Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CBBQod_WazQXsfp4SWa1kSC1yJw.roa
File:                     CBBQod_WazQXsfp4SWa1kSC1yJw.roa (raw, json)
Hash identifier:          YMzb/hGFJlNcVXNNA1qOgB6j7JvAuyNsHGi0QfbTrAs=
Subject key identifier:   08:10:50:A1:DF:D6:6B:34:17:B1:FA:78:49:66:B5:91:20:B5:C8:9C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08619C33
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CBBQod_WazQXsfp4SWa1kSC1yJw.roa
Signing time:             Sun 12 Jun 2022 04:46:02 +0000
ROA not before:           Sun 12 Jun 2022 04:46:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140614707 (0x8619c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 12 04:46:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=081050a1dfd66b3417b1fa784966b59120b5c89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:77:91:11:bc:6b:9e:06:06:d1:e7:49:89:
                    2d:fc:96:3d:5b:66:1a:57:2b:e8:6f:79:ed:f0:49:
                    b1:81:b5:31:52:f3:a2:fc:1e:30:31:df:34:e6:9a:
                    4f:9b:51:19:59:8c:fc:fa:02:61:ab:03:d8:6a:ab:
                    81:9a:ca:dc:b1:2c:fc:7c:76:6a:7f:b4:95:74:cb:
                    74:11:a1:66:86:82:0f:32:72:28:82:53:2a:fb:19:
                    11:77:7e:97:80:ad:0a:c9:71:35:03:aa:35:04:1f:
                    96:bb:fe:0f:90:b5:a1:90:fc:64:47:9a:75:b9:22:
                    32:c5:c4:4e:3c:42:58:86:51:2b:bb:a0:68:7e:c4:
                    a2:a7:e5:09:2f:ff:22:18:23:09:0b:6a:4c:19:c2:
                    32:59:d3:fa:c5:fc:4b:ac:0d:68:1d:aa:71:a1:45:
                    06:7a:ba:01:3f:20:b1:29:13:5d:27:27:29:ce:4c:
                    fd:7f:44:16:58:e4:ae:33:3a:8e:ed:f8:c6:51:1f:
                    11:7c:b6:74:78:e0:3c:cb:5c:25:ea:e7:96:45:97:
                    d4:4c:59:e2:04:ed:8e:a6:16:71:d9:f7:1c:2d:63:
                    4d:7b:dc:f7:b9:61:e9:19:1b:63:86:88:66:ce:e6:
                    2d:9c:37:a2:b9:23:96:76:29:49:03:ca:a7:df:0b:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:10:50:A1:DF:D6:6B:34:17:B1:FA:78:49:66:B5:91:20:B5:C8:9C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CBBQod_WazQXsfp4SWa1kSC1yJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:a0:6e:fa:b0:e9:4b:0e:04:08:b9:a1:26:dd:f6:8c:5e:
         13:6c:90:07:66:30:9e:82:6b:62:85:4e:8b:57:28:04:d8:fc:
         ed:cb:d5:dd:45:08:cc:08:d8:9d:16:41:49:89:6a:d1:b2:cc:
         e0:5c:df:6e:6a:f9:fc:f8:f4:5a:69:45:64:48:f8:2f:17:59:
         38:cc:5f:cd:8a:ee:75:55:20:a7:40:3a:98:03:4d:1d:3a:5d:
         5d:fe:bb:07:e9:cd:01:41:dc:cf:06:89:fe:1d:2a:c3:ca:6d:
         7b:7b:e2:4b:fa:f0:00:1c:1a:e9:59:1b:a0:5c:e6:18:50:b8:
         78:33:60:88:9b:72:cb:39:c6:64:c3:6b:a0:3c:72:a1:96:3a:
         1b:89:4d:fa:ff:26:98:9b:e7:97:1a:7c:37:be:af:91:e9:56:
         8b:cb:84:46:8e:bb:7b:dd:ae:8f:4c:27:94:f0:66:c8:28:a0:
         8b:70:3e:40:9b:16:84:61:8b:42:f6:64:67:35:45:bd:74:b7:
         fc:d6:c3:ee:0c:43:4b:c3:31:fe:67:cc:95:a4:c1:82:6d:44:
         26:56:6c:e9:2a:d5:0e:89:90:e0:c0:93:86:aa:38:18:e7:a9:
         0b:2d:99:d1:dd:d4:32:cb:a2:86:58:ee:f2:91:c8:a6:fa:18:
         a1:d0:82:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECGGcMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MjA0NDYwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDgxMDUwYTFkZmQ2
NmIzNDE3YjFmYTc4NDk2NmI1OTEyMGI1Yzg5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFCd5ERvGueBgbR50mJLfyWPVtmGlcr6G957fBJsYG1MVLz
ovweMDHfNOaaT5tRGVmM/PoCYasD2GqrgZrK3LEs/Hx2an+0lXTLdBGhZoaCDzJy
KIJTKvsZEXd+l4CtCslxNQOqNQQflrv+D5C1oZD8ZEeadbkiMsXETjxCWIZRK7ug
aH7EoqflCS//IhgjCQtqTBnCMlnT+sX8S6wNaB2qcaFFBnq6AT8gsSkTXScnKc5M
/X9EFljkrjM6ju34xlEfEXy2dHjgPMtcJernlkWX1ExZ4gTtjqYWcdn3HC1jTXvc
97lh6RkbY4aIZs7mLZw3orkjlnYpSQPKp98LGTsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQIEFCh39ZrNBex+nhJZrWRILXInDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0NCQlFvZF9XYXpRWHNmcDRTV2Exa1NDMXlKdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBOcKBu+rDpSw4ECLmhJt32jF4TbJAHZjCegmti
hU6LVygE2Pzty9XdRQjMCNidFkFJiWrRsszgXN9uavn8+PRaaUVkSPgvF1k4zF/N
iu51VSCnQDqYA00dOl1d/rsH6c0BQdzPBon+HSrDym17e+JL+vAAHBrpWRugXOYY
ULh4M2CIm3LLOcZkw2ugPHKhljobiU36/yaYm+eXGnw3vq+R6VaLy4RGjrt73a6P
TCeU8GbIKKCLcD5AmxaEYYtC9mRnNUW9dLf81sPuDENLwzH+Z8yVpMGCbUQmVmzp
KtUOiZDgwJOGqjgY56kLLZnR3dQyy6KGWO7ykcim+hih0ILu
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net