:47:02:66:97:cb:c6:8d:bb:f1:00:58:ec:4a:b1:af:af:
         fc:fe:e9:7c:54:85:05:f4:08:a7:2d:82:53:a3:f2:3b:f7:c9:
         4b:81:b4:d5:36:be:08:32:15:d5:6c:3f:24:38:10:1d:0c:ad:
         4e:9d:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:53 2024 by rpki-client on console-ams.rpki-client.org