Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/liSIjiHmHq_iA-L_ku0gkbxdp6k.roa
File:                     liSIjiHmHq_iA-L_ku0gkbxdp6k.roa (raw, json)
Hash identifier:          PwRXgveLEiOHbbgA33nau9PVSHbiyaRDuT/S4HSfktI=
Subject key identifier:   96:24:88:8E:21:E6:1E:AF:E2:03:E2:FF:92:ED:20:91:BC:5D:A7:A9
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0952E92C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/liSIjiHmHq_iA-L_ku0gkbxdp6k.roa
Signing time:             Thu 30 Jun 2022 04:35:02 +0000
ROA not before:           Thu 30 Jun 2022 04:35:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156428588 (0x952e92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 30 04:35:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9624888e21e61eafe203e2ff92ed2091bc5da7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:d8:13:98:58:cb:d9:00:28:94:e2:31:3b:
                    9e:fb:af:12:f5:6e:76:3a:d8:0b:43:ce:e6:63:42:
                    c2:65:e4:9f:96:8e:cd:15:d5:f6:f1:6d:a7:16:d2:
                    09:65:07:45:5c:06:09:e5:93:11:c1:19:40:52:ee:
                    67:6c:a3:0c:0c:d6:1a:4f:57:14:cd:32:5d:84:55:
                    aa:20:47:b2:91:41:88:5a:44:fa:45:bf:94:2b:67:
                    ee:41:94:33:b6:d8:cd:1c:39:89:13:6b:9c:5a:1d:
                    20:cf:c4:97:b7:34:a8:f2:6e:39:2a:5c:49:50:3d:
                    98:9f:5f:12:93:3b:75:83:f3:de:02:bf:8d:ba:f3:
                    23:15:e4:d2:5d:81:db:ce:a9:97:d0:19:35:9d:1b:
                    49:b8:16:61:25:8e:a7:61:a4:c4:83:52:db:23:86:
                    e3:43:97:18:31:ee:0d:40:c8:25:f8:10:ea:45:0a:
                    b7:f2:12:b8:fe:7a:5c:fc:3f:e8:cd:11:8d:2a:a6:
                    31:2c:51:df:2f:85:65:1b:f0:8b:e3:68:66:12:16:
                    61:7e:de:83:ac:0f:ec:02:4d:69:eb:e1:2a:cb:3d:
                    20:a0:78:79:b0:85:41:7c:05:0d:6f:5b:48:59:35:
                    06:60:8c:d2:92:c7:46:17:bf:54:35:e2:dc:12:8d:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:24:88:8E:21:E6:1E:AF:E2:03:E2:FF:92:ED:20:91:BC:5D:A7:A9
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/liSIjiHmHq_iA-L_ku0gkbxdp6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a7:dc:47:67:7e:6b:71:15:77:a5:79:b7:35:1b:c8:a7:85:
         32:c3:38:50:1c:f2:88:69:10:b0:1b:af:41:6d:46:bc:61:c4:
         49:4a:3b:7a:13:45:28:ee:e2:46:ca:32:db:7b:56:e9:ee:d6:
         bb:f5:7b:bc:cb:c4:6f:70:80:ad:d3:dc:f2:34:9d:35:54:a6:
         29:74:f4:79:cb:cd:12:ad:15:7c:37:23:fe:24:e2:e6:69:81:
         50:d3:f8:5f:3e:1c:ab:4e:0e:64:91:15:22:88:49:3d:14:74:
         18:c5:d8:04:87:1d:10:80:58:43:1a:52:89:6c:7d:00:c3:9c:
         3b:85:1f:ad:0d:7c:06:8c:34:82:77:3c:91:ef:b7:1a:ad:1d:
         6a:31:a8:85:cc:51:31:8b:29:19:5e:33:43:0a:5a:bf:dd:71:
         41:2d:84:dc:62:f9:51:60:ba:f6:63:cd:39:79:2f:ca:2f:b0:
         c0:2d:b8:38:60:07:44:29:1c:a1:d1:ec:8b:18:64:ab:c2:98:
         84:a7:8a:d4:31:be:48:29:6f:07:ff:5c:58:52:d9:58:77:ac:
         5e:af:47:93:18:5a:44:1c:60:b3:ff:51:35:f1:ee:f8:2b:7a:
         d6:70:bf:42:13:de:13:92:d8:bd:d2:0c:02:7d:92:1f:c4:2f:
         62:62:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org