Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qS1kdiaE_cy9qZt25-RbPjSwOxI.roa
File:                     qS1kdiaE_cy9qZt25-RbPjSwOxI.roa (raw, json)
Hash identifier:          gowhkm+xwXrPQwEV5wu6V+cdMSoN/yiAOtey4muzspY=
Subject key identifier:   A9:2D:64:76:26:84:FD:CC:BD:A9:9B:76:E7:E4:5B:3E:34:B0:3B:12
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07F7A97F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qS1kdiaE_cy9qZt25-RbPjSwOxI.roa
Signing time:             Sat 04 Jun 2022 00:02:20 +0000
ROA not before:           Sat 04 Jun 2022 00:02:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133671295 (0x7f7a97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  4 00:02:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a92d64762684fdccbda99b76e7e45b3e34b03b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:28:93:90:37:35:1a:21:f9:1a:53:ae:5a:
                    f9:b0:00:c7:db:f0:98:fd:58:cc:82:8f:81:4d:1d:
                    f3:e4:97:ec:50:c0:dd:6e:20:2a:91:3d:71:b7:e8:
                    a6:11:85:fe:dd:15:46:ec:01:1a:ff:b3:76:cd:47:
                    d5:49:57:e1:49:f1:b6:92:80:e0:5f:cc:5d:4a:b7:
                    75:31:c2:e4:75:d5:13:b2:b8:a6:91:49:e5:7e:54:
                    50:d5:75:bd:03:96:ed:82:26:dd:18:5c:0f:f0:6e:
                    49:3c:17:f0:27:d1:e2:2c:9b:51:58:ff:8c:4a:13:
                    d7:43:8c:b1:9e:13:a6:36:83:cb:d4:f4:f5:03:1b:
                    01:49:23:cf:c4:df:28:c9:05:aa:1b:15:ac:78:7b:
                    db:2f:ff:f0:5c:ef:ac:6e:90:58:8f:17:44:26:8e:
                    27:1a:85:ec:eb:25:7d:94:bd:0d:21:37:bc:69:b2:
                    16:af:7d:8e:eb:3a:83:a5:82:b5:03:2c:73:b5:ee:
                    a7:7f:f4:ba:d0:26:21:b5:48:de:e8:74:36:c0:a2:
                    0e:43:79:00:c4:a4:24:e3:be:d6:14:e1:7c:98:57:
                    03:48:fe:39:82:2c:8e:80:2c:70:b3:8a:64:4c:67:
                    c5:a0:16:42:b3:40:1c:01:2c:c3:4d:61:64:d7:7c:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2D:64:76:26:84:FD:CC:BD:A9:9B:76:E7:E4:5B:3E:34:B0:3B:12
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qS1kdiaE_cy9qZt25-RbPjSwOxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:4f:7e:df:76:ab:fd:7b:04:a2:fe:88:21:2a:6e:16:d3:36:
         f2:2f:71:42:2d:58:47:3c:e7:83:50:87:30:71:cf:98:51:58:
         d3:b9:ba:b8:e5:d4:c9:4b:36:01:f8:85:62:b0:f6:e2:1f:74:
         84:f6:cc:89:c4:27:3a:d1:2e:07:13:30:03:b9:ad:d4:5f:f9:
         f1:c5:18:1d:7f:7f:b9:4d:73:b4:eb:37:c6:0a:0e:c3:80:be:
         7b:6e:0f:b7:89:a6:e0:b2:82:54:06:ef:c2:6b:15:d9:3c:f1:
         c5:b8:5c:09:77:44:f1:b3:06:99:90:11:23:48:4d:c1:9f:93:
         08:1f:f0:a8:fd:f2:8e:99:20:83:67:b1:73:e0:9f:4f:a6:f8:
         fb:16:16:30:b6:f5:a8:5f:32:78:30:c5:8c:1a:a0:56:d9:92:
         d1:d5:b7:fc:6f:98:9e:1c:52:f6:49:65:f1:bc:0b:54:4a:9a:
         8d:87:0b:4d:d3:a4:dc:38:c6:b0:89:cf:49:9c:a2:7c:18:75:
         ae:56:b4:bf:a5:cb:3c:da:fc:17:1a:48:0e:3b:00:f0:fe:03:
         66:9d:be:2a:40:a4:7d:bc:33:7d:a3:89:76:ec:16:0b:c4:55:
         9d:11:46:42:d7:87:65:e9:0d:de:2b:3e:82:fe:4e:bb:31:36:
         76:9e:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org