Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/e-V9tFfqweLsPvahKWztdvCMwG4.roa
File:                     e-V9tFfqweLsPvahKWztdvCMwG4.roa (raw, json)
Hash identifier:          1ntpvs24Vpd80mIc9wQGJrkuA6z6+hmwgAzrSJuU/GI=
Subject key identifier:   7B:E5:7D:B4:57:EA:C1:E2:EC:3E:F6:A1:29:6C:ED:76:F0:8C:C0:6E
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07B88EE0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/e-V9tFfqweLsPvahKWztdvCMwG4.roa
Signing time:             Mon 30 May 2022 02:04:14 +0000
ROA not before:           Mon 30 May 2022 02:04:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129535712 (0x7b88ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 30 02:04:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7be57db457eac1e2ec3ef6a1296ced76f08cc06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:5c:6f:af:a5:24:df:b9:5b:8a:04:49:86:
                    8f:91:95:19:9f:e0:e9:10:bf:10:af:99:4d:0b:9b:
                    5d:52:85:7e:6b:34:a7:f4:27:25:35:e6:bb:13:18:
                    f0:fd:74:72:36:8a:ec:21:1b:9a:e5:95:aa:ec:86:
                    41:72:af:b1:5f:8c:e8:8d:39:91:8b:2f:e3:f1:1d:
                    00:62:ec:b7:e8:3c:2d:aa:e1:e3:2a:15:be:78:2a:
                    fe:48:19:56:dc:29:57:fb:8d:a4:94:41:f3:39:d3:
                    90:5d:c0:e1:8f:2d:16:e8:96:0f:e4:6b:c6:6b:1c:
                    28:30:fb:b9:cc:dc:4a:62:d2:91:91:c2:06:a1:8f:
                    ee:fe:88:db:a3:5c:4f:5e:75:a6:fd:a1:ae:59:ac:
                    e4:33:57:af:70:5c:d3:b7:c4:31:2e:66:6b:b4:8a:
                    53:76:2a:ef:ad:92:88:37:f3:4d:ba:3c:86:c7:ee:
                    5a:e7:80:21:2e:34:14:96:dd:5f:d2:03:40:6c:dc:
                    07:bf:b3:d1:dc:3e:50:91:3e:29:62:ae:df:93:8a:
                    73:93:04:28:cc:b1:1e:88:f5:a9:74:3e:5e:75:9b:
                    42:ec:6e:d4:ad:f8:3a:e7:87:68:d4:31:9d:43:03:
                    71:9c:96:0b:ea:56:1f:41:63:58:b2:f4:05:32:11:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:7D:B4:57:EA:C1:E2:EC:3E:F6:A1:29:6C:ED:76:F0:8C:C0:6E
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/e-V9tFfqweLsPvahKWztdvCMwG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:d7:b0:00:30:ea:81:b6:b5:a6:8b:ec:d2:7a:bd:e0:0f:
         c6:9a:c7:33:9b:52:c5:88:63:9c:74:61:a6:c1:8b:59:5e:00:
         16:8f:84:2f:9d:23:da:ca:be:0a:7a:99:b1:6a:ff:e6:8b:a5:
         b1:68:46:de:45:87:36:31:3a:16:9e:ed:1e:32:5d:16:9a:fa:
         2e:07:ca:45:31:92:f4:a0:46:b0:22:63:ee:4b:05:2e:7d:2d:
         78:46:c5:fc:b1:90:3a:f7:d7:c2:13:2e:8e:00:eb:22:91:ea:
         e9:b1:8a:9d:d3:32:a1:37:87:28:45:ed:9b:b2:cc:26:39:6d:
         e5:72:21:bc:19:b5:ee:c1:ea:76:fa:45:f3:79:e7:13:db:5a:
         0e:f4:91:36:4c:42:5c:31:5b:6e:ec:b9:6e:23:1e:46:56:ac:
         1c:a0:26:d5:a4:af:a8:e2:95:89:2e:ae:35:67:fb:d5:ae:4f:
         f4:af:dd:3b:e2:d9:18:12:f9:a7:e1:55:15:f5:44:96:99:f5:
         a1:bc:af:07:60:15:be:e8:87:28:97:56:14:95:18:fe:6f:17:
         b5:8a:31:61:1f:7f:c2:14:c3:e3:68:1f:4c:bc:77:b4:5a:dd:
         4c:6d:30:4b:47:5b:93:c6:9f:c4:64:0c:f6:f8:c5:1c:9d:a3:
         33:56:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net