Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cl-pjRwhBT0D9nWhgCDDqZRg75w.roa
File:                     Cl-pjRwhBT0D9nWhgCDDqZRg75w.roa (raw, json)
Hash identifier:          b97+ZnrpLB+EdS1YRT9ROIQBvC1OVyaUW1+XLZS7aRM=
Subject key identifier:   0A:5F:A9:8D:1C:21:05:3D:03:F6:75:A1:80:20:C3:A9:94:60:EF:9C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07240F7B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cl-pjRwhBT0D9nWhgCDDqZRg75w.roa
Signing time:             Thu 19 May 2022 05:31:17 +0000
ROA not before:           Thu 19 May 2022 05:31:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119803771 (0x7240f7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 19 05:31:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a5fa98d1c21053d03f675a18020c3a99460ef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:ea:b9:e3:70:01:19:61:ec:8b:b0:fa:cb:
                    75:93:d9:42:e6:c7:8b:fa:32:aa:01:23:f5:31:35:
                    9e:a5:33:4d:22:b2:47:df:0c:6b:28:a8:e1:f1:3c:
                    f1:bd:ff:15:13:52:4f:ec:47:6f:a0:98:eb:1e:8d:
                    2c:fb:85:4d:c4:e3:9f:a7:e3:90:2f:b8:85:12:3e:
                    28:55:81:d9:aa:65:6b:ae:03:ed:33:6a:c1:a3:a2:
                    87:b1:81:57:82:65:0f:a6:ec:a5:69:2b:c7:ab:c4:
                    fd:67:17:40:34:79:62:a5:cd:72:22:31:9f:74:cf:
                    e5:ed:1d:17:b6:7e:5f:fd:1e:90:d4:93:d7:15:96:
                    88:1f:4f:bf:7d:51:ba:00:a8:c5:19:90:aa:21:a6:
                    fb:15:1e:bf:1e:97:c9:45:57:bd:b7:b9:de:93:18:
                    df:bd:e3:4f:cd:b7:09:3c:74:c0:6c:12:3b:08:09:
                    b2:b6:55:6a:55:09:c4:65:be:bb:b9:55:3d:37:21:
                    93:63:c4:ac:55:a7:14:51:cc:e9:e6:16:11:16:11:
                    a2:d1:99:55:7a:18:be:b0:ce:63:d3:c5:0a:e4:38:
                    8c:d0:5e:21:98:75:7a:78:03:93:6f:3d:01:5d:36:
                    fb:88:aa:6b:f1:75:df:84:e4:84:1d:0c:8c:87:52:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:A9:8D:1C:21:05:3D:03:F6:75:A1:80:20:C3:A9:94:60:EF:9C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cl-pjRwhBT0D9nWhgCDDqZRg75w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:e9:8c:f2:c9:8e:4d:ee:ae:e7:ec:12:f8:b8:cd:f3:60:
         49:f4:29:8d:b8:5e:90:eb:5c:f7:c5:7c:22:fd:6c:69:cd:18:
         83:b5:53:d9:61:94:f2:f8:e7:67:41:f9:62:b9:05:ce:cc:c0:
         de:c8:cc:ca:19:dd:de:45:94:11:e5:4f:3b:7d:71:b9:84:b5:
         b5:68:59:78:d3:63:83:13:9d:08:e1:bd:12:9d:41:90:4a:6e:
         8a:e1:c8:64:bb:92:81:7a:e5:bf:2f:c1:b1:45:eb:0e:8c:80:
         88:05:54:3b:af:38:ee:74:02:b2:bd:89:91:e9:1a:9d:8d:f0:
         79:c4:d7:24:05:a6:a8:d8:69:5c:9c:28:a5:e9:0f:97:fb:b1:
         85:42:55:2e:45:79:6c:fd:a9:3b:b3:a0:de:61:8e:97:23:dc:
         15:da:77:90:b1:88:23:53:f1:81:5f:30:f1:ea:11:c1:64:bf:
         d3:61:49:65:35:6c:77:01:1e:41:a6:12:b7:36:e7:35:86:99:
         c3:38:85:5c:58:99:b3:89:19:cf:91:e7:12:1b:00:46:d8:3d:
         15:92:0e:40:14:5e:9e:6d:f5:16:7d:c1:e7:e1:eb:7f:5c:62:
         ad:27:ce:ab:de:8d:eb:b5:b2:36:1c:9e:17:30:d6:e0:a9:4a:
         a8:d5:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org