Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JIaNw0ofcjI3ddx6MVmyHv_rorM.roa
File:                     JIaNw0ofcjI3ddx6MVmyHv_rorM.roa (raw, json)
Hash identifier:          IsTwJ+W8y7/dAwQpP7dyN/+Hdod1iF64IVIpAP4Ht3A=
Subject key identifier:   24:86:8D:C3:4A:1F:72:32:37:75:DC:7A:31:59:B2:1E:FF:EB:A2:B3
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06C887BB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JIaNw0ofcjI3ddx6MVmyHv_rorM.roa
Signing time:             Wed 11 May 2022 13:03:01 +0000
ROA not before:           Wed 11 May 2022 13:03:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113805243 (0x6c887bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 11 13:03:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24868dc34a1f72323775dc7a3159b21effeba2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:df:44:7c:dd:ca:83:74:d6:57:ac:91:58:
                    e6:c2:c0:45:27:bd:8c:02:d0:65:e0:e6:b9:bb:68:
                    cc:8a:ee:a3:0a:2d:01:f5:55:d1:31:a9:1b:fc:fa:
                    60:b1:5d:33:42:dc:0f:06:6d:b7:54:f4:a8:05:0c:
                    48:e6:61:a6:2d:32:3d:22:43:01:ab:b8:4b:a6:97:
                    97:a0:31:f2:08:a9:ef:d0:92:6e:c6:2a:bd:e0:ae:
                    de:11:63:4e:d6:29:12:f1:67:dd:a8:d7:d8:65:9c:
                    6b:ad:e7:e3:cf:86:b9:0c:8f:41:e8:a3:cc:ad:13:
                    83:82:fe:5d:6a:d5:f4:03:cd:de:48:a0:20:5a:c7:
                    00:4f:19:9f:89:4f:4c:f4:74:c7:ac:8e:a8:8c:53:
                    1a:5c:be:e2:c5:11:f6:9b:4d:26:27:ef:1c:c8:83:
                    18:2e:55:b6:32:70:90:82:7e:9f:1c:2f:03:96:11:
                    50:e4:f3:12:4e:b3:e9:e6:a6:cc:01:9f:1f:0a:38:
                    e2:45:f6:6d:62:7d:58:24:0b:1d:63:e5:c2:a3:13:
                    78:bf:cc:a5:83:0b:18:af:07:96:e2:9b:be:8d:20:
                    34:5d:b6:6b:ae:4a:cc:f2:73:1c:b3:3f:2c:2f:6c:
                    57:1b:4e:cb:31:91:01:07:3c:da:7b:7e:28:55:d5:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:86:8D:C3:4A:1F:72:32:37:75:DC:7A:31:59:B2:1E:FF:EB:A2:B3
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JIaNw0ofcjI3ddx6MVmyHv_rorM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:80:45:7e:75:bc:95:ba:8d:e7:61:67:94:52:8d:44:43:a5:
         13:3a:58:2b:06:10:95:27:1a:5c:c5:01:7c:2f:37:c7:5b:af:
         c7:f5:56:59:59:ce:9f:2f:e8:57:a9:6b:bf:f8:db:48:fc:bd:
         7d:52:f5:b9:5a:7c:e2:de:71:32:74:28:09:4b:7b:b3:d6:c7:
         4d:53:f0:17:36:8d:0d:c7:18:c3:0a:65:fc:57:e9:9f:4e:cc:
         28:c3:84:e3:df:68:7c:40:fe:68:af:72:a4:bd:0b:e4:49:42:
         25:80:f8:df:7b:59:02:15:c3:58:e2:e3:c2:4a:6e:a7:89:08:
         d0:91:10:6c:54:00:b2:12:96:99:e6:3e:d4:6b:9d:ae:7e:c9:
         76:69:af:44:7d:af:65:b2:1d:ea:30:de:69:00:af:f4:74:eb:
         54:2b:da:ae:cc:b0:bf:50:bd:57:3a:78:2c:0a:1f:c1:0b:c5:
         c1:cd:45:7c:c2:57:b7:4c:84:b3:9a:72:bc:42:36:cc:70:c1:
         be:89:2a:e5:36:d7:da:8a:36:a6:f3:8b:46:58:f3:09:4d:cf:
         b1:ee:24:a1:89:90:f3:0e:ee:5d:63:64:6d:fb:7a:b0:c5:d7:
         b1:c7:cd:37:c5:0a:63:39:d0:68:1a:a4:1b:4d:4d:af:0b:18:
         6d:3b:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net