Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TNAcecFo2iIr_Gjvq5b9M0QfaSs.roa
File:                     TNAcecFo2iIr_Gjvq5b9M0QfaSs.roa (raw, json)
Hash identifier:          bhzr81A2YoAcFhbRKWtaJCve8P9OdKoEIO0aptAo7Ds=
Subject key identifier:   4C:D0:1C:79:C1:68:DA:22:2B:FC:68:EF:AB:96:FD:33:44:1F:69:2B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07087486
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TNAcecFo2iIr_Gjvq5b9M0QfaSs.roa
Signing time:             Tue 17 May 2022 03:12:29 +0000
ROA not before:           Tue 17 May 2022 03:12:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117994630 (0x7087486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 17 03:12:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4cd01c79c168da222bfc68efab96fd33441f692b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:d9:8b:21:0d:bb:27:ff:05:89:b3:73:8a:
                    27:6b:20:26:25:1b:1e:2a:90:5b:a7:16:f3:55:b5:
                    09:85:5d:62:35:21:9e:73:bb:72:dc:c3:6c:f1:69:
                    c9:19:aa:ad:f2:7d:b3:a1:c1:3d:f0:56:a9:87:98:
                    d7:6d:56:07:01:21:9a:f4:0a:5f:6a:34:16:00:8e:
                    37:80:e4:2f:1d:63:62:2a:93:e3:a1:8c:0d:c4:5e:
                    08:42:4d:6a:86:b6:2d:20:15:5f:26:9c:1a:89:4c:
                    0e:83:31:4a:5e:bc:47:12:85:ae:f1:82:ed:02:53:
                    92:9a:90:a8:58:d4:d8:43:ec:be:c6:c1:64:6b:66:
                    ff:af:7a:46:9c:2b:08:b4:94:d3:ef:e4:46:b3:c8:
                    e1:e7:7e:a5:cf:2b:c0:c4:b1:10:7d:0a:b5:b2:ea:
                    31:7b:05:71:cf:cc:fe:16:4b:82:f7:df:f5:74:73:
                    30:3b:74:a8:46:cb:74:0d:a0:95:e4:a8:1e:6e:31:
                    16:7f:58:8e:2e:17:51:c9:f6:ce:4d:aa:e6:38:24:
                    c9:9e:c0:26:52:1f:22:6a:eb:0a:aa:b1:e1:07:49:
                    2f:53:c2:08:93:c2:e6:a9:58:43:ca:20:02:40:f6:
                    fd:05:90:58:64:67:5a:37:d6:6a:86:fb:73:43:28:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D0:1C:79:C1:68:DA:22:2B:FC:68:EF:AB:96:FD:33:44:1F:69:2B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TNAcecFo2iIr_Gjvq5b9M0QfaSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:69:4a:8e:1e:fa:d3:b6:5a:cc:b3:6a:cc:9a:29:10:34:
         2e:ff:02:01:d5:28:87:9b:5d:6f:af:e5:10:a4:06:cc:ed:6c:
         b5:ab:0c:a2:75:59:43:8b:2d:73:61:95:22:48:fd:77:66:c7:
         12:d1:3e:0a:28:34:26:ed:ec:ba:ee:f8:c1:d2:1a:8b:fe:61:
         39:1d:ac:e6:d7:8c:c1:37:ae:f0:a9:82:a5:d2:f4:f4:4d:a0:
         d1:85:08:c4:b2:f0:12:b1:6c:d1:14:51:f2:05:95:f7:0a:a3:
         07:26:72:9b:c6:ec:d6:1f:f1:15:d3:c9:f3:b8:99:0c:81:87:
         03:cf:ee:98:1d:0e:90:7d:13:e0:35:0e:10:fd:b7:e2:f5:e8:
         87:11:2a:62:ce:45:8c:f2:6e:c3:2c:9e:2d:32:31:49:31:db:
         76:e4:9a:94:03:11:30:dc:bf:01:16:35:a9:9c:38:04:bd:f8:
         19:f4:ec:86:ce:a4:72:7c:54:b5:60:4d:81:4b:d7:3e:27:b8:
         84:57:f5:40:b1:10:7c:8d:b6:1b:71:84:ce:af:9f:ca:3e:ed:
         dc:b4:d4:40:41:bd:16:4f:dd:9a:8d:90:e4:10:5a:e9:01:ec:
         1c:0f:a3:90:60:23:97:0b:f7:b0:2e:f9:f1:e0:b2:e5:5d:9e:
         93:ea:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org