Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iuuoE6vdr--WUnZeN4BqmlE51Oo.roa
File:                     iuuoE6vdr--WUnZeN4BqmlE51Oo.roa (raw, json)
Hash identifier:          ERZPVlfGEwWRWa1dUpBgzXiuuR7556MSaEw/rGTUdiM=
Subject key identifier:   8A:EB:A8:13:AB:DD:AF:EF:96:52:76:5E:37:80:6A:9A:51:39:D4:EA
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       083E2501
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iuuoE6vdr--WUnZeN4BqmlE51Oo.roa
Signing time:             Thu 09 Jun 2022 03:48:02 +0000
ROA not before:           Thu 09 Jun 2022 03:48:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138290433 (0x83e2501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  9 03:48:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8aeba813abddafef9652765e37806a9a5139d4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:57:a7:7e:8c:67:c2:08:ec:af:39:14:50:
                    dd:6f:b1:7e:94:71:46:f2:7c:8e:5c:87:30:f5:6d:
                    aa:f6:4d:2c:52:52:62:8e:fa:99:88:db:7a:e7:0f:
                    cc:9d:d9:e6:4a:93:e9:b3:9e:f7:c8:c2:48:6c:e5:
                    e6:68:0c:d2:dc:7f:0c:65:f4:4b:6a:0b:e9:cf:49:
                    fb:6b:3c:c5:d5:b6:c7:fb:ca:12:04:39:77:fd:6c:
                    bb:98:fd:23:0f:cb:5e:05:7b:65:01:cf:b6:e9:7f:
                    35:55:92:6d:ef:76:81:6a:5b:95:00:98:60:38:0a:
                    2b:bb:b8:d2:97:e9:c3:2f:68:d7:22:92:46:88:d5:
                    42:69:e0:8e:ce:46:7d:c8:4e:8f:57:99:6e:c0:87:
                    56:d0:f0:da:a6:e2:55:b0:c9:28:be:67:da:92:aa:
                    98:3a:ac:30:14:27:75:4f:a3:8e:24:43:00:6a:a4:
                    20:f4:1c:7d:55:28:7f:c2:02:12:f0:71:c8:0d:78:
                    cc:84:ed:c6:7b:b6:be:76:16:75:81:8e:c9:1f:48:
                    c9:b2:2e:1d:da:98:e7:14:9d:e0:af:e6:9b:d7:ab:
                    79:36:22:74:89:47:e2:1e:d9:a8:6a:62:78:f1:d6:
                    c3:df:71:12:7d:c2:47:22:69:b5:c2:55:be:8c:3c:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:A8:13:AB:DD:AF:EF:96:52:76:5E:37:80:6A:9A:51:39:D4:EA
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iuuoE6vdr--WUnZeN4BqmlE51Oo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         37:39:bc:ab:77:7b:5f:6a:60:c5:ed:e8:78:3c:32:11:b9:9d:
         d7:b3:9c:6e:fc:58:1b:3f:12:57:c1:ee:dd:d3:32:60:80:8e:
         91:a8:5f:62:85:0d:bc:fe:be:a7:18:88:c2:8d:57:37:3f:9f:
         6a:51:6c:5e:82:90:9e:a9:4b:35:c2:da:ee:1c:c0:9f:87:6f:
         04:d7:24:5b:4c:8e:0b:2e:48:bf:51:29:e4:57:b7:1d:49:03:
         1a:28:c9:d9:a3:6e:8b:c9:29:30:85:df:91:4e:b6:e3:9b:4d:
         61:bd:3a:12:91:f6:ff:25:fe:45:74:33:05:98:eb:4a:40:9e:
         d6:3a:66:16:4a:5d:e3:91:98:a9:0e:e4:61:41:59:b2:1e:5f:
         38:aa:b8:9d:5d:e0:ef:61:f6:fc:7a:9b:04:c6:4a:e6:0e:be:
         e6:f8:ca:40:90:9d:f5:3d:f4:af:e2:4d:26:b8:45:e7:28:11:
         75:f2:c6:24:56:b3:ad:ff:b1:7a:ae:24:06:a8:20:13:ea:40:
         cc:79:6c:f3:24:b7:fa:4f:43:84:0f:b5:93:23:e3:34:ae:d7:
         5e:74:a5:e7:ca:4a:ea:95:0c:5f:75:b6:de:e6:a4:28:d4:99:
         03:c1:10:db:25:01:63:8b:bf:49:d1:b2:2a:e0:70:04:a5:31:
         f3:0e:63:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECD4lATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
OTAzNDgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFlYmE4MTNhYmRk
YWZlZjk2NTI3NjVlMzc4MDZhOWE1MTM5ZDRlYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTkV6d+jGfCCOyvORRQ3W+xfpRxRvJ8jlyHMPVtqvZNLFJS
Yo76mYjbeucPzJ3Z5kqT6bOe98jCSGzl5mgM0tx/DGX0S2oL6c9J+2s8xdW2x/vK
EgQ5d/1su5j9Iw/LXgV7ZQHPtul/NVWSbe92gWpblQCYYDgKK7u40pfpwy9o1yKS
RojVQmngjs5GfchOj1eZbsCHVtDw2qbiVbDJKL5n2pKqmDqsMBQndU+jjiRDAGqk
IPQcfVUof8ICEvBxyA14zITtxnu2vnYWdYGOyR9IybIuHdqY5xSd4K/mm9ereTYi
dIlH4h7ZqGpiePHWw99xEn3CRyJptcJVvow8J1sCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSK66gTq92v75ZSdl43gGqaUTnU6jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2l1dW9FNnZkci0tV1VuWmVONEJxbWxFNTFPby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQA3Obyrd3tfamDF7eh4PDIRuZ3Xs5xu/FgbPxJX
we7d0zJggI6RqF9ihQ28/r6nGIjCjVc3P59qUWxegpCeqUs1wtruHMCfh28E1yRb
TI4LLki/USnkV7cdSQMaKMnZo26LySkwhd+RTrbjm01hvToSkfb/Jf5FdDMFmOtK
QJ7WOmYWSl3jkZipDuRhQVmyHl84qridXeDvYfb8epsExkrmDr7m+MpAkJ31PfSv
4k0muEXnKBF18sYkVrOt/7F6riQGqCAT6kDMeWzzJLf6T0OED7WTI+M0rtdedKXn
ykrqlQxfdbbe5qQo1JkDwRDbJQFji79J0bIq4HAEpTHzDmPb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org