Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EZDtxpNHQkcR0VaqWuNvpLKIIpI.roa
File:                     EZDtxpNHQkcR0VaqWuNvpLKIIpI.roa (raw, json)
Hash identifier:          DNd+4oETlEuBY+zw1rTeYQY/eCPmclZ1D4UxMJ+HJa8=
Subject key identifier:   11:90:ED:C6:93:47:42:47:11:D1:56:AA:5A:E3:6F:A4:B2:88:22:92
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181D66B5A99A38B59A6C7F14E2A0F88CA4F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EZDtxpNHQkcR0VaqWuNvpLKIIpI.roa
Signing time:             Thu 07 Jul 2022 02:09:28 +0000
ROA not before:           Thu 07 Jul 2022 02:09:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d6:6b:5a:99:a3:8b:59:a6:c7:f1:4e:2a:0f:88:ca:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  7 02:09:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1190edc69347424711d156aa5ae36fa4b2882292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c3:88:da:65:66:ad:b0:0f:f1:b0:23:ad:ca:
                    68:73:30:8f:d8:7b:88:41:73:a6:34:99:8b:77:95:
                    c5:bf:1a:f4:06:02:ff:9b:22:5b:e0:ff:16:1b:0f:
                    8f:f6:ba:3f:07:9d:0d:f1:b3:b9:01:8e:8b:5c:0b:
                    e3:8d:fc:24:36:9e:ed:ef:f2:18:6d:b0:ae:c9:66:
                    76:5b:ca:73:80:fa:8c:45:5e:1c:00:bd:0e:a7:fd:
                    6f:e9:dc:2c:5e:75:58:15:aa:80:52:52:c0:33:76:
                    82:a9:7a:4d:5c:6d:28:f5:12:d4:79:a1:f3:2b:51:
                    52:63:6a:93:0f:85:74:b8:0f:4e:19:f3:b8:27:87:
                    3a:a6:85:40:71:54:84:65:b3:43:62:c1:07:cd:e9:
                    3d:3a:43:84:6d:32:7b:c1:4b:eb:8e:61:1a:58:de:
                    92:91:36:dc:83:d4:11:b0:5f:39:cf:67:6e:b5:fa:
                    0a:0f:6e:02:bc:06:63:3f:54:e4:17:7c:aa:0f:f7:
                    a1:d1:50:00:06:6f:22:d4:e0:ca:fe:9b:86:ae:a8:
                    51:94:2c:b6:7d:46:88:9e:46:87:2b:73:c1:51:d8:
                    71:a2:36:6e:9c:6a:7e:8e:f3:0f:0c:b1:ee:8c:60:
                    09:3b:71:7d:83:28:2d:b9:61:9c:dc:1a:1b:f1:a0:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:ED:C6:93:47:42:47:11:D1:56:AA:5A:E3:6F:A4:B2:88:22:92
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EZDtxpNHQkcR0VaqWuNvpLKIIpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:9f:bb:35:76:83:20:17:0d:e9:83:71:fd:c1:86:b0:9d:
         d4:85:c9:72:a7:79:98:9d:0e:65:1d:31:6d:84:cd:06:af:87:
         bb:a1:b6:01:59:a5:73:47:1d:2c:01:67:51:74:12:92:08:57:
         d5:68:15:8a:b2:d1:e8:aa:9e:7f:23:f6:ef:dd:7d:db:63:d4:
         10:1a:08:6a:37:af:4c:98:6a:e9:b5:c7:7d:eb:32:9e:15:b1:
         5b:e5:e9:88:46:bc:d7:bf:9f:a4:08:a1:0b:a8:5d:72:9b:f1:
         e2:b2:4c:32:66:1e:76:11:5e:bd:2b:a9:e3:57:cd:56:31:89:
         a8:6f:05:75:47:59:00:e1:0d:41:dd:c5:6a:89:82:29:91:1c:
         cd:85:29:ef:36:48:04:bf:5b:bf:70:91:b1:41:a0:5f:77:f3:
         da:7a:d2:4c:e9:53:d0:8b:aa:46:f6:2a:a8:fd:99:5c:95:02:
         6f:e9:8b:42:64:d2:4d:24:0a:01:19:cc:bb:c5:fe:60:4c:85:
         7a:75:d3:37:56:b2:c3:9e:6e:5a:69:50:fb:7f:a6:94:ee:0a:
         62:cc:7c:0c:8f:e3:3a:8a:22:f9:fd:98:61:b7:6a:39:0b:ac:
         b7:f2:8d:84:0b:a8:91:ff:3b:6b:1f:22:d2:de:4a:4f:be:ee:
         7d:81:92:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHWa1qZo4tZpsfxTioPiMpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzA3MDIwOTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTkwZWRjNjkzNDc0MjQ3MTFkMTU2YWE1YWUzNmZhNGIyODgyMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8OI2mVmrbAP8bAjrcpoczCP2HuI
QXOmNJmLd5XFvxr0BgL/myJb4P8WGw+P9ro/B50N8bO5AY6LXAvjjfwkNp7t7/IY
bbCuyWZ2W8pzgPqMRV4cAL0Op/1v6dwsXnVYFaqAUlLAM3aCqXpNXG0o9RLUeaHz
K1FSY2qTD4V0uA9OGfO4J4c6poVAcVSEZbNDYsEHzek9OkOEbTJ7wUvrjmEaWN6S
kTbcg9QRsF85z2dutfoKD24CvAZjP1TkF3yqD/eh0VAABm8i1ODK/puGrqhRlCy2
fUaInkaHK3PBUdhxojZunGp+jvMPDLHujGAJO3F9gygtuWGc3Bob8aA5dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGQ7caTR0JHEdFWqlrjb6SyiCKSMB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvRVpEdHhwTkhRa2NSMFZhcVd1TnZwTEtJSXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9ggMA0G
CSqGSIb3DQEBCwUAA4IBAQAO3p+7NXaDIBcN6YNx/cGGsJ3Uhclyp3mYnQ5lHTFt
hM0Gr4e7obYBWaVzRx0sAWdRdBKSCFfVaBWKstHoqp5/I/bv3X3bY9QQGghqN69M
mGrptcd96zKeFbFb5emIRrzXv5+kCKELqF1ym/HiskwyZh52EV69K6njV81WMYmo
bwV1R1kA4Q1B3cVqiYIpkRzNhSnvNkgEv1u/cJGxQaBfd/PaetJM6VPQi6pG9iqo
/ZlclQJv6YtCZNJNJAoBGcy7xf5gTIV6ddM3VrLDnm5aaVD7f6aU7gpizHwMj+M6
iiL5/Zhht2o5C6y38o2EC6iR/ztrHyLS3kpPvu59gZLJ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org