Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/axxp80_l2Sp4XrA6WfSxMCVdrh0.roa
File:                     axxp80_l2Sp4XrA6WfSxMCVdrh0.roa (raw, json)
Hash identifier:          LR76WagEk9cVUpt3PgYLZF/GWCCsG7/kt/S0+s0d3NQ=
Subject key identifier:   6B:1C:69:F3:4F:E5:D9:2A:78:5E:B0:3A:59:F4:B1:30:25:5D:AE:1D
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       019424457E45C0B747BD0D61DE2C7F81D21B
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/axxp80_l2Sp4XrA6WfSxMCVdrh0.roa
Signing time:             Wed 01 Jan 2025 23:48:41 +0000
ROA not before:           Wed 01 Jan 2025 23:48:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     396356
IP address blocks:        45.132.115.0/24 maxlen: 24
                          2a10:5a81::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:7e:45:c0:b7:47:bd:0d:61:de:2c:7f:81:d2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan  1 23:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6b1c69f34fe5d92a785eb03a59f4b130255dae1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:8b:bd:10:9a:44:02:e1:b0:f0:39:37:e2:
                    96:98:75:d0:25:a5:bc:b9:27:d3:1c:48:c0:e5:18:
                    c1:ad:25:5f:d7:55:f9:a5:c6:bc:7e:69:d6:45:69:
                    e8:f9:46:b4:f4:c2:b5:91:43:df:8a:7e:86:60:be:
                    bb:d8:7d:09:ac:14:32:1a:24:48:72:9c:99:6d:c8:
                    3f:96:2d:71:aa:64:33:42:0e:d8:89:ea:ea:42:ae:
                    b7:c3:82:fd:fc:be:6a:7e:7c:4f:44:b1:bc:0c:09:
                    36:7c:42:6f:26:10:4d:e3:1a:09:e9:23:16:55:a2:
                    6e:50:a5:0f:35:37:79:5b:43:e5:5b:ea:a0:27:34:
                    00:c7:ad:81:94:14:0b:ca:2b:44:91:31:56:de:68:
                    b4:ca:09:23:5a:ca:f3:e2:93:56:a7:67:7f:6e:f7:
                    14:64:92:9e:93:08:1c:fa:d9:39:2a:70:85:2b:db:
                    83:b5:02:17:88:5c:09:5c:5d:9c:7c:0a:ea:a4:60:
                    d8:62:9b:57:b8:74:9a:ba:ba:5c:60:63:30:32:e0:
                    82:aa:7e:b2:fe:fb:29:9a:57:1c:cb:4a:18:ac:b4:
                    7d:fa:a5:b8:0d:e4:3b:db:19:b7:57:45:e9:c5:3f:
                    0e:28:0d:17:cd:57:01:92:86:0a:55:f3:a5:0f:26:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:69:F3:4F:E5:D9:2A:78:5E:B0:3A:59:F4:B1:30:25:5D:AE:1D
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/axxp80_l2Sp4XrA6WfSxMCVdrh0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.115.0/24
                IPv6:
                  2a10:5a81::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:ee:51:6a:a0:b4:42:91:ed:62:b3:c1:a4:28:6e:d0:c2:
         8a:9b:89:a7:f5:d4:51:d3:16:ee:dd:50:a5:54:ee:a3:03:d5:
         c6:e7:fa:26:99:81:5b:be:e0:ba:97:8d:1b:61:a5:36:12:57:
         18:c9:85:94:ac:d0:9f:c6:58:3c:dc:60:67:af:6c:e3:b2:03:
         18:f2:a2:48:07:3f:5c:3c:c0:6a:e6:39:87:82:21:1a:6c:70:
         b1:b3:d6:88:c1:49:79:d3:21:be:d8:36:93:9e:5d:9b:db:af:
         0c:84:9b:3c:55:86:d8:29:ef:a8:0a:93:91:6e:8e:a4:d6:0d:
         32:b8:75:92:12:ca:b9:91:e7:46:2b:1a:2c:2b:cf:0b:3e:dd:
         78:84:a6:28:b4:3e:40:d2:59:50:0a:4a:78:31:94:db:b3:da:
         6d:f8:37:25:83:ae:04:69:42:ad:76:43:2a:88:f6:48:31:3d:
         84:bc:1f:dc:3b:16:69:87:0b:ac:b9:da:f4:9e:b0:36:f7:28:
         c7:56:b7:39:78:0c:da:1c:46:7d:b7:d5:ac:4e:97:de:84:cf:
         86:0b:f7:f6:e4:01:74:95:c3:1b:10:2c:2c:8e:b5:e0:50:01:
         8b:7e:4c:d6:a5:ee:de:f2:8e:53:d8:c6:43:3e:d5:d0:24:42:
         33:30:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----