Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xyguSCGA8U2gZD58HihEoHSMymA.roa
File:                     xyguSCGA8U2gZD58HihEoHSMymA.roa (raw, json)
Hash identifier:          KG0oPCN/TjuCZ4xLonGksSMDj9/+oT12YNsf98ce2uk=
Subject key identifier:   C7:28:2E:48:21:80:F1:4D:A0:64:3E:7C:1E:28:44:A0:74:8C:CA:60
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06A2CAE5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xyguSCGA8U2gZD58HihEoHSMymA.roa
Signing time:             Mon 09 May 2022 02:47:44 +0000
ROA not before:           Mon 09 May 2022 02:47:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111332069 (0x6a2cae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  9 02:47:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7282e482180f14da0643e7c1e2844a0748cca60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:0c:5d:55:08:e5:28:61:0d:91:ea:e2:38:
                    9c:99:5d:2e:8c:15:bf:37:cc:2c:f4:0a:15:24:00:
                    b9:9d:2c:db:b3:03:2c:bd:aa:77:dd:0e:2c:ff:b4:
                    89:c4:b6:50:09:0d:89:a9:d6:30:46:6d:a2:65:3c:
                    b7:b6:38:9d:19:f4:42:17:ff:92:31:0c:6b:df:f1:
                    54:d3:1b:62:9d:91:2c:c4:96:50:1f:cb:ae:09:9f:
                    1c:6a:f0:5f:24:55:e8:4e:99:04:a8:0d:96:03:8c:
                    23:a1:30:3e:1e:58:b1:2d:30:c3:fa:67:66:86:23:
                    38:73:fc:3a:37:c1:8d:1e:03:ee:ab:71:74:05:10:
                    dd:f4:c4:89:29:2a:20:da:9f:98:53:f7:1a:6d:4d:
                    09:2f:68:d7:7a:56:f4:6f:81:9b:ca:b3:8a:9e:d1:
                    e1:97:d6:2d:3e:3a:12:5f:98:cb:b2:eb:a5:88:3c:
                    12:4c:db:94:7f:fa:71:02:37:02:c3:06:08:b7:a3:
                    0e:43:2e:a2:85:7f:16:e2:64:de:ab:b0:ce:9b:e6:
                    32:d1:ca:fe:9b:7a:90:f1:3d:10:2d:49:dc:5c:33:
                    0c:42:46:e6:12:34:e4:dc:91:73:56:89:dc:33:70:
                    26:59:bc:45:23:2f:f9:f2:95:1a:f4:32:31:69:a2:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:2E:48:21:80:F1:4D:A0:64:3E:7C:1E:28:44:A0:74:8C:CA:60
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xyguSCGA8U2gZD58HihEoHSMymA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9a:06:9a:53:2c:e3:17:e5:a6:4f:bc:7f:91:7d:ae:b6:8b:
         23:5d:53:7d:f9:81:b1:89:d2:c6:1a:ed:79:87:6b:2c:b8:60:
         22:70:6d:2f:b9:34:d4:bd:22:c1:36:2d:e0:33:0c:af:a5:41:
         6e:18:ca:b1:37:8a:64:03:f2:93:a4:cd:65:5e:98:ca:57:b5:
         c1:a5:68:b2:6f:ec:12:6a:8b:75:2e:60:23:ef:30:e7:29:4f:
         4f:4b:d2:a6:4d:81:2f:5b:40:8f:e6:49:ad:0e:c8:17:c4:d3:
         05:11:b0:15:4e:a7:2e:07:03:c5:26:dd:18:f1:4b:c5:db:80:
         d8:3e:eb:43:3c:86:9b:2b:6f:09:8a:80:00:10:a3:88:d1:e3:
         e9:f0:ba:07:14:a8:a2:03:35:a4:a1:a9:42:77:cc:0d:1a:f8:
         f0:f7:bf:1d:ef:d5:65:a6:54:3d:fd:7a:67:b6:6d:69:c8:a2:
         75:32:fa:a3:ab:fd:da:cc:00:fb:68:54:a8:bf:2a:79:e2:dc:
         cd:54:cb:5b:70:bb:cd:09:1d:40:7c:97:d8:2c:aa:c2:97:26:
         0d:a5:94:e7:da:68:47:8a:5d:df:1d:cc:76:d8:d9:b3:da:c5:
         49:11:b5:a1:ac:34:90:70:3f:7b:d7:87:73:fc:68:2b:03:c6:
         ba:e9:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org