Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/E5EdHA_f1gA_5fkCsDBkrydmLG0.roa
File:                     E5EdHA_f1gA_5fkCsDBkrydmLG0.roa (raw, json)
Hash identifier:          2S0fFjNYbKwYoq404CTRJWg0/JUwzXeX3cxlvpg76j8=
Subject key identifier:   13:91:1D:1C:0F:DF:D6:00:3F:E5:F9:02:B0:30:64:AF:27:66:2C:6D
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05E2F9DB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/E5EdHA_f1gA_5fkCsDBkrydmLG0.roa
Signing time:             Thu 14 Apr 2022 07:54:58 +0000
ROA not before:           Thu 14 Apr 2022 07:54:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98761179 (0x5e2f9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 14 07:54:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13911d1c0fdfd6003fe5f902b03064af27662c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:2f:a4:4b:a7:bf:e5:d3:52:a3:5b:95:09:
                    90:cb:70:44:c9:2f:11:b6:59:40:d2:5d:88:ad:68:
                    5a:44:33:9c:2e:c8:81:4c:3c:63:c9:f3:6d:f6:ac:
                    bd:2a:9b:40:48:b0:ed:3d:a3:c6:34:62:01:c2:87:
                    ea:11:2d:96:bb:db:c1:a8:61:98:0a:14:54:b2:9b:
                    5b:a6:06:94:98:57:dc:00:c3:aa:24:cc:bc:06:85:
                    6f:6f:64:f3:39:a1:54:22:44:b6:fc:2d:fb:59:37:
                    b2:1e:71:be:c9:33:2b:c9:1a:29:e0:03:6a:e9:80:
                    4c:dd:31:7e:98:f3:99:d4:65:90:62:ee:9e:24:47:
                    fd:49:1a:f4:e5:fd:51:08:bb:7d:dd:9f:a7:44:18:
                    9d:fa:9c:f7:87:5d:36:7f:d2:13:89:54:29:38:d6:
                    5f:d3:a0:6f:76:f9:8f:6a:5c:3c:fb:af:8f:0d:d7:
                    d1:b6:90:73:e2:44:cf:cf:0b:3e:5f:d4:f5:2a:83:
                    06:9a:5a:0c:6e:bb:2e:db:8c:09:b6:a4:dd:ee:df:
                    25:a8:8a:b4:6a:24:aa:a2:f7:03:6e:58:80:5c:e0:
                    45:6e:50:fa:ab:3e:1c:76:85:31:93:02:58:21:a0:
                    1f:a9:c7:19:ef:41:9c:05:ab:6b:0a:f5:00:4e:78:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:1D:1C:0F:DF:D6:00:3F:E5:F9:02:B0:30:64:AF:27:66:2C:6D
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/E5EdHA_f1gA_5fkCsDBkrydmLG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:73:84:01:15:5e:f9:91:a3:f8:36:dc:c5:be:c8:49:00:
         cc:53:c8:35:c3:5a:7b:61:b3:dc:c0:96:4d:a3:6a:06:b4:cb:
         76:c9:b1:95:4a:17:c9:b7:e4:d3:74:7f:7b:fd:2b:ea:56:95:
         01:93:09:3b:35:15:84:d2:07:75:98:47:62:39:a5:e3:c1:fa:
         e7:f1:92:60:c1:91:b5:a4:e9:df:84:58:29:c2:f0:ac:1c:70:
         4a:bc:81:ba:d3:8d:86:b0:f1:45:cf:5e:81:92:ee:f2:e0:41:
         02:c6:36:ed:31:58:99:90:b6:10:85:a3:b0:16:52:0f:1a:60:
         ed:84:84:27:9e:36:a2:3e:32:64:da:dd:2c:3f:0b:2c:30:55:
         73:5b:e3:98:eb:d0:b9:65:61:f3:ee:dd:84:87:62:23:11:21:
         a5:7e:58:47:67:52:56:cd:8d:9f:0e:72:dc:04:79:cf:a7:f2:
         7f:c8:55:8a:1f:c9:fd:32:a4:d4:d8:2b:a3:48:5a:ec:70:76:
         78:3c:be:10:96:34:82:c7:11:c0:82:f2:3f:84:82:df:2a:67:
         46:7e:ca:f4:81:00:b4:f8:10:26:42:66:2d:b0:b1:7b:c4:a8:
         1e:be:77:ed:f2:9c:f2:ef:e6:6f:41:4b:65:39:8e:77:09:1b:
         42:c4:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----