Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jEeEgFisB7AXlMAHNkDtjuy5oQA.roa
File:                     jEeEgFisB7AXlMAHNkDtjuy5oQA.roa (raw, json)
Hash identifier:          ab+ExvH6EBm11wfNybB4PHlLY5aap1MdFpkYpi/Ce5s=
Subject key identifier:   8C:47:84:80:58:AC:07:B0:17:94:C0:07:36:40:ED:8E:EC:B9:A1:00
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       079FA393
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jEeEgFisB7AXlMAHNkDtjuy5oQA.roa
Signing time:             Sat 28 May 2022 03:16:13 +0000
ROA not before:           Sat 28 May 2022 03:16:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127902611 (0x79fa393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 28 03:16:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c47848058ac07b01794c0073640ed8eecb9a100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:df:39:f5:ef:87:15:22:6e:0a:62:d8:19:
                    d6:ca:7c:91:bd:30:42:e1:fe:71:05:78:3b:2d:bc:
                    ac:eb:be:51:2f:5e:81:39:00:bb:a5:a4:18:a1:4d:
                    05:10:a2:37:90:5f:ea:87:55:cc:ee:6e:ae:f5:7d:
                    c4:f3:52:1b:23:d1:91:fc:6f:24:6b:bf:ff:71:96:
                    6d:ef:d3:ea:5f:b1:c6:f9:a9:4a:28:2e:2b:07:90:
                    46:6e:6a:3a:0a:64:8f:f3:43:ba:f6:70:aa:31:18:
                    6c:e4:90:1a:8a:e9:12:ad:f5:41:47:24:99:54:89:
                    b7:1f:db:76:ac:82:96:16:14:06:df:35:fe:65:b6:
                    4c:08:34:52:3c:4b:71:bf:af:2b:a1:b7:01:3f:b2:
                    f4:3f:9f:1d:aa:b1:d6:52:34:9a:75:07:b7:86:cc:
                    ad:56:7a:b7:23:43:bd:be:fe:8d:c3:e0:95:15:c6:
                    d0:f6:3d:f6:0b:51:66:82:98:4f:93:ff:43:19:7e:
                    34:b7:37:d4:2e:28:b9:7a:7e:89:e5:3c:c6:fc:cb:
                    fe:22:e9:5d:54:d1:5c:5c:90:3f:24:da:22:46:5d:
                    65:d9:1e:b0:1c:cd:9f:da:24:e6:6e:db:a9:36:d9:
                    38:2f:ff:02:0e:a2:5d:ac:87:17:65:84:30:df:38:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:84:80:58:AC:07:B0:17:94:C0:07:36:40:ED:8E:EC:B9:A1:00
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jEeEgFisB7AXlMAHNkDtjuy5oQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:7a:64:22:e0:02:8b:f0:b7:d0:d1:3f:8e:90:47:9b:cd:
         54:59:8b:4e:b5:cb:49:9f:1f:89:38:c1:a4:f9:1b:c1:d8:56:
         94:25:41:0c:13:d6:c3:f8:ec:04:0b:80:c1:88:3a:eb:4a:42:
         59:76:d9:48:27:18:5d:eb:f2:25:9d:bb:ff:c3:dc:31:9e:fa:
         b8:1d:04:ac:ed:fd:f6:10:9c:b2:e3:b4:21:8a:ed:83:0f:3b:
         2f:e8:39:c0:40:91:1f:b0:54:b7:f6:25:c4:eb:79:89:7a:81:
         7c:f5:8a:2c:2a:3a:21:6c:2b:f8:89:53:db:8e:8f:68:af:f0:
         22:02:a8:24:90:23:61:61:4e:54:87:15:9b:59:db:68:a7:85:
         fb:86:23:e4:ab:34:30:23:d9:60:aa:26:57:c6:2f:27:eb:63:
         8c:a9:8b:8a:43:0e:e8:aa:ab:95:0e:bb:1b:09:05:c0:dd:39:
         37:aa:4e:53:90:f5:3f:83:3f:38:d0:a6:3b:95:d0:25:f0:7e:
         2e:87:28:e4:91:2e:d7:b9:ec:ee:74:b6:17:f7:8a:15:60:00:
         7b:9a:14:9c:8c:27:9d:dc:42:e0:e7:73:57:b4:4d:88:14:d0:
         9a:77:17:98:50:25:a9:a9:28:82:6c:5b:3a:dd:3d:7e:c6:94:
         cd:8b:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org