Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rbDTntedBgfj7LOfyHMianHvHv8.roa
File:                     rbDTntedBgfj7LOfyHMianHvHv8.roa (raw, json)
Hash identifier:          XucSdH+cBM/YK5QJOXzsWzcRzlVvKxPbDQM7RVm+geY=
Subject key identifier:   AD:B0:D3:9E:D7:9D:06:07:E3:EC:B3:9F:C8:73:22:6A:71:EF:1E:FF
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       087D6F83
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rbDTntedBgfj7LOfyHMianHvHv8.roa
Signing time:             Tue 14 Jun 2022 03:57:44 +0000
ROA not before:           Tue 14 Jun 2022 03:57:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142438275 (0x87d6f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 14 03:57:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=adb0d39ed79d0607e3ecb39fc873226a71ef1eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:15:54:a8:a6:dc:42:18:a5:61:61:67:2c:
                    33:2c:49:00:90:18:b9:5a:de:8c:94:20:05:16:86:
                    73:23:8b:9d:35:50:7e:14:c5:b9:d7:00:03:fa:ce:
                    25:7d:96:c2:e5:5c:ad:f6:b1:65:55:1b:cd:3e:67:
                    9b:91:16:d8:85:e3:05:bb:ff:0a:22:b9:e9:fb:cf:
                    57:39:5e:37:25:9a:30:fb:ab:87:23:ce:1c:6b:f9:
                    f6:a7:45:ac:63:d7:9e:b0:24:16:c2:0b:7b:26:2e:
                    d5:c3:30:08:57:86:e9:9d:57:de:04:86:aa:43:a6:
                    14:e4:58:c7:26:da:85:4d:69:49:17:2f:14:11:03:
                    a6:ff:cb:f3:49:4a:48:e9:18:d6:53:45:cc:78:87:
                    8d:a8:47:ab:fc:ce:75:a4:f2:bc:a0:4e:2c:af:28:
                    a8:5c:77:d3:91:eb:df:0f:42:b7:b7:38:f2:57:02:
                    57:07:10:82:2a:6c:f1:0f:b6:00:7e:d8:dc:cd:50:
                    80:94:f5:b7:da:f3:8c:e9:95:e4:76:9c:43:77:44:
                    12:65:8f:8f:32:1e:4d:ea:6a:02:30:ed:d2:73:a3:
                    e5:73:d5:13:16:9a:d1:d9:95:59:b7:10:a5:bc:8c:
                    06:ac:c3:88:8c:f9:52:04:3f:a4:92:9b:b8:03:a5:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:D3:9E:D7:9D:06:07:E3:EC:B3:9F:C8:73:22:6A:71:EF:1E:FF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rbDTntedBgfj7LOfyHMianHvHv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:a3:42:8c:a2:1b:2a:cb:f7:e2:32:b1:c0:3c:76:31:9c:
         19:02:f8:e4:b3:e0:58:7f:16:bc:16:51:63:ee:f2:74:04:3d:
         6e:b7:a1:5d:a5:5a:48:17:90:00:5e:e4:63:52:fe:8d:03:4a:
         98:b2:86:6f:be:d3:0b:9f:0a:3e:1a:7d:e8:cd:4a:84:2d:c0:
         24:af:4f:19:33:05:9f:92:a7:43:42:e9:a8:97:21:e7:54:67:
         b9:a6:ba:49:2c:9b:ad:e3:e8:38:ea:62:7d:10:80:17:d5:8d:
         94:be:48:5a:ee:97:55:43:40:cb:14:e4:02:6f:19:55:22:37:
         25:1e:2f:38:a3:5c:2e:3d:da:24:bd:10:cc:d9:1c:54:f8:fc:
         dd:1e:17:f2:d4:cb:e6:9e:95:be:69:3b:f5:b8:bb:1f:4a:ea:
         27:cb:2d:f9:1b:60:6c:3b:13:23:27:5d:f6:73:b6:b5:a3:81:
         10:25:f7:db:40:76:bd:fb:23:fb:80:d2:57:6f:70:ab:42:88:
         3a:19:ff:b8:c0:60:c0:50:ae:58:16:20:50:70:1e:15:29:df:
         79:41:aa:ce:a3:35:cc:29:85:ac:29:b6:17:ba:84:cf:48:db:
         e4:12:0d:15:e9:4d:50:74:95:9b:e8:94:f8:3a:40:f3:9a:bc:
         55:d6:48:c6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECH1vgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NDAzNTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRiMGQzOWVkNzlk
MDYwN2UzZWNiMzlmYzg3MzIyNmE3MWVmMWVmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKnEFVSoptxCGKVhYWcsMyxJAJAYuVrejJQgBRaGcyOLnTVQ
fhTFudcAA/rOJX2WwuVcrfaxZVUbzT5nm5EW2IXjBbv/CiK56fvPVzleNyWaMPur
hyPOHGv59qdFrGPXnrAkFsILeyYu1cMwCFeG6Z1X3gSGqkOmFORYxybahU1pSRcv
FBEDpv/L80lKSOkY1lNFzHiHjahHq/zOdaTyvKBOLK8oqFx305Hr3w9Ct7c48lcC
VwcQgips8Q+2AH7Y3M1QgJT1t9rzjOmV5HacQ3dEEmWPjzIeTepqAjDt0nOj5XPV
Exaa0dmVWbcQpbyMBqzDiIz5UgQ/pJKbuAOlDM8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBStsNOe150GB+Pss5/IcyJqce8e/zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3JiRFRudGVkQmdmajdMT2Z5SE1pYW5Idkh2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIjANBgkqhkiG9w0BAQsFAAOC
AQEAkF6jQoyiGyrL9+IyscA8djGcGQL45LPgWH8WvBZRY+7ydAQ9brehXaVaSBeQ
AF7kY1L+jQNKmLKGb77TC58KPhp96M1KhC3AJK9PGTMFn5KnQ0LpqJch51Rnuaa6
SSybrePoOOpifRCAF9WNlL5IWu6XVUNAyxTkAm8ZVSI3JR4vOKNcLj3aJL0QzNkc
VPj83R4X8tTL5p6Vvmk79bi7H0rqJ8st+RtgbDsTIydd9nO2taOBECX320B2vfsj
+4DSV29wq0KIOhn/uMBgwFCuWBYgUHAeFSnfeUGqzqM1zCmFrCm2F7qEz0jb5BIN
FelNUHSVm+iU+DpA85q8VdZIxg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org