Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/coAhUVtlqDHIwQWN4eMpSxSZDv0.roa
File:                     coAhUVtlqDHIwQWN4eMpSxSZDv0.roa (raw, json)
Hash identifier:          y96IPzRcV/9ZjUxnaPHJT4U/+KJNGRCE622oZXx9x0I=
Subject key identifier:   72:80:21:51:5B:65:A8:31:C8:C1:05:8D:E1:E3:29:4B:14:99:0E:FD
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181D88CEDB4F801A1BD971A153E26449A7A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/coAhUVtlqDHIwQWN4eMpSxSZDv0.roa
Signing time:             Thu 07 Jul 2022 12:05:23 +0000
ROA not before:           Thu 07 Jul 2022 12:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d8:8c:ed:b4:f8:01:a1:bd:97:1a:15:3e:26:44:9a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  7 12:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=728021515b65a831c8c1058de1e3294b14990efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:c5:83:04:e9:34:2f:31:73:4e:0d:10:1d:
                    6d:67:f0:6b:9b:cf:03:12:06:1f:b8:3e:fa:c3:70:
                    e5:2a:6d:ee:0c:43:f3:2e:64:73:c4:2a:1b:95:ef:
                    88:bc:d4:66:9b:80:78:7b:bd:ee:3d:e0:d1:5d:7e:
                    11:a5:44:9b:21:ca:f9:ec:56:fb:c7:17:df:85:5d:
                    ca:c5:0d:1b:ab:fa:43:57:86:f0:14:7a:89:d5:20:
                    c6:66:1a:83:5d:d3:5f:fc:fb:97:9f:27:59:72:cf:
                    b9:91:48:72:cb:a6:e6:dc:42:5b:b5:c6:56:c4:c8:
                    3e:78:dc:7d:08:43:99:94:30:a8:f4:3d:60:56:ad:
                    d0:4e:82:e2:b2:cb:cb:43:14:a9:b3:5b:7f:f5:56:
                    fb:08:09:c3:f8:1d:92:3a:b6:b3:57:99:f0:83:db:
                    9c:07:81:eb:fc:76:21:f5:89:5f:ea:fc:4c:0b:98:
                    e0:43:fa:67:2a:26:27:5b:45:59:69:02:43:1b:a6:
                    1e:1f:1d:96:44:bb:aa:48:ee:0a:a7:b7:e9:38:eb:
                    07:21:b0:63:c3:a1:7c:8d:50:ec:73:8a:e3:f0:5e:
                    7a:6d:a3:67:bf:96:45:5d:2a:f2:d8:13:a0:a0:ae:
                    3b:a8:56:c5:e4:ff:6c:ed:71:50:48:5b:e7:5a:cb:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:21:51:5B:65:A8:31:C8:C1:05:8D:E1:E3:29:4B:14:99:0E:FD
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/coAhUVtlqDHIwQWN4eMpSxSZDv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         00:60:5b:32:82:34:71:5b:53:62:1d:f4:f6:57:d1:13:a3:1b:
         3f:89:39:d3:fd:32:00:ae:4c:24:cf:25:14:b0:23:9f:47:c1:
         e0:61:8b:4f:8c:12:a4:0a:73:3e:53:75:83:8a:01:52:df:2b:
         96:8c:79:0e:08:d0:50:02:7d:5a:0f:09:9a:c4:59:1b:24:5d:
         c9:f8:d5:56:2b:45:ef:73:d9:07:ab:a5:be:6f:4e:9a:76:a0:
         59:e4:0b:98:01:d5:ae:a4:97:34:2d:bf:bd:46:eb:a6:5b:a3:
         de:26:28:99:18:15:c9:2e:d0:35:75:d9:06:74:97:23:f1:d5:
         f5:15:44:af:d0:49:84:89:4a:cf:d0:83:36:07:c0:70:ff:4b:
         56:43:a1:8b:e7:fd:ab:e2:bf:74:51:44:a5:d2:44:4c:ba:39:
         af:c5:12:48:79:d7:d6:7b:4c:ad:e0:45:c1:17:f7:37:bd:e3:
         3e:ad:48:7b:1e:e1:8f:9c:3e:34:9c:90:7f:b9:b4:5f:6f:ca:
         4d:91:47:b1:6d:05:67:1a:3a:32:25:4d:90:3e:d5:93:cd:3d:
         83:e3:9c:67:fc:e0:28:74:0d:b6:51:11:e6:da:18:3c:fa:1b:
         72:76:ad:1b:bd:61:6f:97:c2:13:3e:a4:ac:e5:e5:5e:99:ae:
         d0:52:09:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHYjO20+AGhvZcaFT4mRJp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzA3MTIwNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjgwMjE1MTViNjVhODMxYzhjMTA1OGRlMWUzMjk0YjE0OTkwZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNbFgwTpNC8xc04NEB1tZ/Brm88D
EgYfuD76w3DlKm3uDEPzLmRzxCoble+IvNRmm4B4e73uPeDRXX4RpUSbIcr57Fb7
xxffhV3KxQ0bq/pDV4bwFHqJ1SDGZhqDXdNf/PuXnydZcs+5kUhyy6bm3EJbtcZW
xMg+eNx9CEOZlDCo9D1gVq3QToLissvLQxSps1t/9Vb7CAnD+B2SOrazV5nwg9uc
B4Hr/HYh9Ylf6vxMC5jgQ/pnKiYnW0VZaQJDG6YeHx2WRLuqSO4Kp7fpOOsHIbBj
w6F8jVDsc4rj8F56baNnv5ZFXSry2BOgoK47qFbF5P9s7XFQSFvnWsvRtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHKAIVFbZagxyMEFjeHjKUsUmQ79MB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvY29BaFVWdGxxREhJd1FXTjRlTXBTeFNaRHYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAl9gEMA8E
AgACMAkDBwEgAQf8AAIwDQYJKoZIhvcNAQELBQADggEBAABgWzKCNHFbU2Id9PZX
0ROjGz+JOdP9MgCuTCTPJRSwI59HweBhi0+MEqQKcz5TdYOKAVLfK5aMeQ4I0FAC
fVoPCZrEWRskXcn41VYrRe9z2Qerpb5vTpp2oFnkC5gB1a6klzQtv71G66Zbo94m
KJkYFcku0DV12QZ0lyPx1fUVRK/QSYSJSs/QgzYHwHD/S1ZDoYvn/aviv3RRRKXS
REy6Oa/FEkh519Z7TK3gRcEX9ze94z6tSHse4Y+cPjSckH+5tF9vyk2RR7FtBWca
OjIlTZA+1ZPNPYPjnGf84Ch0DbZREebaGDz6G3J2rRu9YW+XwhM+pKzl5V6ZrtBS
CR0=
-----END CERTIFICATE-----