Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DhphRHo7jW7ll66pLqK5m4hoVhY.roa
File:                     DhphRHo7jW7ll66pLqK5m4hoVhY.roa (raw, json)
Hash identifier:          cl0AxKSax0V5S3W/MD4K4u5nv623T+1KxPjyPgpDZ/4=
Subject key identifier:   0E:1A:61:44:7A:3B:8D:6E:E5:97:AE:A9:2E:A2:B9:9B:88:68:56:16
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0547EDC5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DhphRHo7jW7ll66pLqK5m4hoVhY.roa
Signing time:             Wed 23 Mar 2022 12:45:35 +0000
ROA not before:           Wed 23 Mar 2022 12:45:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88600005 (0x547edc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 23 12:45:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e1a61447a3b8d6ee597aea92ea2b99b88685616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:a4:10:8c:0a:8b:39:1f:35:b6:bd:96:32:
                    7f:b1:c7:1e:14:99:53:38:f5:d9:af:2d:39:bb:68:
                    bf:24:33:79:76:4f:47:4a:d9:71:0b:0b:1b:3b:33:
                    16:f1:2c:b7:2d:58:70:48:18:5c:05:51:55:8e:85:
                    21:05:1b:b3:35:72:ad:49:9c:bb:45:91:02:ec:3d:
                    da:e7:45:07:b2:22:6a:d4:c6:71:4b:5b:6e:05:0c:
                    1b:ac:35:32:b9:6e:6d:6e:f2:0c:de:2f:f1:eb:73:
                    db:5c:fd:3b:92:b2:82:93:ae:30:3d:e4:16:be:fd:
                    ab:19:8d:38:b4:41:5b:fe:0f:cc:4e:b1:82:d9:d3:
                    33:07:98:37:85:70:59:ce:2d:0b:75:c0:a8:67:30:
                    ee:44:44:c5:0a:62:3a:63:60:ec:dc:40:08:c1:88:
                    7a:d0:c0:bb:8b:b0:fa:98:d6:1f:f9:dc:ec:90:70:
                    bd:cd:0c:40:27:ae:43:38:8b:60:a4:31:93:1f:c4:
                    6b:d9:d9:83:45:62:90:6d:7f:dc:f5:73:af:01:12:
                    0b:8b:d6:23:f2:6c:d5:2f:64:e4:88:1e:cd:c8:b9:
                    4f:cc:8d:39:1d:88:bf:e1:74:96:6b:c3:3b:a4:54:
                    32:d7:be:28:ce:0e:3c:de:4a:f0:bc:0b:72:4a:d9:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1A:61:44:7A:3B:8D:6E:E5:97:AE:A9:2E:A2:B9:9B:88:68:56:16
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DhphRHo7jW7ll66pLqK5m4hoVhY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:87:87:92:06:d5:e4:b7:0e:a0:ee:0b:2e:ea:b7:b3:82:
         61:11:12:37:9e:f9:79:f4:42:7a:35:9d:e3:0e:0a:ac:66:16:
         02:00:ea:a8:0d:20:18:3a:d5:57:06:e8:5b:49:b7:ea:be:cf:
         b9:db:8d:33:c0:15:ef:ab:77:6f:9c:b8:99:ab:58:08:55:06:
         16:2d:b8:af:dd:7f:f8:55:a3:b5:71:1a:e5:b1:ca:e6:de:79:
         c0:70:1d:fa:a7:d1:52:71:64:29:29:da:0a:22:4f:49:94:53:
         18:56:16:9b:19:41:af:6d:1f:87:bb:6f:93:1b:cf:c9:e8:91:
         4f:88:85:03:23:f0:95:11:d4:e1:77:b2:14:1f:ed:4d:42:d4:
         08:e8:25:53:ec:20:84:70:b1:c0:1a:d5:c2:86:e6:3d:3b:c3:
         56:9d:44:3e:1f:05:84:a4:17:e2:55:4b:57:77:88:13:19:b9:
         0e:c8:89:a9:09:17:e6:a9:22:c7:af:c0:d5:ff:0f:99:2a:a6:
         02:25:a3:47:09:b4:eb:ad:75:f7:65:1c:a0:2b:e9:bf:73:dc:
         13:78:9e:01:c9:e6:06:6d:c2:e4:ac:3c:58:82:7b:7c:fc:ef:
         95:63:b5:ec:bf:83:bf:bd:ca:8c:db:fc:4f:6f:c0:5e:b5:76:
         dc:9a:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----