Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Eq9VOs6wZzoJCsIfBfb4SL0tN7E.roa
File:                     Eq9VOs6wZzoJCsIfBfb4SL0tN7E.roa (raw, json)
Hash identifier:          0K6k1nrVr5aLX5cQu27vG4Kgyjo7YAhy4W082XFC4gA=
Subject key identifier:   12:AF:55:3A:CE:B0:67:3A:09:0A:C2:1F:05:F6:F8:48:BD:2D:37:B1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181E631AA520682DD97F01CDDC7E9DA1709
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Eq9VOs6wZzoJCsIfBfb4SL0tN7E.roa
Signing time:             Sun 10 Jul 2022 03:40:23 +0000
ROA not before:           Sun 10 Jul 2022 03:40:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e6:31:aa:52:06:82:dd:97:f0:1c:dd:c7:e9:da:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul 10 03:40:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12af553aceb0673a090ac21f05f6f848bd2d37b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:af:9a:3a:cb:12:d9:e1:07:e5:df:05:e0:
                    13:52:da:00:0e:b4:8b:e5:02:65:a0:7c:1c:7e:7f:
                    1c:61:eb:dc:11:f4:3c:0c:12:03:0b:ae:9e:f2:af:
                    dc:b2:83:50:c5:d5:1e:e4:e4:a1:c9:6f:64:d9:f4:
                    f7:98:54:8a:f6:d8:bf:84:21:76:fd:0b:42:48:24:
                    1d:be:cd:2f:36:53:f5:4d:d5:67:c6:fc:69:74:af:
                    85:61:05:72:dd:04:e7:87:5b:92:95:c6:e1:1f:42:
                    ab:c0:91:e3:36:5e:df:36:39:fe:5a:03:09:12:4c:
                    de:83:08:8a:1f:04:03:ba:30:54:e4:a2:4e:82:26:
                    28:61:9a:e5:e5:e8:e6:6c:e8:2d:94:13:1d:37:86:
                    b2:40:9f:8d:0b:d8:36:41:2b:61:ac:56:d8:4d:a9:
                    21:86:b3:35:bd:35:37:87:d8:49:7c:2a:7d:eb:28:
                    92:9a:37:15:59:07:ba:15:ef:ad:ef:1e:83:61:f8:
                    19:66:4e:6e:49:0d:56:a1:9a:6a:b7:f6:b1:3a:5c:
                    e8:d6:e3:d6:f8:a8:0e:45:81:9b:05:9f:d2:09:2b:
                    ea:3c:96:48:1d:1c:11:b7:b8:80:95:cc:51:0d:2a:
                    6f:94:62:6b:d3:c6:7d:01:49:c4:a4:36:da:ba:53:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:55:3A:CE:B0:67:3A:09:0A:C2:1F:05:F6:F8:48:BD:2D:37:B1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Eq9VOs6wZzoJCsIfBfb4SL0tN7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:df:6d:55:0c:91:78:ed:05:f7:b1:18:2c:79:d2:4e:54:d9:
         4a:17:9f:3f:0f:ef:df:38:57:37:03:8a:a4:0a:78:44:71:b3:
         9f:03:7b:12:57:64:4b:5b:49:a7:a6:4a:2e:89:5d:d9:d2:8a:
         7d:1a:45:ca:b1:5a:31:79:fd:ff:ff:75:c3:2a:9d:9a:f1:80:
         02:0f:fa:56:89:30:21:ea:cc:2a:9a:06:6d:69:ee:e8:01:5c:
         2f:af:d7:d5:73:53:de:ea:5f:10:c3:41:23:3a:68:03:a8:22:
         47:c6:5f:49:1d:d6:1c:17:5c:66:1f:78:67:31:ee:57:02:87:
         5b:70:c5:17:7d:8d:94:2c:be:5f:76:f8:7a:35:79:c1:c7:87:
         e1:d6:92:db:f2:bf:7f:fa:a8:06:74:a4:fd:a9:c9:d8:83:86:
         e3:c1:78:5e:41:7f:29:49:83:1a:f4:9d:00:81:13:56:36:26:
         76:10:32:8f:92:3b:c9:14:4a:87:7e:74:e3:3f:9f:41:df:24:
         7e:43:a1:72:30:62:c8:ec:3a:86:eb:dc:31:03:66:1a:0d:97:
         5e:da:12:8c:33:4f:31:a6:62:24:30:ca:d6:0a:c8:28:0b:34:
         7a:c5:3f:62:b8:39:78:6b:b5:d2:f8:56:77:b3:54:14:99:26:
         bf:68:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org