Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qUWf7Tfhu6j59YzubVP9PAYK8Ho.roa
File:                     qUWf7Tfhu6j59YzubVP9PAYK8Ho.roa (raw, json)
Hash identifier:          RdnwFzo9xWvgaserGppip2jo5LH+FelppNctn0oJKwc=
Subject key identifier:   A9:45:9F:ED:37:E1:BB:A8:F9:F5:8C:EE:6D:53:FD:3C:06:0A:F0:7A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181D1F7852FA813A75FC6441A502C5EDF37
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qUWf7Tfhu6j59YzubVP9PAYK8Ho.roa
Signing time:             Wed 06 Jul 2022 05:24:28 +0000
ROA not before:           Wed 06 Jul 2022 05:24:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d1:f7:85:2f:a8:13:a7:5f:c6:44:1a:50:2c:5e:df:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  6 05:24:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9459fed37e1bba8f9f58cee6d53fd3c060af07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:79:26:d5:ee:41:5a:cc:15:04:94:04:ac:
                    58:61:de:d9:c5:9d:69:f7:d8:84:61:ca:90:58:40:
                    3a:be:a6:b4:10:89:59:f5:ff:7c:9f:8d:a0:cb:5b:
                    19:98:7a:6f:7a:b1:0e:66:86:92:e3:64:64:77:2e:
                    3b:81:c3:86:d1:29:36:15:4b:dd:03:cd:5a:f3:67:
                    ae:18:e4:0b:b9:30:ea:4b:f0:b2:8f:55:e5:af:d4:
                    f1:a5:94:96:10:98:98:36:2d:bf:86:45:f9:16:d1:
                    6d:1a:40:f8:f7:b9:4c:27:ed:14:d5:e1:0e:b6:1f:
                    2e:5c:56:49:9c:94:af:8a:3f:de:43:b8:07:80:c1:
                    77:cf:8d:dc:13:23:20:7e:3c:af:0e:93:88:61:09:
                    d3:01:fa:ec:e4:fb:7d:82:f6:0b:ee:e4:09:24:cf:
                    a0:88:e9:2a:70:da:43:ac:c1:84:d3:d2:1b:7b:a0:
                    e6:ae:18:f0:e4:8d:72:52:1b:ff:d6:b3:9c:dd:f8:
                    1f:3e:28:43:b4:2e:1a:cc:a8:ea:57:a9:e6:a2:a2:
                    8f:d8:96:c5:d9:4c:97:3a:1c:d7:46:aa:41:ac:37:
                    45:1a:b5:97:8e:50:a7:eb:f6:3a:89:ca:ae:27:42:
                    45:62:db:e6:e7:91:7b:22:bc:28:fe:d2:de:7a:66:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:9F:ED:37:E1:BB:A8:F9:F5:8C:EE:6D:53:FD:3C:06:0A:F0:7A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qUWf7Tfhu6j59YzubVP9PAYK8Ho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:69:d2:98:8b:85:a7:01:f3:43:23:9f:72:58:4e:12:0f:82:
         13:01:12:04:1c:a0:4a:98:56:4c:b7:21:9f:84:13:a0:3b:e6:
         a4:de:6c:e2:f5:df:d5:b0:83:33:dc:86:1d:2e:21:7b:30:fe:
         6d:7b:6a:07:ad:89:2a:42:21:a9:34:20:90:1e:25:1b:c8:1f:
         09:3b:ad:19:26:9f:5c:25:c1:f3:17:ff:82:6b:f2:81:98:ef:
         b4:a9:93:2c:75:74:39:b9:ee:80:4a:58:4c:64:ba:3a:51:67:
         73:5e:fa:e1:01:4a:36:72:c8:57:7b:17:6f:f1:a4:5b:0b:f6:
         25:d4:33:8c:ce:2f:25:bb:9c:a5:ee:93:85:ac:b3:c8:04:99:
         80:82:ba:8e:85:77:e6:7e:75:c4:b1:68:42:a9:fc:dc:8a:26:
         1c:23:b6:9a:09:45:28:2e:55:06:f5:61:7c:c9:07:be:03:67:
         4b:b0:93:0c:fe:4f:57:96:cf:f4:0b:83:9d:9c:7f:b7:de:a4:
         97:2f:5d:b6:1b:f5:e8:12:44:6f:e7:16:54:2b:12:bd:0b:ab:
         1b:7a:52:ea:f8:c9:ee:96:0e:2f:64:04:ee:05:19:b4:34:18:
         fd:13:58:58:a8:44:b6:e3:fe:f3:fe:c8:4d:66:b6:fb:c5:35:
         86:2e:61:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHR94UvqBOnX8ZEGlAsXt83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzA2MDUyNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQ1OWZlZDM3ZTFiYmE4ZjlmNThjZWU2ZDUzZmQzYzA2MGFmMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3El5JtXuQVrMFQSUBKxYYd7ZxZ1p
99iEYcqQWEA6vqa0EIlZ9f98n42gy1sZmHpverEOZoaS42Rkdy47gcOG0Sk2FUvd
A81a82euGOQLuTDqS/Cyj1Xlr9TxpZSWEJiYNi2/hkX5FtFtGkD497lMJ+0U1eEO
th8uXFZJnJSvij/eQ7gHgMF3z43cEyMgfjyvDpOIYQnTAfrs5Pt9gvYL7uQJJM+g
iOkqcNpDrMGE09Ibe6Dmrhjw5I1yUhv/1rOc3fgfPihDtC4azKjqV6nmoqKP2JbF
2UyXOhzXRqpBrDdFGrWXjlCn6/Y6icquJ0JFYtvm55F7Irwo/tLeemam1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKlFn+034buo+fWM7m1T/TwGCvB6MB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvcVVXZjdUZmh1Nmo1OVl6dWJWUDlQQVlLOEhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9ghMA0G
CSqGSIb3DQEBCwUAA4IBAQAQadKYi4WnAfNDI59yWE4SD4ITARIEHKBKmFZMtyGf
hBOgO+ak3mzi9d/VsIMz3IYdLiF7MP5te2oHrYkqQiGpNCCQHiUbyB8JO60ZJp9c
JcHzF/+Ca/KBmO+0qZMsdXQ5ue6ASlhMZLo6UWdzXvrhAUo2cshXexdv8aRbC/Yl
1DOMzi8lu5yl7pOFrLPIBJmAgrqOhXfmfnXEsWhCqfzciiYcI7aaCUUoLlUG9WF8
yQe+A2dLsJMM/k9Xls/0C4OdnH+33qSXL122G/XoEkRv5xZUKxK9C6sbelLq+Mnu
lg4vZATuBRm0NBj9E1hYqES24/7z/shNZrb7xTWGLmGD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org