Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tEkkA_UiLiAczIXPqsLJgHxMOZg.roa
File:                     tEkkA_UiLiAczIXPqsLJgHxMOZg.roa (raw, json)
Hash identifier:          F9odhxUMCWMl4ae7FwFxl8IQc1BdLnMA5iH/WIlym8A=
Subject key identifier:   B4:49:24:03:F5:22:2E:20:1C:CC:85:CF:AA:C2:C9:80:7C:4C:39:98
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06EC5095
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tEkkA_UiLiAczIXPqsLJgHxMOZg.roa
Signing time:             Sat 14 May 2022 16:52:06 +0000
ROA not before:           Sat 14 May 2022 16:52:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116150421 (0x6ec5095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 14 16:52:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4492403f5222e201ccc85cfaac2c9807c4c3998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:04:d3:67:8c:6d:91:1c:2d:78:63:d0:21:
                    e0:83:9a:36:51:ab:1c:ad:89:a3:cb:b6:21:f8:8c:
                    c8:76:a6:a6:ff:2a:03:2f:88:4f:38:ef:16:15:f0:
                    43:f4:be:08:22:8b:a8:fa:63:1a:dc:76:92:66:90:
                    5b:69:6b:db:18:58:ef:cd:a1:69:16:c6:8b:63:59:
                    d1:8b:e3:8a:96:21:f6:9e:af:c3:af:3f:fc:fb:ea:
                    25:18:da:ad:ee:8b:dc:ba:78:49:6b:ba:8a:a9:9e:
                    e9:10:0a:b9:be:b7:a5:f5:fc:35:b6:a1:8d:82:7d:
                    6a:e0:04:4d:17:1a:4e:09:b7:f6:8e:08:28:82:88:
                    04:1a:5b:dd:52:34:e6:99:16:80:48:54:34:f0:83:
                    ff:aa:e6:a4:e6:19:b7:a1:14:f4:96:76:c4:a6:a3:
                    99:a7:0f:eb:30:75:09:c9:e6:8d:cf:65:92:8e:57:
                    21:20:3f:03:4d:5f:d1:16:e7:b1:8d:11:f4:64:5f:
                    76:c5:34:a1:eb:15:fe:74:8f:37:a7:28:39:72:fd:
                    e0:73:76:8d:23:ed:cb:b1:11:b4:2e:a1:36:c4:9b:
                    13:44:3d:69:a6:1e:a7:03:72:0f:7f:c4:57:c3:c7:
                    34:02:d6:63:2c:d7:6a:a4:61:79:58:6b:a6:bc:c6:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:24:03:F5:22:2E:20:1C:CC:85:CF:AA:C2:C9:80:7C:4C:39:98
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tEkkA_UiLiAczIXPqsLJgHxMOZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         50:2a:18:8f:1e:c4:95:3a:d4:81:15:5f:d7:2e:5a:16:13:31:
         69:5f:c4:fc:b9:36:a1:42:4f:b5:ec:2f:ea:07:b8:15:4e:95:
         df:d4:0b:d4:6c:cf:56:82:5a:62:b0:26:e0:bb:d6:b7:78:77:
         83:e8:d2:b5:39:fd:03:e7:71:a0:dd:e4:de:45:93:4c:5e:8d:
         ea:7f:b2:b7:30:8a:50:09:22:96:e4:c9:ec:a1:71:0f:11:fd:
         b1:5e:e0:4f:b8:4c:eb:5f:b1:f3:6e:a1:b2:8d:8b:15:ab:52:
         21:36:07:9e:31:85:16:fc:a2:4c:25:66:e6:47:b8:40:de:33:
         a1:f8:8a:d5:6e:6d:67:a6:1a:c1:35:c8:f4:d3:16:5f:8e:47:
         1b:8f:16:27:ba:aa:97:61:fb:c3:dc:6b:62:6b:bc:a8:85:a6:
         a0:22:09:0a:88:57:09:d6:d4:11:7a:e8:a3:a9:1c:98:46:91:
         04:05:4e:b3:ab:b5:05:4c:f5:a1:af:88:dc:c3:c9:86:78:de:
         1d:bf:55:10:f4:43:e2:5d:ab:71:ee:a2:59:db:22:97:48:1d:
         d6:6a:33:98:d2:61:02:e7:ca:20:08:48:2f:28:96:19:02:92:
         6a:10:b5:d6:73:39:5c:0d:e7:01:49:00:87:59:cf:7c:65:bf:
         74:e2:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----