Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ENEnjIX6SCOEDA1NR6L5iVd4cFs.roa
File:                     ENEnjIX6SCOEDA1NR6L5iVd4cFs.roa (raw, json)
Hash identifier:          piR05vFTewi8N9RieQNghNgZArpP1jntOyiHHLzOyVU=
Subject key identifier:   10:D1:27:8C:85:FA:48:23:84:0C:0D:4D:47:A2:F9:89:57:78:70:5B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0469B5A5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ENEnjIX6SCOEDA1NR6L5iVd4cFs.roa
Signing time:             Tue 22 Feb 2022 04:29:43 +0000
ROA not before:           Tue 22 Feb 2022 04:29:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74036645 (0x469b5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 22 04:29:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10d1278c85fa4823840c0d4d47a2f9895778705b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:8a:83:2b:b6:c0:e6:20:65:19:d2:62:48:
                    18:b8:ad:c1:6d:ca:81:2a:fd:8b:7e:d4:fa:30:76:
                    46:3c:00:74:06:d8:6c:d0:07:d5:bc:f0:5e:6b:e7:
                    72:2b:af:0e:6c:b8:63:f7:8c:01:48:0f:a2:c5:2b:
                    05:7c:6b:c4:08:04:1d:4e:07:1a:96:31:52:f0:07:
                    10:d2:5b:0b:e0:64:30:63:aa:8b:be:38:e5:cc:e9:
                    04:9f:f8:86:d9:86:16:32:05:2a:4d:c9:fe:93:d8:
                    2e:e8:cf:3c:5a:b3:d2:eb:3f:73:ec:9d:ea:ba:f2:
                    7a:62:59:27:76:0b:37:40:15:30:d9:b8:1e:50:71:
                    a0:d3:61:11:9a:73:98:21:10:63:9e:2e:32:28:d5:
                    6c:09:56:69:09:74:e5:e3:85:14:62:5e:8a:15:e7:
                    c6:c1:f3:fe:e9:5d:86:7a:5a:4b:d9:25:2b:56:20:
                    88:64:6b:16:c5:0e:57:ae:27:42:82:d6:c3:7b:82:
                    a2:cd:84:19:3f:37:de:f1:75:4f:08:19:f4:f9:b6:
                    a6:07:21:33:f4:1c:7f:92:2a:de:99:b0:b5:14:b2:
                    84:81:48:e1:0f:93:28:bf:e4:07:37:48:be:11:c2:
                    6a:83:5b:71:09:96:ca:d0:47:67:db:16:aa:63:76:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D1:27:8C:85:FA:48:23:84:0C:0D:4D:47:A2:F9:89:57:78:70:5B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ENEnjIX6SCOEDA1NR6L5iVd4cFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:d6:5e:7a:3a:51:a5:1c:f1:80:08:8d:6b:cb:84:34:1c:
         6e:f8:95:9c:dc:d8:bf:60:c5:67:aa:4e:30:94:78:0c:5b:23:
         ed:32:45:7a:a5:23:cb:1f:35:d1:08:54:13:e6:2a:3b:d3:62:
         1d:4d:e3:1a:9a:4a:13:ab:52:f2:92:d1:4d:cc:c1:b2:da:32:
         6b:30:f1:72:cd:4f:b8:82:5e:93:21:73:c0:51:ce:02:8a:d6:
         f9:5e:83:6a:1b:ab:31:de:4e:87:7f:41:2b:9d:c6:61:25:fb:
         2b:18:82:63:c9:50:9d:9a:b9:36:fb:11:3d:68:08:8e:aa:50:
         fe:4e:00:96:2c:65:7c:5c:e1:8e:20:5d:9e:6b:74:ca:36:48:
         c6:57:1f:bc:d3:7f:10:c4:b8:67:52:5e:cc:36:c9:a0:28:35:
         8d:61:6f:30:8f:60:84:27:85:78:0c:66:8e:53:f7:ee:16:f4:
         36:ac:cf:78:93:94:d8:f1:b0:49:c8:d1:c9:b4:b8:5a:9c:31:
         9b:9a:eb:49:b1:c7:b3:35:c3:90:a0:8c:f4:c1:9f:c7:e7:5a:
         30:32:26:36:39:38:51:fb:8d:40:09:46:57:c0:d5:83:e1:fb:
         25:e9:b9:2e:2c:a8:04:28:3d:96:4c:a0:7b:54:6a:09:ab:c4:
         b2:1b:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org