Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jUEtW8ObLezns8zQi3vRCQJnXEc.roa
File:                     jUEtW8ObLezns8zQi3vRCQJnXEc.roa (raw, json)
Hash identifier:          Kfwy3OeXAI5OdD7dn/qqd5XaQCtt6+pHS3CR3qz2qP8=
Subject key identifier:   8D:41:2D:5B:C3:9B:2D:EC:E7:B3:CC:D0:8B:7B:D1:09:02:67:5C:47
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06E059E6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jUEtW8ObLezns8zQi3vRCQJnXEc.roa
Signing time:             Sat 14 May 2022 00:49:40 +0000
ROA not before:           Sat 14 May 2022 00:49:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115366374 (0x6e059e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 14 00:49:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d412d5bc39b2dece7b3ccd08b7bd10902675c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:53:0c:e4:a0:62:f9:f1:b9:68:4b:a9:7c:
                    e7:8b:df:84:c9:de:07:ec:75:c5:8b:35:45:b9:66:
                    cf:98:6c:57:85:43:6d:d7:cc:34:0b:67:cb:a8:c8:
                    c9:a9:5b:05:3c:49:95:0c:1c:92:52:d7:ae:b0:7e:
                    4d:a9:f2:bb:7e:ff:4a:85:82:32:93:56:d0:85:54:
                    df:51:92:7b:9d:78:8f:0a:a4:e8:e6:a3:c9:30:e7:
                    a4:48:9c:1b:0b:19:dd:c3:1a:83:d2:89:a0:14:c2:
                    2b:05:e1:ec:a6:70:f7:b4:f7:9d:31:37:aa:ed:c1:
                    fc:43:39:6e:7e:61:e8:4f:07:f7:61:66:62:81:0d:
                    39:c6:57:a5:d4:18:42:c2:95:df:7f:58:78:00:ee:
                    47:23:06:17:38:16:01:79:66:49:39:81:ee:48:b8:
                    6b:6b:45:07:40:da:ff:79:82:f4:31:42:27:2c:ef:
                    03:b9:5f:af:86:e2:85:2f:82:d0:c7:d9:00:0e:17:
                    71:bb:6d:4b:d8:70:b2:9c:42:7e:e7:ef:1d:ba:c6:
                    be:d1:7e:c9:48:0a:a0:1e:b6:ea:98:c9:91:0b:16:
                    f9:11:04:27:16:4e:37:30:05:12:3e:84:a0:9c:f5:
                    13:c5:aa:bc:54:f3:7d:8f:0d:6c:de:2c:5e:ed:b0:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:41:2D:5B:C3:9B:2D:EC:E7:B3:CC:D0:8B:7B:D1:09:02:67:5C:47
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jUEtW8ObLezns8zQi3vRCQJnXEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:0f:26:91:9b:d4:b2:b1:a7:d0:02:4e:1e:d1:67:22:39:5a:
         cd:7b:49:ad:80:47:18:84:c3:d9:6a:e1:f9:a2:01:a9:83:90:
         74:b1:7c:c4:93:ae:4b:3c:4e:d7:41:42:21:a6:51:c8:dc:da:
         6c:d4:cc:46:10:75:fc:8f:bb:29:95:87:8f:6d:c0:22:6e:71:
         14:18:92:91:19:bc:08:6b:68:56:c3:b7:c0:62:c6:2f:3b:37:
         37:e0:2a:22:58:7a:b0:43:70:3f:eb:1c:aa:fd:77:74:3f:4d:
         5d:fe:4b:91:2e:6a:3e:02:6a:68:40:c0:2b:0d:9a:55:98:4c:
         fa:ba:90:6d:81:b8:e8:34:ef:33:33:b1:0f:98:75:33:78:f2:
         82:84:2f:dc:bf:9b:e6:22:fe:e1:4b:cf:f2:2c:0f:f9:47:1e:
         31:d7:8d:ac:b7:74:5a:06:10:39:4e:be:dd:8b:58:47:e1:38:
         56:7c:3c:e6:bd:8d:32:f4:da:bc:08:94:c8:53:f5:5d:a8:8b:
         18:39:71:be:20:76:55:11:d6:e0:d5:5b:f0:92:0d:3d:c6:ab:
         d2:b9:ea:00:90:40:64:71:03:3b:91:c0:08:74:60:9d:f3:c9:
         c9:98:e3:38:48:f4:b9:f3:c9:4c:f8:c4:fe:e5:7d:89:59:c6:
         27:f2:ea:f2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBuBZ5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
NDAwNDk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQ0MTJkNWJjMzli
MmRlY2U3YjNjY2QwOGI3YmQxMDkwMjY3NWM0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7eUwzkoGL58bloS6l854vfhMneB+x1xYs1Rblmz5hsV4VD
bdfMNAtny6jIyalbBTxJlQwcklLXrrB+Tanyu37/SoWCMpNW0IVU31GSe514jwqk
6OajyTDnpEicGwsZ3cMag9KJoBTCKwXh7KZw97T3nTE3qu3B/EM5bn5h6E8H92Fm
YoENOcZXpdQYQsKV339YeADuRyMGFzgWAXlmSTmB7ki4a2tFB0Da/3mC9DFCJyzv
A7lfr4bihS+C0MfZAA4XcbttS9hwspxCfufvHbrGvtF+yUgKoB626pjJkQsW+REE
JxZONzAFEj6EoJz1E8WqvFTzfY8NbN4sXu2wnOUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSNQS1bw5st7OezzNCLe9EJAmdcRzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2pVRXRXOE9iTGV6bnM4elFpM3ZSQ1FKblhFYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEARA8mkZvUsrGn0AJOHtFnIjlazXtJrYBHGITD2Wrh+aIBqYOQdLF8xJOuSzxO
10FCIaZRyNzabNTMRhB1/I+7KZWHj23AIm5xFBiSkRm8CGtoVsO3wGLGLzs3N+Aq
Ilh6sENwP+scqv13dD9NXf5LkS5qPgJqaEDAKw2aVZhM+rqQbYG46DTvMzOxD5h1
M3jygoQv3L+b5iL+4UvP8iwP+UceMdeNrLd0WgYQOU6+3YtYR+E4Vnw85r2NMvTa
vAiUyFP1XaiLGDlxviB2VRHW4NVb8JINPcar0rnqAJBAZHEDO5HACHRgnfPJyZjj
OEj0ufPJTPjE/uV9iVnGJ/Lq8g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org