Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa
File:                     d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa (raw, json)
Hash identifier:          2KUX//YBEVY7X66Gl1s1JC4BBN+sB7mAhhGoIJkkCTA=
Subject key identifier:   77:C3:CA:C1:B1:65:E6:3C:DF:CB:46:B2:89:9F:55:28:23:6E:54:6A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       068D6179
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa
Signing time:             Sat 07 May 2022 01:32:19 +0000
ROA not before:           Sat 07 May 2022 01:32:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109928825 (0x68d6179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  7 01:32:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77c3cac1b165e63cdfcb46b2899f5528236e546a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:c8:2d:e9:87:a4:20:f5:06:ea:76:e7:33:
                    99:91:b6:7c:b8:1e:ac:dd:d0:b9:4e:ef:a4:8d:8f:
                    65:df:32:6a:71:d9:c0:b3:ea:10:c3:3f:ba:68:1d:
                    87:e4:d9:2a:80:0f:eb:a8:c3:72:4a:fa:d7:fc:7c:
                    9c:44:af:f6:3c:67:a9:07:7e:97:a8:7e:ab:7b:3e:
                    c1:65:a8:5c:b2:8f:dd:6e:a1:d7:b4:43:20:5d:43:
                    00:fb:67:a0:b2:75:4f:98:07:15:23:99:54:e4:84:
                    18:44:0a:23:df:43:6f:b6:96:f4:3e:81:5f:b8:62:
                    90:04:05:dd:25:dc:71:09:7f:6a:1b:ae:a1:0a:f8:
                    c1:88:1b:73:16:34:1c:aa:bf:d6:1f:39:aa:19:f3:
                    2a:0f:60:f6:9a:80:bf:14:f1:04:f0:e9:fb:69:23:
                    b0:b4:7d:e4:19:45:44:da:91:49:1f:55:f8:c0:2d:
                    88:3b:54:5b:26:7c:b4:fa:9b:f6:d2:57:85:3a:06:
                    70:fb:2c:53:64:99:52:c4:61:30:a7:68:dc:1c:f6:
                    be:9e:d9:84:d7:bb:b2:ec:7b:e2:f5:64:9a:cf:fc:
                    ad:9b:56:ae:15:6f:fc:43:2a:c9:0d:d1:06:21:78:
                    b6:f5:69:1e:0c:85:59:1d:19:be:41:d8:24:2e:b3:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C3:CA:C1:B1:65:E6:3C:DF:CB:46:B2:89:9F:55:28:23:6E:54:6A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e0:8e:a7:4b:1b:6d:e5:b2:c3:7a:6c:ed:92:b0:5e:11:44:
         2b:09:15:48:66:e8:2d:41:e1:21:c9:bb:65:ca:3c:2c:06:69:
         d5:5c:8c:75:8b:67:c0:f6:2c:b1:4a:15:02:d9:a1:82:4a:4d:
         7c:da:3b:8b:49:b6:f2:94:47:64:70:da:6f:cc:e5:33:ae:f8:
         e2:cf:3a:86:3d:79:5d:01:97:3d:79:48:20:e4:e0:84:64:d7:
         52:78:c6:7e:92:af:58:97:1d:5a:e9:2a:df:c2:50:c0:95:8f:
         9e:f7:0d:91:17:aa:2f:5f:f5:40:77:04:3c:55:d7:73:7a:2f:
         27:a7:ad:58:89:88:eb:cf:9f:4d:4c:b7:95:d3:02:8f:e2:38:
         77:4b:07:ce:a9:4f:33:53:82:bc:ba:20:a7:cd:9b:18:06:8c:
         05:65:22:3f:9b:67:ee:f6:72:1f:e2:02:09:67:ba:90:f9:9b:
         f2:c7:9b:d0:05:f2:58:d9:a5:3d:1b:ce:73:ab:ad:9e:c9:4e:
         a4:4e:76:2c:fd:4c:99:fc:80:8b:7e:55:9c:bc:a4:b5:db:48:
         53:37:38:0f:14:ce:c9:46:a3:1c:97:fa:8c:92:40:45:f5:64:
         29:03:10:99:6c:c5:e0:23:9f:c9:5b:54:e3:9f:a2:9b:15:a8:
         0d:1c:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org