Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Belq2oKSvP1FZMnV5cLV4LowqvE.roa
File:                     Belq2oKSvP1FZMnV5cLV4LowqvE.roa (raw, json)
Hash identifier:          3tTrmNSqitSQ0MdP6sVJeCGe404v949l9fExZTdpn3A=
Subject key identifier:   05:E9:6A:DA:82:92:BC:FD:45:64:C9:D5:E5:C2:D5:E0:BA:30:AA:F1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       046ED3ED
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Belq2oKSvP1FZMnV5cLV4LowqvE.roa
Signing time:             Wed 23 Feb 2022 01:49:08 +0000
ROA not before:           Wed 23 Feb 2022 01:49:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74372077 (0x46ed3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 23 01:49:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05e96ada8292bcfd4564c9d5e5c2d5e0ba30aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:25:af:e7:3e:4d:cd:01:83:59:3c:1c:a7:
                    63:19:7e:35:d7:ac:1b:d7:c5:35:b7:b0:dd:bb:ef:
                    66:3a:a8:e9:16:66:58:86:fe:26:c0:01:ca:b6:27:
                    37:13:01:13:23:b8:af:40:f0:5a:dc:e5:13:94:3d:
                    ec:f1:29:39:c4:71:69:fc:04:bc:ae:5d:56:be:90:
                    4e:87:05:5c:9b:d1:1b:05:27:6e:a0:0a:6c:b7:4e:
                    2e:7e:5c:49:34:28:2a:8c:a5:02:86:2f:93:74:53:
                    1a:14:c9:f5:4a:7b:4b:22:7e:dc:b2:9c:c4:95:1a:
                    19:ad:86:7b:e6:69:5a:f6:7d:32:18:34:88:a8:74:
                    9d:0d:6d:cb:a7:92:9b:a6:9d:4a:1b:cd:f9:75:63:
                    3a:54:37:09:a1:3d:02:a0:3a:fb:7e:49:a0:c3:e0:
                    00:a8:89:ee:59:f5:b9:db:a6:75:12:92:c0:6c:b1:
                    4d:91:e6:b8:ad:5a:35:55:08:0a:62:ca:9a:25:0d:
                    b7:65:08:18:1c:66:bb:a6:f6:3c:47:01:ac:13:4a:
                    b7:9f:36:38:80:17:29:41:8d:bb:d8:94:c0:37:db:
                    e6:e0:66:d3:a8:73:8f:87:b3:b9:ef:6a:0f:d6:52:
                    06:5d:39:10:df:55:37:48:81:cc:8f:8d:a8:ac:28:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:6A:DA:82:92:BC:FD:45:64:C9:D5:E5:C2:D5:E0:BA:30:AA:F1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Belq2oKSvP1FZMnV5cLV4LowqvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:67:ca:f8:53:65:2c:da:d4:12:7a:21:03:ce:25:9e:d4:60:
         d4:f8:a3:cb:17:95:e9:24:91:52:22:f8:1b:08:ea:d3:7e:87:
         1b:89:8d:f4:b2:64:42:4d:2d:93:ac:4b:a7:bc:25:31:91:d4:
         a6:a5:7a:db:85:8a:d8:52:6f:8d:73:70:d7:8d:39:9f:67:93:
         18:91:62:23:93:ba:cd:a4:42:ed:8a:9d:65:2f:57:60:fe:77:
         d5:f9:fc:fd:73:e8:04:da:ff:be:5e:89:1a:99:e8:40:3e:31:
         6e:96:b4:cc:52:8c:4f:05:ed:cb:01:85:da:eb:b5:cd:58:80:
         2f:6d:ec:05:15:41:39:c7:dd:eb:e8:36:dd:35:a4:6f:21:71:
         4e:98:8c:d2:76:a0:d3:9c:b4:67:65:9e:48:f0:bf:a1:40:19:
         91:d2:2f:17:84:48:f7:d8:c2:89:bd:d6:12:a9:21:65:f7:c0:
         11:f2:94:28:de:18:9b:77:f1:e1:c6:94:f5:9a:43:1b:64:69:
         c0:a3:af:c6:7f:86:52:f7:83:57:90:1d:4a:fd:5f:45:60:cd:
         63:81:0d:46:76:ec:64:d2:d2:5e:09:c9:60:31:d2:1a:47:e3:
         e9:a5:d4:ab:35:27:16:cb:fe:f2:29:cb:21:52:a7:c7:bb:17:
         45:38:ec:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBG7T7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIy
MzAxNDkwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDVlOTZhZGE4Mjky
YmNmZDQ1NjRjOWQ1ZTVjMmQ1ZTBiYTMwYWFmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/WJa/nPk3NAYNZPBynYxl+NdesG9fFNbew3bvvZjqo6RZm
WIb+JsAByrYnNxMBEyO4r0DwWtzlE5Q97PEpOcRxafwEvK5dVr6QTocFXJvRGwUn
bqAKbLdOLn5cSTQoKoylAoYvk3RTGhTJ9Up7SyJ+3LKcxJUaGa2Ge+ZpWvZ9Mhg0
iKh0nQ1ty6eSm6adShvN+XVjOlQ3CaE9AqA6+35JoMPgAKiJ7ln1udumdRKSwGyx
TZHmuK1aNVUICmLKmiUNt2UIGBxmu6b2PEcBrBNKt582OIAXKUGNu9iUwDfb5uBm
06hzj4ezue9qD9ZSBl05EN9VN0iBzI+NqKwoOP0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQF6WragpK8/UVkydXlwtXgujCq8TAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0JlbHEyb0tTdlAxRlpNblY1Y0xWNExvd3F2RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCDZ8r4U2Us2tQSeiEDziWe1GDU+KPLF5XpJJFS
IvgbCOrTfocbiY30smRCTS2TrEunvCUxkdSmpXrbhYrYUm+Nc3DXjTmfZ5MYkWIj
k7rNpELtip1lL1dg/nfV+fz9c+gE2v++XokamehAPjFulrTMUoxPBe3LAYXa67XN
WIAvbewFFUE5x93r6DbdNaRvIXFOmIzSdqDTnLRnZZ5I8L+hQBmR0i8XhEj32MKJ
vdYSqSFl98AR8pQo3hibd/HhxpT1mkMbZGnAo6/Gf4ZS94NXkB1K/V9FYM1jgQ1G
duxk0tJeCclgMdIaR+PppdSrNScWy/7yKcshUqfHuxdFOOyl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org