Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dM-S1_Re1u-22VBUq1gThFIJMWo.roa
File:                     dM-S1_Re1u-22VBUq1gThFIJMWo.roa (raw, json)
Hash identifier:          j8Q6L6putGJ5enabemf5R7MCZH2ITgjYD+TxJm/omXw=
Subject key identifier:   74:CF:92:D7:F4:5E:D6:EF:B6:D9:50:54:AB:58:13:84:52:09:31:6A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181E5F04B4E7DA005EB632CC77FE877215C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dM-S1_Re1u-22VBUq1gThFIJMWo.roa
Signing time:             Sun 10 Jul 2022 02:28:59 +0000
ROA not before:           Sun 10 Jul 2022 02:28:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e5:f0:4b:4e:7d:a0:05:eb:63:2c:c7:7f:e8:77:21:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul 10 02:28:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74cf92d7f45ed6efb6d95054ab5813845209316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:14:d7:2b:a1:e1:0a:d2:19:61:7c:37:49:
                    d0:50:55:37:84:04:87:8e:5b:4a:11:9c:37:2a:1c:
                    11:18:63:f8:97:0e:ad:c5:7a:5f:64:51:ab:33:f7:
                    58:68:1a:5c:94:9b:0d:6d:2f:e4:d6:2a:98:3a:5f:
                    82:e3:e9:e4:da:9b:8a:76:ea:f5:b6:e8:29:3a:5b:
                    e5:bd:20:72:ca:9a:45:d9:ae:4b:a3:0e:eb:e7:57:
                    7b:9d:6b:46:ba:c9:fc:ed:bb:e4:70:bd:d7:c9:7d:
                    c3:8e:a3:e4:db:97:c2:1d:fa:ba:b8:64:6a:d5:c2:
                    da:43:3d:02:6e:86:48:8a:82:6c:03:8c:54:d5:ab:
                    a4:d0:19:39:fa:ed:2e:54:18:9e:41:0d:f8:6a:c5:
                    f0:d0:c4:d3:be:84:ee:11:af:57:e0:cb:5b:58:75:
                    8c:f3:68:56:a2:91:f6:c3:b0:89:11:d8:93:ee:55:
                    c4:f0:d0:72:bf:ae:04:c2:e8:9e:7c:23:88:fe:26:
                    c4:88:e0:b1:cb:5b:db:71:2b:e4:b8:36:87:27:27:
                    19:b9:e3:e9:4f:a9:98:a9:9a:8b:bc:3c:d2:2c:25:
                    8f:cd:02:da:11:34:56:99:31:01:42:28:5c:8b:04:
                    f6:7f:05:d7:62:a7:32:81:df:da:75:8e:7f:fd:86:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:92:D7:F4:5E:D6:EF:B6:D9:50:54:AB:58:13:84:52:09:31:6A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dM-S1_Re1u-22VBUq1gThFIJMWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:09:fc:6a:f8:70:45:b1:5a:ae:a7:53:b4:01:a7:e0:28:fa:
         fa:62:55:8d:8d:8d:b3:bd:c1:9a:96:1f:2a:12:6e:72:35:bd:
         01:66:1a:e0:c0:76:ff:51:2e:29:2a:77:5f:08:d7:49:9d:a3:
         4d:ea:f7:7c:e1:6d:06:5a:1d:0d:60:78:18:fc:c9:b1:58:28:
         c9:3e:70:02:86:2d:3d:36:3c:d9:70:63:2b:bf:fc:46:cd:9b:
         51:3a:b5:47:4c:be:39:79:ba:4c:2a:63:29:4d:8a:d0:68:e7:
         d1:27:c3:3e:6a:43:28:d7:c2:e9:52:aa:56:f0:ac:3f:37:e0:
         6c:d9:e9:dd:57:d2:2d:0c:1e:fe:7f:10:cf:68:a1:b1:b9:4e:
         07:f6:4d:cb:64:bc:fb:8c:ad:b9:51:de:3a:ee:a5:f6:f5:fe:
         16:c0:09:f1:28:c6:79:b2:cb:8a:ad:be:eb:f5:ed:cc:46:44:
         2c:83:e9:fa:1b:b7:01:c2:f8:15:2c:3b:7c:63:3c:5f:88:de:
         46:85:4e:d8:56:f1:ec:21:d7:58:64:b2:d9:4b:77:c4:53:41:
         f6:b0:b0:ab:95:ed:00:6e:e3:4e:8e:dd:66:94:e0:2e:18:f7:
         56:57:ff:69:b2:4a:69:b6:25:62:7c:d9:7d:1d:c7:07:e2:1e:
         01:96:80:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org