Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bKONuVXPGxrvTQdWrLwmrt4-ZVo.roa
File:                     bKONuVXPGxrvTQdWrLwmrt4-ZVo.roa (raw, json)
Hash identifier:          EJ+IkqlI7h8onSMctOk7eAEBXecWlT7i39SmPrm921k=
Subject key identifier:   6C:A3:8D:B9:55:CF:1B:1A:EF:4D:07:56:AC:BC:26:AE:DE:3E:65:5A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05DBB5FF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bKONuVXPGxrvTQdWrLwmrt4-ZVo.roa
Signing time:             Wed 13 Apr 2022 11:46:19 +0000
ROA not before:           Wed 13 Apr 2022 11:46:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98285055 (0x5dbb5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 13 11:46:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ca38db955cf1b1aef4d0756acbc26aede3e655a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:e2:39:e3:5d:03:d6:47:d4:ef:20:6d:c8:
                    eb:cd:5b:47:ea:58:13:54:15:c7:6b:44:a9:9f:9f:
                    05:41:13:44:9e:5c:04:3a:ff:67:e8:6a:1f:09:95:
                    a8:3f:c9:e4:65:da:5f:33:47:92:fc:87:a5:e2:d7:
                    2b:4d:26:21:3e:02:bb:7d:e2:8c:94:1c:4a:13:c8:
                    77:f1:ec:5b:8c:2d:38:ca:dd:b4:ff:11:b0:2e:0d:
                    0c:22:a1:a0:b9:8e:28:ff:5d:f8:d1:ad:c5:c6:6b:
                    ff:9e:0a:73:32:1d:f2:3d:8d:ff:26:b0:dc:1c:61:
                    c4:53:de:41:ac:27:b8:fb:19:d3:ad:4d:83:d2:02:
                    59:f0:90:ba:31:f0:f2:65:5a:0b:25:8f:61:41:34:
                    c3:02:fb:2d:ca:c1:ef:0c:98:dd:49:e5:4b:18:20:
                    df:57:4e:07:73:98:32:88:da:66:f2:05:83:9c:f3:
                    4a:d1:e7:e7:ce:a9:79:9e:48:31:0e:17:28:93:bc:
                    26:a3:35:de:44:0c:95:ed:e8:0b:da:57:c4:4b:aa:
                    c3:9b:b5:38:e9:8f:dd:43:e3:93:db:4f:ac:c5:37:
                    d4:46:b5:ab:17:40:68:5f:8a:e2:c5:e8:43:6d:d3:
                    45:53:98:6a:52:64:99:8e:d1:3d:5c:85:a3:eb:fa:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:8D:B9:55:CF:1B:1A:EF:4D:07:56:AC:BC:26:AE:DE:3E:65:5A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bKONuVXPGxrvTQdWrLwmrt4-ZVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:77:3b:23:10:84:91:c3:af:d5:bf:66:13:3c:58:a3:25:d7:
         e3:2d:b4:29:ed:9d:67:93:b0:6e:6f:ac:68:2d:40:e1:b2:8f:
         45:39:a9:bf:3d:f0:93:56:96:ba:9f:ff:6b:aa:8c:31:3c:2e:
         32:a6:0c:3f:75:e7:c3:0a:a9:61:0f:ab:f8:cc:32:45:54:02:
         c8:1b:dd:01:fd:0f:0a:1a:ee:fe:91:08:a5:1c:fd:8a:8c:8b:
         76:f4:d0:fc:ca:38:37:0e:1a:20:a0:e4:dc:28:c5:c6:ac:14:
         ac:d1:9f:50:f8:03:5c:f9:83:7a:ee:3c:a7:1c:69:c8:2d:41:
         e4:66:2e:09:06:a7:ab:a1:96:a9:00:62:10:c3:39:81:82:76:
         e7:1e:f1:77:17:d3:09:fe:0f:3a:6b:73:35:cd:45:d5:e1:19:
         48:5a:7f:43:5d:b3:17:92:e1:a8:a0:b5:34:28:5d:7e:30:65:
         87:f0:17:a5:1d:5b:52:8e:9a:90:a3:1f:ac:4c:26:c9:fb:16:
         2b:0b:e2:d0:6c:6a:5b:7e:8f:4f:1a:ec:16:b2:1f:e3:3c:74:
         f9:a7:57:b5:87:95:f5:1f:5b:a8:0a:4f:f5:e4:aa:31:50:e4:
         0a:8d:b0:35:49:57:d1:ef:cc:58:67:f7:1a:82:6d:b5:4d:dd:
         d5:3a:22:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBdu1/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQx
MzExNDYxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNhMzhkYjk1NWNm
MWIxYWVmNGQwNzU2YWNiYzI2YWVkZTNlNjU1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTg4jnjXQPWR9TvIG3I681bR+pYE1QVx2tEqZ+fBUETRJ5c
BDr/Z+hqHwmVqD/J5GXaXzNHkvyHpeLXK00mIT4Cu33ijJQcShPId/HsW4wtOMrd
tP8RsC4NDCKhoLmOKP9d+NGtxcZr/54KczId8j2N/yaw3BxhxFPeQawnuPsZ061N
g9ICWfCQujHw8mVaCyWPYUE0wwL7LcrB7wyY3UnlSxgg31dOB3OYMojaZvIFg5zz
StHn586peZ5IMQ4XKJO8JqM13kQMle3oC9pXxEuqw5u1OOmP3UPjk9tPrMU31Ea1
qxdAaF+K4sXoQ23TRVOYalJkmY7RPVyFo+v6ku0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRso425Vc8bGu9NB1asvCau3j5lWjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2JLT051VlhQR3hydlRRZFdyTHdtcnQ0LVpWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBFdzsjEISRw6/Vv2YTPFijJdfjLbQp7Z1nk7Bu
b6xoLUDhso9FOam/PfCTVpa6n/9rqowxPC4ypgw/defDCqlhD6v4zDJFVALIG90B
/Q8KGu7+kQilHP2KjIt29ND8yjg3DhogoOTcKMXGrBSs0Z9Q+ANc+YN67jynHGnI
LUHkZi4JBqeroZapAGIQwzmBgnbnHvF3F9MJ/g86a3M1zUXV4RlIWn9DXbMXkuGo
oLU0KF1+MGWH8BelHVtSjpqQox+sTCbJ+xYrC+LQbGpbfo9PGuwWsh/jPHT5p1e1
h5X1H1uoCk/15KoxUOQKjbA1SVfR78xYZ/cagm21Td3VOiI7
-----END CERTIFICATE-----