Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7lXtwBClrhZdQl33_m9zBs4o5vY.roa
File:                     7lXtwBClrhZdQl33_m9zBs4o5vY.roa (raw, json)
Hash identifier:          GZf9gmMeKEr7OaTaqZ5HV8Ik+KhweXQotjgHemjdHkw=
Subject key identifier:   EE:55:ED:C0:10:A5:AE:16:5D:42:5D:F7:FE:6F:73:06:CE:28:E6:F6
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0873268D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7lXtwBClrhZdQl33_m9zBs4o5vY.roa
Signing time:             Mon 13 Jun 2022 16:10:44 +0000
ROA not before:           Mon 13 Jun 2022 16:10:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141764237 (0x873268d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 13 16:10:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee55edc010a5ae165d425df7fe6f7306ce28e6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:6a:a5:5b:11:23:27:38:f4:2b:7a:cf:e1:
                    3b:f3:d3:ba:85:71:76:ce:99:ca:7e:a6:d6:50:65:
                    52:61:64:dd:65:86:4d:66:cc:c8:f2:96:78:c9:db:
                    5c:ca:7a:e4:a1:02:92:19:e4:d4:c4:ad:f5:15:63:
                    40:f4:55:37:fe:90:33:4f:c1:f8:ee:bd:8b:be:d7:
                    f8:be:66:56:1e:70:2d:0d:57:50:67:15:6a:79:e5:
                    4b:d0:e3:a8:74:83:ac:cf:54:f5:e9:a7:9a:10:05:
                    3c:0c:15:17:8e:bc:6d:53:6d:eb:c3:ea:df:bd:bd:
                    0f:f2:05:86:e0:ca:41:10:c6:49:4b:dd:43:9a:b5:
                    01:82:71:dc:c7:1c:81:17:3d:c3:30:05:66:cb:f7:
                    db:63:91:0b:94:af:bc:18:b1:95:83:68:6b:0e:46:
                    90:06:da:d8:16:05:8f:1a:5e:34:34:a6:3a:89:06:
                    a7:27:30:b3:79:1c:06:32:a7:d7:3d:33:6c:bd:7d:
                    3e:a1:1d:ba:87:83:76:05:bc:69:d7:51:19:d1:57:
                    a5:00:be:68:e9:4a:2a:c8:8f:3b:d6:ff:fd:c6:22:
                    86:f6:7f:35:b5:31:ff:4b:b9:53:b9:4f:1c:8a:ac:
                    52:65:23:8b:c8:ad:4f:0d:63:30:17:f6:e6:d5:04:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:ED:C0:10:A5:AE:16:5D:42:5D:F7:FE:6F:73:06:CE:28:E6:F6
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7lXtwBClrhZdQl33_m9zBs4o5vY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:03:42:0a:3e:6c:14:6d:eb:40:be:54:b5:35:03:ef:dd:
         64:e9:42:19:0c:63:34:b2:2f:ec:58:b6:43:06:6c:78:20:c4:
         cc:b9:53:fb:19:33:0c:09:f9:d5:57:7d:93:0d:b8:e4:f8:7f:
         28:4b:71:7d:e9:7d:b9:f7:ac:82:f6:0f:80:2e:7a:f6:11:9d:
         0b:82:2c:18:d8:39:66:11:1b:e8:ef:6d:f3:b2:78:db:b2:d1:
         d8:33:43:0c:80:05:21:7a:5c:89:c7:b5:5c:29:19:58:5a:3f:
         98:bb:85:e9:46:0b:91:11:5b:62:af:b6:11:96:0a:cd:5e:f2:
         93:9a:cf:e5:03:52:91:ad:cf:6b:0c:53:62:43:76:37:05:37:
         84:e0:8a:19:a1:c3:ef:bd:1b:d9:94:1b:bf:5c:a4:2c:56:85:
         d7:96:31:2f:dc:6a:2b:ff:7c:50:96:32:2a:59:c2:9c:95:a2:
         35:d5:59:54:ee:6f:0e:a6:4f:3b:f1:a3:86:bf:55:57:9d:8b:
         77:28:5b:4c:06:c8:25:92:97:94:98:d0:83:87:0a:41:a0:b1:
         cc:9c:89:13:8b:21:00:e1:84:7a:6d:83:43:15:e6:b6:0a:0b:
         ca:4a:53:d4:1a:c0:04:51:2f:35:61:e2:0e:c8:44:58:a1:68:
         75:29:15:9e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECHMmjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MzE2MTA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWU1NWVkYzAxMGE1
YWUxNjVkNDI1ZGY3ZmU2ZjczMDZjZTI4ZTZmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANAPaqVbESMnOPQres/hO/PTuoVxds6Zyn6m1lBlUmFk3WWG
TWbMyPKWeMnbXMp65KECkhnk1MSt9RVjQPRVN/6QM0/B+O69i77X+L5mVh5wLQ1X
UGcVannlS9DjqHSDrM9U9emnmhAFPAwVF468bVNt68Pq3729D/IFhuDKQRDGSUvd
Q5q1AYJx3MccgRc9wzAFZsv322ORC5SvvBixlYNoaw5GkAba2BYFjxpeNDSmOokG
pycws3kcBjKn1z0zbL19PqEduoeDdgW8addRGdFXpQC+aOlKKsiPO9b//cYihvZ/
NbUx/0u5U7lPHIqsUmUji8itTw1jMBf25tUEgWkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTuVe3AEKWuFl1CXff+b3MGzijm9jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzdsWHR3QkNscmhaZFFsMzNfbTl6QnM0bzV2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAOIQNCCj5sFG3rQL5UtTUD791k6UIZDGM0si/s
WLZDBmx4IMTMuVP7GTMMCfnVV32TDbjk+H8oS3F96X2596yC9g+ALnr2EZ0LgiwY
2DlmERvo723zsnjbstHYM0MMgAUhelyJx7VcKRlYWj+Yu4XpRguREVtir7YRlgrN
XvKTms/lA1KRrc9rDFNiQ3Y3BTeE4IoZocPvvRvZlBu/XKQsVoXXljEv3Gor/3xQ
ljIqWcKclaI11VlU7m8Opk878aOGv1VXnYt3KFtMBsglkpeUmNCDhwpBoLHMnIkT
iyEA4YR6bYNDFea2CgvKSlPUGsAEUS81YeIOyERYoWh1KRWe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org