Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HsJFK8wrqikhNXeFQJE2gKrkLA0.roa
File:                     HsJFK8wrqikhNXeFQJE2gKrkLA0.roa (raw, json)
Hash identifier:          mffjQ4rdc/akfEyktdjzTUtV5+ly21+OojkdJAl/eik=
Subject key identifier:   1E:C2:45:2B:CC:2B:AA:29:21:35:77:85:40:91:36:80:AA:E4:2C:0D
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       055C938E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HsJFK8wrqikhNXeFQJE2gKrkLA0.roa
Signing time:             Sat 26 Mar 2022 00:58:36 +0000
ROA not before:           Sat 26 Mar 2022 00:58:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89953166 (0x55c938e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 26 00:58:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ec2452bcc2baa292135778540913680aae42c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:c0:ac:c7:16:d4:d4:ca:0e:df:91:fd:99:
                    f5:31:52:81:41:34:2a:c8:52:e9:75:5f:5e:eb:e6:
                    20:eb:d1:f6:98:0e:24:f2:84:eb:7d:90:15:27:fb:
                    59:15:99:7d:f7:2a:f9:3c:3e:a5:32:79:89:e5:16:
                    8c:97:b9:19:62:bd:cf:ec:8b:35:ed:23:ce:46:dc:
                    f9:ea:86:19:d2:4f:f0:34:c5:ce:6c:9d:11:1e:5f:
                    c8:c3:e3:af:d4:88:94:a1:b4:a9:fa:ec:c0:3b:41:
                    cc:a3:c9:d2:22:18:17:df:25:8d:e0:1d:bb:af:01:
                    fb:ca:37:ae:85:07:98:b6:b2:09:bd:46:54:c7:37:
                    f7:fa:1a:61:79:a0:c9:24:fd:83:2f:5c:a9:db:59:
                    e6:a2:05:1f:68:78:0f:7d:23:c8:53:b4:4e:3c:9c:
                    b0:7b:c6:7c:46:4b:f1:ca:7d:fc:8f:ff:0c:76:1b:
                    87:81:83:5e:3d:bb:ae:4e:a7:6d:50:ac:9b:f9:7f:
                    ee:df:7b:52:d4:91:6d:13:f4:b1:94:07:34:26:19:
                    22:39:93:61:0f:4a:de:a0:a2:fd:06:a1:a1:fe:7c:
                    ce:90:ed:7a:32:af:b8:73:13:42:b4:4c:7e:0a:67:
                    e2:4b:a2:8f:aa:3e:62:ac:ad:62:22:73:b6:b6:1c:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C2:45:2B:CC:2B:AA:29:21:35:77:85:40:91:36:80:AA:E4:2C:0D
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HsJFK8wrqikhNXeFQJE2gKrkLA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:53:f4:04:8d:fb:b5:6b:e6:44:6a:7f:29:82:6c:4d:db:2e:
         14:b4:50:7a:c3:11:c1:fa:f3:9d:c2:1c:47:07:87:b1:19:8b:
         e7:7a:90:a2:c9:b2:ce:05:7f:de:0d:5a:27:1d:04:fe:fa:3e:
         56:8c:f6:c8:66:ea:da:40:94:83:bb:3d:ea:11:71:3e:c1:44:
         44:9c:37:48:2b:cb:dc:33:72:9b:21:71:b0:43:0c:07:9e:88:
         25:01:cf:c0:73:4d:13:9b:e6:33:71:e5:87:44:87:03:2d:4c:
         01:f5:4e:a6:90:e7:59:0b:9d:6c:aa:61:06:26:ff:09:e4:8a:
         47:c1:39:24:b9:c7:43:dc:ba:63:42:17:01:64:f8:d6:56:6a:
         3b:8a:d4:35:ca:0e:6f:b6:42:51:ea:9c:64:78:aa:47:8d:29:
         77:4e:f3:bf:55:dd:66:45:d2:88:51:90:76:28:66:7e:c0:53:
         48:dc:03:28:ef:33:88:84:09:a0:8e:d9:4e:44:c1:4e:68:7b:
         11:9e:3a:2d:54:ac:46:5a:f3:f1:69:ba:5f:8f:6a:d2:8f:c6:
         f6:55:d6:20:8e:04:fb:bf:94:8c:a2:9a:2b:d4:01:b2:c4:75:
         b0:33:9b:77:d6:88:c1:86:5e:e2:77:7d:83:23:c7:5d:52:70:
         cd:22:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----