Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cSij_cHolIANDDDqMcc_7h4SflE.roa
File:                     cSij_cHolIANDDDqMcc_7h4SflE.roa (raw, json)
Hash identifier:          ODhl0TisRFY+iL+fbar2b3tp8XOO0r0OUam8it0lmH0=
Subject key identifier:   71:28:A3:FD:C1:E8:94:80:0D:0C:30:EA:31:C7:3F:EE:1E:12:7E:51
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0718841D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cSij_cHolIANDDDqMcc_7h4SflE.roa
Signing time:             Wed 18 May 2022 05:15:29 +0000
ROA not before:           Wed 18 May 2022 05:15:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119047197 (0x718841d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 18 05:15:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7128a3fdc1e894800d0c30ea31c73fee1e127e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:98:c1:8f:fe:92:13:3a:a0:ae:3f:30:6a:
                    ea:08:78:53:ad:74:01:b7:56:c9:a1:05:01:08:de:
                    b6:c1:1a:59:80:76:d8:0a:7f:bb:16:00:5d:02:21:
                    ef:cd:42:fc:b4:41:58:dc:65:15:34:68:cc:2f:7f:
                    f9:14:72:36:21:94:d5:d4:44:d8:c0:fc:76:c2:9b:
                    cb:cc:fc:71:c5:83:fd:34:d4:7e:ed:d7:33:ad:29:
                    97:f4:46:f6:5b:0e:bb:d1:fc:73:24:1f:cb:84:7f:
                    90:79:e9:a4:7b:80:f3:5c:8f:63:36:3f:27:ee:0e:
                    3d:db:94:f5:09:3f:eb:c7:62:ea:32:ec:02:d0:b9:
                    74:58:a0:1b:6c:ba:e6:61:2c:dc:1b:93:ef:71:dd:
                    24:5f:ed:c4:e5:38:e0:81:98:af:9c:f2:e9:83:e0:
                    76:98:18:0e:1a:40:53:20:c9:d9:2c:1f:88:38:3a:
                    a9:d1:61:b9:31:16:50:8c:78:fb:e2:71:7b:1c:12:
                    9e:34:7b:7c:7f:13:3c:3e:57:f5:64:cb:07:e4:d2:
                    28:d4:03:70:d9:46:fb:9c:04:ea:b5:93:81:20:63:
                    a1:28:ea:22:74:2f:98:f8:db:5c:f3:9a:95:ad:b1:
                    09:f9:2c:1a:d3:6c:36:a7:e5:10:26:1c:91:7d:fa:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:28:A3:FD:C1:E8:94:80:0D:0C:30:EA:31:C7:3F:EE:1E:12:7E:51
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cSij_cHolIANDDDqMcc_7h4SflE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:c1:19:68:e1:90:3f:3c:48:aa:1e:3b:5e:94:58:55:3e:
         cf:d2:a2:3b:cd:6d:84:ef:3a:2e:76:30:4b:99:7e:98:d3:75:
         64:7c:36:45:92:01:f5:98:4c:9b:cd:48:5f:cc:6e:77:f5:32:
         f8:51:53:5f:9b:0c:11:36:e9:5b:7f:aa:1b:eb:bc:92:d8:4c:
         7d:30:f6:fa:3b:63:3e:f6:19:28:0a:4a:4b:87:9d:8b:8d:1c:
         c5:c3:12:28:9e:3e:ae:17:be:b5:17:62:d0:cb:65:4d:7e:48:
         b4:f9:86:a1:d4:ae:e0:c1:58:49:fc:3f:36:0d:45:6e:3f:73:
         d4:d1:71:8c:dd:02:6b:f1:1a:91:db:b6:da:62:8f:c9:4d:40:
         59:b1:cf:c2:76:54:e0:06:cf:07:e0:cc:f7:1a:d2:10:f8:8c:
         87:c9:24:4f:a2:c5:0b:75:47:9f:f9:3f:b7:16:dc:55:5d:65:
         19:0b:45:b9:24:f2:b8:30:6e:9f:16:6e:42:96:dc:1f:07:57:
         7b:dc:6f:a1:12:af:bd:ab:51:ff:00:57:84:d7:7a:fd:6e:8d:
         8f:82:5d:8e:28:79:b2:59:72:a6:07:ea:44:10:3c:3c:93:42:
         c6:1c:ff:92:03:87:24:59:fd:e9:2f:3b:47:75:66:a5:f1:77:
         8e:e1:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org