Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BSMWl85k4kcqW94NPVIMeIomNqQ.roa
File:                     BSMWl85k4kcqW94NPVIMeIomNqQ.roa (raw, json)
Hash identifier:          Ce2v/P3/rNYNCbUPLnTRl0rebZ907Jya37YCYO9j/gk=
Subject key identifier:   05:23:16:97:CE:64:E2:47:2A:5B:DE:0D:3D:52:0C:78:8A:26:36:A4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       075AAA55
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BSMWl85k4kcqW94NPVIMeIomNqQ.roa
Signing time:             Mon 23 May 2022 00:50:19 +0000
ROA not before:           Mon 23 May 2022 00:50:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123382357 (0x75aaa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 23 00:50:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05231697ce64e2472a5bde0d3d520c788a2636a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:a8:9c:27:49:a4:d0:c1:7d:ec:d1:bf:5b:
                    85:80:9e:30:e6:14:55:51:f6:25:ee:db:e6:0a:15:
                    06:14:4b:50:0c:72:51:d0:49:04:3e:93:42:70:de:
                    bb:63:5f:eb:a6:80:b5:87:1e:f7:9c:16:42:4c:fd:
                    8c:db:73:ce:b5:bf:03:c1:da:88:59:71:db:46:47:
                    08:14:52:5d:dd:7a:5b:55:5e:4f:29:b2:f9:f6:03:
                    c3:ea:2e:fa:38:ce:d4:68:a0:fa:55:c4:f6:bb:a8:
                    40:01:ca:c6:f1:5d:62:f8:f5:33:0f:23:c8:f4:2b:
                    b8:78:a9:e7:81:6b:7a:43:46:a5:c5:ed:da:ce:10:
                    d5:ff:29:1b:4f:2a:fc:55:90:41:29:2b:dc:db:da:
                    88:31:c3:ba:5c:59:23:c2:9e:28:23:24:f7:1b:f0:
                    0a:d2:d3:43:12:b5:55:16:d5:64:b4:13:dc:cd:57:
                    ef:fa:18:e2:74:b2:e3:c4:36:32:b4:b4:43:23:94:
                    27:98:c0:5d:b6:50:bd:ad:2a:35:7f:1b:be:dc:d6:
                    4b:a4:d4:68:e5:8c:15:49:9a:0e:cd:36:12:ee:b3:
                    8f:f6:52:2f:f4:36:a5:c8:6a:9c:8d:b5:71:86:12:
                    60:7d:48:cb:ee:b8:94:ec:00:f3:36:a2:16:2b:20:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:23:16:97:CE:64:E2:47:2A:5B:DE:0D:3D:52:0C:78:8A:26:36:A4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BSMWl85k4kcqW94NPVIMeIomNqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:24:e1:24:ca:89:2c:00:28:8d:b3:50:1d:e8:f9:e8:55:
         06:ea:ad:a0:9a:83:d5:e2:d4:cf:6a:12:2d:7c:ce:1c:2a:33:
         f3:5a:c5:ef:4c:ca:9f:08:cd:01:b2:07:d3:ac:bc:1c:d8:ca:
         d1:bd:9a:db:ad:62:29:26:21:05:f8:86:be:40:c8:87:7f:f1:
         7c:3b:ee:ac:46:b5:31:29:33:8c:7b:7f:2d:b3:31:03:2f:c1:
         c6:4a:14:62:01:ae:73:d8:39:78:c0:9a:9e:81:be:0c:a2:6f:
         75:b4:4d:5b:f6:bd:1e:e4:50:1d:e7:7e:bf:a4:b6:73:c4:7e:
         61:b7:35:23:13:80:3e:b8:73:89:fc:1c:70:d3:f4:33:23:6a:
         31:18:1e:79:e5:32:fa:54:a1:5e:c3:b5:ee:0d:4b:ff:68:89:
         a6:ed:2c:0c:3b:41:02:7d:11:20:82:81:62:1c:c1:35:b4:ff:
         98:06:d2:c9:fc:86:81:7e:f2:43:59:12:47:5d:e4:37:e5:05:
         79:1d:c9:8c:b1:01:cb:8a:cc:d3:20:58:9a:b3:03:a7:6e:e3:
         64:ec:cc:d2:7e:2a:c6:ac:0d:ac:9b:e5:c0:de:9c:45:c1:69:
         97:ae:70:71:75:7c:7c:e1:d7:ee:d3:a4:ba:48:73:b6:8c:f2:
         a4:f4:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org