Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/spmkg81airz0J_xVwRIXrMkRERY.roa
File:                     spmkg81airz0J_xVwRIXrMkRERY.roa (raw, json)
Hash identifier:          GuMvUH+xhcInnM+vLoFUIKwNlFuqLbFUiiRlvDO2Jck=
Subject key identifier:   B2:99:A4:83:CD:5A:8A:BC:F4:27:FC:55:C1:12:17:AC:C9:11:11:16
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       069A2252
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/spmkg81airz0J_xVwRIXrMkRERY.roa
Signing time:             Sun 08 May 2022 05:14:46 +0000
ROA not before:           Sun 08 May 2022 05:14:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110764626 (0x69a2252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  8 05:14:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b299a483cd5a8abcf427fc55c11217acc9111116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:13:b0:ba:7e:23:e8:a7:61:aa:9f:ae:5e:
                    18:c1:ca:04:41:49:55:54:48:7a:9a:62:63:b7:fb:
                    c0:16:5a:09:d6:e8:6f:d8:ce:01:25:e2:bb:a3:0b:
                    5e:3b:5e:31:5a:19:7c:d5:f0:7b:fd:39:9d:a6:ee:
                    ad:0c:bc:d0:15:27:1a:f5:e5:fe:e7:5d:cc:95:e8:
                    71:b5:59:f6:db:25:57:37:52:6c:01:35:cd:af:7d:
                    70:b5:03:30:36:b4:90:f5:05:cb:e6:f5:bb:e7:53:
                    63:5e:ac:d8:5f:f2:42:84:08:51:a3:d2:7c:be:f8:
                    80:51:36:4d:c3:52:3c:cc:ab:07:72:34:f4:bf:87:
                    d5:46:88:dc:f8:42:c1:e3:f5:e8:f9:75:c6:06:47:
                    77:cc:60:01:5c:29:21:3f:fd:de:c9:08:f1:52:72:
                    d5:65:7b:97:a0:95:19:09:ad:dc:cd:0a:b1:ce:0b:
                    da:b8:f4:0e:e5:54:94:68:83:be:9d:fd:bd:94:60:
                    fa:fc:0e:2e:67:07:cd:1a:fb:c5:e2:f9:3f:c7:10:
                    ee:f6:2b:ac:b2:28:36:54:26:b0:c3:00:78:02:ba:
                    95:75:c1:4f:89:bb:5f:37:9d:83:6c:e8:16:98:3d:
                    d4:2a:bf:17:aa:58:3e:ec:69:76:d5:68:b4:47:2b:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:A4:83:CD:5A:8A:BC:F4:27:FC:55:C1:12:17:AC:C9:11:11:16
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/spmkg81airz0J_xVwRIXrMkRERY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:7b:2b:36:1a:99:28:39:d1:56:09:1a:cc:d1:7e:6b:a3:
         36:d2:00:ef:63:b4:9b:eb:f1:b5:39:1b:7e:d3:e4:fe:31:23:
         6d:5a:2f:10:a5:40:d7:9c:ae:ea:af:6e:5d:cc:cf:0f:d7:d8:
         c8:6f:15:c9:47:26:2d:4f:c6:ce:a7:63:64:2c:77:25:db:33:
         9a:32:c2:38:66:26:44:09:bc:57:67:75:88:df:48:55:ac:8c:
         ad:bf:f2:31:36:ca:5c:8e:a9:8e:32:a6:f1:a4:f3:bd:87:be:
         4c:b8:48:d8:06:09:1b:da:4e:01:33:09:7a:f7:23:cb:13:3f:
         46:20:04:7d:94:67:c0:6a:d1:f0:78:e0:57:d1:67:6e:b7:c8:
         1e:32:7c:82:63:89:17:91:34:23:92:5b:ea:21:77:1d:12:20:
         a5:3d:1d:5a:10:3a:c8:7d:f7:62:ec:9d:22:d0:90:5d:89:94:
         2a:f9:d7:d1:17:c8:ce:59:78:bc:cc:c8:05:48:26:ba:d3:84:
         e8:84:2f:25:e2:34:65:d6:62:71:23:e9:48:e5:75:7c:8c:74:
         61:1a:9a:e3:ca:9c:bf:08:09:29:e3:9f:c4:ee:9d:19:69:b9:
         fb:bb:88:df:24:95:ec:5b:f5:3d:d4:ff:32:90:11:00:f0:9a:
         64:89:fa:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBpoiUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUw
ODA1MTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI5OWE0ODNjZDVh
OGFiY2Y0MjdmYzU1YzExMjE3YWNjOTExMTExNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMovE7C6fiPop2Gqn65eGMHKBEFJVVRIeppiY7f7wBZaCdbo
b9jOASXiu6MLXjteMVoZfNXwe/05naburQy80BUnGvXl/uddzJXocbVZ9tslVzdS
bAE1za99cLUDMDa0kPUFy+b1u+dTY16s2F/yQoQIUaPSfL74gFE2TcNSPMyrB3I0
9L+H1UaI3PhCweP16Pl1xgZHd8xgAVwpIT/93skI8VJy1WV7l6CVGQmt3M0Ksc4L
2rj0DuVUlGiDvp39vZRg+vwOLmcHzRr7xeL5P8cQ7vYrrLIoNlQmsMMAeAK6lXXB
T4m7Xzedg2zoFpg91Cq/F6pYPuxpdtVotEcre9sCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSymaSDzVqKvPQn/FXBEhesyRERFjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3NwbWtnODFhaXJ6MEpfeFZ3UklYck1rUkVSWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBsFXsrNhqZKDnRVgkazNF+a6M20gDvY7Sb6/G1
ORt+0+T+MSNtWi8QpUDXnK7qr25dzM8P19jIbxXJRyYtT8bOp2NkLHcl2zOaMsI4
ZiZECbxXZ3WI30hVrIytv/IxNspcjqmOMqbxpPO9h75MuEjYBgkb2k4BMwl69yPL
Ez9GIAR9lGfAatHweOBX0Wdut8geMnyCY4kXkTQjklvqIXcdEiClPR1aEDrIffdi
7J0i0JBdiZQq+dfRF8jOWXi8zMgFSCa604TohC8l4jRl1mJxI+lI5XV8jHRhGprj
ypy/CAkp45/E7p0Zabn7u4jfJJXsW/U91P8ykBEA8Jpkifoe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org