Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HpjZgk9Bg6SnuKWp2QdBYqmeDKQ.roa
File:                     HpjZgk9Bg6SnuKWp2QdBYqmeDKQ.roa (raw, json)
Hash identifier:          kf+qhJPcYPkT3FW3O+f4WB3WpQl7c+IVoajSmLw3/24=
Subject key identifier:   1E:98:D9:82:4F:41:83:A4:A7:B8:A5:A9:D9:07:41:62:A9:9E:0C:A4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0757E7BE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HpjZgk9Bg6SnuKWp2QdBYqmeDKQ.roa
Signing time:             Sun 22 May 2022 16:55:29 +0000
ROA not before:           Sun 22 May 2022 16:55:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123201470 (0x757e7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 22 16:55:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e98d9824f4183a4a7b8a5a9d9074162a99e0ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:2d:6d:d8:bd:ba:35:6e:c8:47:e9:ad:fd:
                    85:97:9e:41:18:9d:81:a8:b3:85:93:69:fd:3e:7d:
                    5d:4f:3b:70:fd:61:96:fd:37:2a:e0:39:60:3c:e2:
                    c5:eb:58:0f:57:13:e3:2b:48:58:c9:a3:c1:70:56:
                    ac:83:d5:a0:c4:ab:41:8a:6e:22:e3:c6:e2:b7:27:
                    c5:9d:46:0c:37:f2:85:e3:9a:ac:66:03:d2:02:1a:
                    01:15:d3:1f:ad:39:c5:66:fb:36:9f:a7:87:eb:60:
                    00:21:39:d7:35:48:df:4d:0a:e4:1f:92:92:fb:0d:
                    8e:41:51:cc:51:78:bc:41:1f:2c:cc:c8:a5:fa:e7:
                    0f:36:da:0a:6c:55:a1:02:34:a5:40:b6:66:12:09:
                    6f:6b:85:57:48:83:cd:46:85:66:f3:98:36:a4:aa:
                    f1:2c:d4:73:44:aa:05:38:98:5d:c7:e6:36:1b:89:
                    68:5c:96:ac:cc:2e:25:0c:30:6f:36:b4:ba:dd:e6:
                    80:89:9b:b9:09:75:e1:a5:39:77:29:6a:b3:45:b5:
                    ed:30:56:5a:2a:42:6c:d3:c9:de:6f:d6:c1:7c:85:
                    fa:8d:fd:fb:61:55:ab:86:93:40:80:57:f0:b1:22:
                    f1:20:c4:31:09:b3:75:09:4b:ab:79:c4:1c:05:c1:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:98:D9:82:4F:41:83:A4:A7:B8:A5:A9:D9:07:41:62:A9:9E:0C:A4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HpjZgk9Bg6SnuKWp2QdBYqmeDKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:16:d9:a8:ba:48:60:75:dd:72:21:4f:6a:dd:d5:4c:9b:e9:
         a6:4a:cf:cb:e2:ab:06:74:b3:73:ec:90:a5:6b:07:92:95:2d:
         47:1a:3e:cc:0f:3a:73:41:d3:d4:62:fe:a4:5f:46:04:45:64:
         fb:72:56:cf:c8:da:7e:96:4b:ea:6d:1b:9d:0d:31:9b:30:ce:
         79:35:ae:ea:ff:6f:1b:9a:05:53:69:a4:8d:48:0d:8f:59:48:
         80:90:a5:79:58:90:4e:e3:93:a7:fc:8c:55:23:e2:f5:c2:b7:
         d0:cd:4b:8f:5f:79:15:ce:10:6a:ca:3f:78:6e:7d:b0:7e:d5:
         25:ee:30:6d:7c:de:b2:dd:76:12:5a:ee:68:6c:63:b7:ac:23:
         3b:e0:65:c6:a7:a8:a6:db:49:43:f8:9e:9d:74:ad:b4:eb:52:
         9b:db:bf:54:b5:4c:8f:04:5c:91:27:74:32:d5:ec:8a:29:da:
         fd:f5:0c:68:d5:8f:27:d1:d5:74:c7:2b:52:1d:71:02:81:d9:
         f1:80:d2:da:e3:ae:d3:67:b6:2a:41:d8:87:b6:95:04:ba:4b:
         fe:78:67:9c:64:0c:73:c1:c5:75:dd:c0:f9:07:dd:39:84:02:
         d5:eb:d3:86:f0:90:fe:0c:63:85:47:be:78:13:28:19:84:8c:
         47:25:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----