Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wubZgPM3eE5EzpZCeC4sYfYDMgI.roa
File:                     wubZgPM3eE5EzpZCeC4sYfYDMgI.roa (raw, json)
Hash identifier:          dVOyD38U1xZ0so/Qa3PPTg4XANbN+6t3acc6vas3xaI=
Subject key identifier:   C2:E6:D9:80:F3:37:78:4E:44:CE:96:42:78:2E:2C:61:F6:03:32:02
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07A8A0D9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wubZgPM3eE5EzpZCeC4sYfYDMgI.roa
Signing time:             Sun 29 May 2022 00:27:51 +0000
ROA not before:           Sun 29 May 2022 00:27:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128491737 (0x7a8a0d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 29 00:27:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2e6d980f337784e44ce9642782e2c61f6033202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:34:96:9b:e1:f4:10:9e:c9:09:48:15:85:
                    08:c2:67:85:af:8f:f2:55:8e:07:48:3d:5e:76:c5:
                    3d:f8:4d:89:6e:33:26:7e:10:0c:67:85:13:ee:50:
                    1b:a3:cb:7a:bb:f5:3b:2c:50:f1:74:ef:37:82:3d:
                    52:1b:b0:5a:73:a0:2b:f8:09:e5:34:1a:32:0e:8b:
                    83:f3:62:5f:6d:b6:f1:b8:26:33:78:9f:27:42:49:
                    db:93:ce:ea:53:76:bd:33:dc:3a:26:74:02:a9:c0:
                    84:15:e5:61:7d:60:46:26:65:9c:05:ad:08:b2:08:
                    6f:ae:0e:ce:f9:6e:f5:f6:2a:00:aa:a5:34:8a:c0:
                    1f:23:e0:df:91:da:2a:52:77:6a:7f:4f:66:54:4b:
                    c6:ed:a7:c0:9a:c2:dc:fc:38:c8:c0:93:ad:89:2b:
                    c6:d7:22:6d:2d:5f:fc:03:f0:f3:d9:b5:9e:8f:8f:
                    f4:12:d7:a5:a7:c3:0c:c1:6c:4f:af:9c:0e:a1:1d:
                    41:2b:d3:cb:f9:d1:3a:e1:98:82:f9:cc:34:b1:69:
                    14:41:76:67:d8:0f:bf:55:60:04:58:23:83:a5:b9:
                    8c:cf:9d:85:37:a5:99:3a:a3:1a:d4:b4:82:ee:57:
                    15:bd:8a:69:87:a8:23:cc:9e:8d:43:1a:f5:b5:86:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:D9:80:F3:37:78:4E:44:CE:96:42:78:2E:2C:61:F6:03:32:02
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wubZgPM3eE5EzpZCeC4sYfYDMgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:8b:07:e0:d4:5c:19:e3:95:91:8e:a8:9e:8d:f5:36:38:
         aa:c1:25:b5:3c:2c:f8:14:ac:46:97:aa:eb:ef:d3:c8:19:12:
         ac:3c:22:3a:3a:89:8f:6b:36:1a:b9:04:88:9a:e3:e6:a6:da:
         c1:af:8c:f5:d0:b0:89:ad:3d:2b:99:96:d7:dd:9d:7a:09:31:
         8e:61:90:15:88:38:34:d6:6b:29:50:9c:b8:5e:f6:e3:d4:19:
         27:66:b9:80:ff:af:c9:f7:e1:fd:9f:7d:5d:b1:6d:b7:b4:67:
         11:ae:ec:30:56:38:f5:78:7a:49:aa:61:ea:b1:96:84:47:41:
         03:a6:25:f9:8c:6e:5e:71:f9:33:1d:c5:9e:3b:08:6d:9f:90:
         d7:8d:da:fd:ef:e9:c6:77:f3:7e:d7:03:5e:8f:74:28:59:7b:
         e5:c0:bb:22:42:0b:0d:5b:e2:78:69:5c:0e:a0:0e:09:e7:2f:
         f4:74:9b:a5:fb:26:b5:8b:4e:35:3b:39:94:d7:a9:8e:65:6a:
         63:a8:e4:fa:1e:59:fc:a5:cc:eb:01:6d:fd:c8:a5:2a:e9:ea:
         03:27:fa:5f:d5:4f:67:06:d0:09:1a:86:7d:07:81:c6:90:ab:
         95:aa:45:c5:ed:c0:9b:16:a7:19:64:38:0f:b2:08:4c:18:c0:
         26:7a:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org