Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hC_ojd2U98DUAgo4dLvcl_ciyWk.roa
File:                     hC_ojd2U98DUAgo4dLvcl_ciyWk.roa (raw, json)
Hash identifier:          IuPqyHqojic5DdKELr7UXzqmKDXmn7To3l0W4UjM8ec=
Subject key identifier:   84:2F:E8:8D:DD:94:F7:C0:D4:02:0A:38:74:BB:DC:97:F7:22:C9:69
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0783B6B7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hC_ojd2U98DUAgo4dLvcl_ciyWk.roa
Signing time:             Thu 26 May 2022 03:36:13 +0000
ROA not before:           Thu 26 May 2022 03:36:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126072503 (0x783b6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 26 03:36:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=842fe88ddd94f7c0d4020a3874bbdc97f722c969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:b3:99:88:be:1f:ce:62:7d:bc:94:c3:60:
                    8f:9f:d0:29:07:80:27:42:7e:11:d1:cb:d3:9d:56:
                    95:83:7a:9c:8c:46:7e:db:21:2c:b9:db:d5:55:00:
                    72:9b:e5:23:92:82:51:a0:19:2d:f4:ed:94:f7:16:
                    73:67:2f:60:77:51:b5:5b:ac:75:f8:f0:42:b2:a2:
                    43:48:2f:41:07:48:be:fa:f4:00:a6:79:74:4b:bf:
                    96:60:12:fc:b1:28:c6:e0:2d:52:13:02:0a:98:97:
                    ee:da:6e:e8:d1:46:e9:ab:4c:f5:a5:c1:4b:fa:7b:
                    3f:67:09:2b:a0:63:e3:bd:9c:21:43:f4:5c:49:93:
                    0a:06:75:c5:73:50:dd:7e:7d:d0:61:b0:13:90:d5:
                    c7:ab:7e:28:36:d9:f5:ce:95:bc:78:9e:22:e3:67:
                    53:82:4f:dc:3e:be:b6:71:57:82:59:b9:64:d2:9e:
                    8f:e1:3f:01:8a:82:17:ca:ef:fa:87:02:9f:34:8d:
                    db:9d:1a:0f:15:a5:d5:34:c7:6d:ac:41:db:65:e7:
                    f0:95:dd:32:52:4d:dc:13:7f:15:35:4d:86:27:76:
                    35:88:fa:f0:41:b0:e2:8c:78:44:55:12:9b:e5:c7:
                    1f:17:b7:73:88:40:9f:89:82:ed:47:f4:d1:6d:00:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2F:E8:8D:DD:94:F7:C0:D4:02:0A:38:74:BB:DC:97:F7:22:C9:69
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hC_ojd2U98DUAgo4dLvcl_ciyWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:4f:d5:29:45:17:76:e0:36:b8:00:d2:8f:50:1a:b3:66:
         0c:de:53:3d:12:0d:8d:16:10:10:72:5d:f0:3b:1d:e3:a4:49:
         fb:3b:ee:c7:f7:54:3e:6e:69:b9:cf:c1:93:07:2a:3a:e3:c5:
         5d:de:dd:83:7e:5d:43:ab:43:29:4a:d7:6b:e2:af:95:40:a5:
         17:d7:77:75:c8:e3:74:c3:9d:64:f3:ce:7d:2b:06:ca:21:59:
         bc:e7:d8:73:48:3b:a2:da:a7:47:de:21:7a:87:15:9d:56:fb:
         df:f6:d9:df:93:b1:f6:bd:f8:b1:f9:90:ff:4f:5a:db:2f:11:
         ff:3b:5d:be:48:9e:cc:01:ec:42:cc:bf:4e:53:c8:1a:d1:56:
         1d:b9:8c:33:e5:2e:3f:74:7f:c1:f0:8c:25:55:44:da:1a:a8:
         41:62:e2:8f:c9:b2:e4:58:c6:af:47:e2:28:6d:c3:99:30:72:
         d3:2a:b5:8a:f4:50:f1:e8:d0:ec:73:d6:3b:53:cb:f2:45:9b:
         f1:67:6c:00:99:ee:2a:84:54:72:be:fd:2d:c2:d9:af:56:31:
         3a:31:7c:1a:60:d1:c4:f7:8d:f5:57:e2:ae:09:b5:88:a5:59:
         fe:46:f1:cd:cf:5f:c0:23:4b:ba:fc:d1:9f:74:da:55:86:9f:
         65:31:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org