Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kvHjf2tYUzQygQyYSKnrOLrZZ3M.roa
File:                     kvHjf2tYUzQygQyYSKnrOLrZZ3M.roa (raw, json)
Hash identifier:          XUuXhCrd2XkP0ehToULPUO70ujR5I4lqeb3+qa1mXqo=
Subject key identifier:   92:F1:E3:7F:6B:58:53:34:32:81:0C:98:48:A9:EB:38:BA:D9:67:73
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07E0D453
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kvHjf2tYUzQygQyYSKnrOLrZZ3M.roa
Signing time:             Thu 02 Jun 2022 03:00:20 +0000
ROA not before:           Thu 02 Jun 2022 03:00:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132174931 (0x7e0d453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  2 03:00:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92f1e37f6b58533432810c9848a9eb38bad96773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:bb:d7:f6:1c:e4:c6:ff:35:17:de:e1:a5:
                    11:d0:44:d2:67:9b:ad:bc:4f:78:54:15:29:a9:1b:
                    c1:27:6a:00:bf:5e:19:c1:fb:16:81:34:1e:58:52:
                    a1:6b:e3:57:a4:be:3d:b4:a6:11:ce:d6:67:00:cc:
                    39:89:2e:4a:b7:0b:84:ce:bf:44:88:90:d3:21:65:
                    1a:88:d5:c9:82:c8:27:bd:ac:17:97:e4:36:ff:9d:
                    99:81:e1:ee:b0:c3:9d:d6:bc:30:20:c6:67:ce:28:
                    c5:c5:cd:85:6e:74:1b:48:2c:bf:c3:ab:37:38:a9:
                    b9:41:59:ec:11:f9:ec:4f:1e:5b:7a:71:1b:36:85:
                    9a:22:43:fe:e6:23:7a:5c:e2:be:c2:21:ee:cd:97:
                    ec:e7:c0:b8:28:58:74:4e:2c:db:3a:eb:4f:51:5f:
                    39:a9:a6:27:9b:57:76:9e:f8:28:99:df:00:4d:57:
                    85:0d:8b:db:63:ca:35:12:b3:e4:5c:05:cf:7e:c8:
                    2c:29:c2:33:06:8f:fa:0c:2d:d7:3c:67:7e:3b:a2:
                    d1:02:e6:4e:fb:ef:e1:dd:fd:fa:48:74:04:0b:8d:
                    05:26:ba:3b:32:78:63:f0:af:ec:a3:f6:bf:c0:ed:
                    0d:c2:9e:bf:1f:a6:2c:92:3e:89:9c:2d:54:90:fc:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F1:E3:7F:6B:58:53:34:32:81:0C:98:48:A9:EB:38:BA:D9:67:73
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kvHjf2tYUzQygQyYSKnrOLrZZ3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:cc:61:d7:fb:da:c3:2e:6c:eb:f4:2a:f8:62:75:b6:f2:
         44:8a:a6:ad:21:0a:c1:ea:f0:c4:c8:e7:ac:a1:ba:f4:17:d0:
         5c:32:15:b8:33:b3:50:9b:69:87:bf:da:c2:9e:ef:57:87:db:
         3d:b8:c5:2b:6e:e1:53:0b:88:e6:0c:05:39:a1:87:ce:67:77:
         3a:5b:70:e9:e3:cf:bd:2a:7e:00:40:56:f8:96:27:63:4f:66:
         48:0d:45:bf:b4:ff:9f:ab:a7:78:1c:b5:29:e7:fb:fa:ec:97:
         a9:9c:d2:fa:2d:af:51:3f:84:d2:2a:a3:fd:db:f8:7c:21:16:
         ce:1d:fe:be:6c:3f:27:b9:75:1c:72:94:dc:85:16:02:f2:79:
         c7:7b:c5:51:50:c8:15:8d:62:21:d1:7f:80:17:42:3d:d6:42:
         fa:16:51:34:b2:a6:0c:f2:58:22:31:14:e6:17:f9:72:f6:1f:
         42:07:c6:bf:78:41:8a:91:e2:ec:17:ce:a5:bb:4e:8d:c7:cc:
         dd:6b:59:ba:7c:92:56:98:03:f6:58:f4:29:98:4a:fc:9d:e2:
         25:2b:e9:0d:26:79:7b:34:0d:73:92:2f:7e:6a:ba:8e:da:e7:
         03:b5:f2:4c:2c:81:cb:f2:34:e9:02:e4:17:10:f4:82:f4:a0:
         e7:a9:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org