Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/l0KtWstR-6ar5CpWuoqPDS0VEYA.roa
File:                     l0KtWstR-6ar5CpWuoqPDS0VEYA.roa (raw, json)
Hash identifier:          eUyZMusSrch+PuZ0tEHspq8kew3Fy5t/fuLM4QUEQJo=
Subject key identifier:   97:42:AD:5A:CB:51:FB:A6:AB:E4:2A:56:BA:8A:8F:0D:2D:15:11:80
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06AFECB3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/l0KtWstR-6ar5CpWuoqPDS0VEYA.roa
Signing time:             Tue 10 May 2022 00:50:07 +0000
ROA not before:           Tue 10 May 2022 00:50:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112192691 (0x6afecb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 10 00:50:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9742ad5acb51fba6abe42a56ba8a8f0d2d151180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:5a:fe:62:e4:17:23:6c:d1:24:1e:ff:62:
                    83:ca:cf:ca:4a:ed:21:ef:67:4d:72:7b:91:60:d8:
                    9b:99:65:30:59:3f:40:1e:f4:1c:16:a1:e4:ee:37:
                    47:a5:17:b9:94:07:c4:ba:9e:02:48:02:f0:24:ed:
                    89:6e:4c:8f:d8:88:a5:2a:b1:2b:39:1b:3a:ad:88:
                    86:37:6c:5c:43:0d:eb:da:7c:f8:ec:f6:4d:ed:af:
                    cc:3a:32:1f:eb:94:b9:46:77:db:86:b2:4e:f8:eb:
                    29:a7:c4:fe:cc:a3:b3:f5:00:f3:e3:52:93:22:35:
                    d5:c0:3f:a4:1c:a3:e5:bc:b4:0b:b7:cc:19:70:20:
                    d5:f4:24:cf:1e:09:e9:62:c3:69:23:41:49:fc:37:
                    0f:d1:d4:b5:4a:5d:05:5f:cb:10:70:e9:e1:03:7d:
                    1c:c9:a6:9a:13:1e:f3:76:68:36:d7:54:3b:1f:bb:
                    15:0c:8e:2d:27:33:41:6a:d6:c6:6a:f5:76:81:23:
                    2a:1a:55:cd:1c:50:2f:dc:e3:3b:f6:e6:b4:f2:8f:
                    d0:51:c0:93:53:52:20:5a:ff:2a:cd:99:62:f9:db:
                    ce:dc:d0:07:d0:40:b7:f1:25:17:4c:85:76:3e:f7:
                    5a:7d:f1:67:ea:ca:b0:90:2f:57:6c:2d:ac:05:28:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:42:AD:5A:CB:51:FB:A6:AB:E4:2A:56:BA:8A:8F:0D:2D:15:11:80
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/l0KtWstR-6ar5CpWuoqPDS0VEYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:60:41:0d:8f:16:07:b1:2b:78:7d:af:f8:a4:f3:99:de:c2:
         95:c0:cb:8c:7c:0f:37:51:df:26:ae:2e:28:89:b4:2b:db:85:
         8a:54:0d:10:70:5c:7f:c3:be:9e:b5:55:ff:52:a2:4b:78:2d:
         14:ec:b9:f2:57:66:fe:98:e9:38:ea:ca:7c:1e:b1:38:67:de:
         dd:f6:af:8f:e7:62:7e:ed:17:18:b6:00:fe:ec:c9:91:4b:81:
         98:b2:fd:fe:5a:8d:39:7f:0a:73:85:72:80:aa:5f:db:56:cf:
         d7:1c:4e:d8:98:a7:ff:d3:d4:ab:cc:a5:a6:66:84:e3:8b:07:
         bd:72:39:36:16:38:1f:c0:fe:d6:6b:34:9b:b4:2e:f8:e6:9e:
         1e:07:dc:87:5a:82:85:01:de:ed:df:7c:8f:d8:6b:fe:1e:d3:
         0e:74:0d:33:ca:e4:58:42:41:3b:fa:e4:89:1c:c8:94:3a:fe:
         17:6d:da:31:14:c3:13:4e:81:7f:03:b2:e7:40:0e:cc:79:7c:
         35:7f:c3:e9:d1:d7:3a:8d:4b:9b:2d:70:5f:01:af:70:1b:55:
         6d:23:ef:f8:91:95:f9:87:74:00:be:b1:98:44:c2:3b:bf:15:
         f4:71:01:33:cb:5d:20:79:11:ba:18:cb:c4:2d:28:94:26:de:
         82:79:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org