Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/v2_OrqVCWea_JKzk_uWX1QKv4ow.roa
File:                     v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (raw, json)
Hash identifier:          rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=
Subject key identifier:   BF:6F:CE:AE:A5:42:59:E6:BF:24:AC:E4:FE:E5:97:D5:02:AF:E2:8C
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       019427486E9D5EB2CC6F0FFD9EBA25AC0A3A
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/v2_OrqVCWea_JKzk_uWX1QKv4ow.roa
Signing time:             Thu 02 Jan 2025 13:50:45 +0000
ROA not before:           Thu 02 Jan 2025 13:50:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134121
IP address blocks:        212.115.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:6e:9d:5e:b2:cc:6f:0f:fd:9e:ba:25:ac:0a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: Jan  2 13:50:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf6fceaea54259e6bf24ace4fee597d502afe28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:f0:db:c5:43:0b:4b:27:31:8f:5c:f0:41:
                    ab:90:1a:85:f6:fd:7d:2b:47:ed:44:2c:38:86:cc:
                    25:f0:d9:ff:df:29:a1:c3:f4:12:6e:4e:7c:6e:c8:
                    82:20:48:ea:1f:36:82:d8:a8:e3:22:aa:1a:e4:98:
                    18:cb:c1:b8:7d:b3:00:72:e3:29:ea:e1:31:50:65:
                    8c:ab:9e:22:50:cf:22:86:e3:b0:a5:20:79:a3:16:
                    61:a4:b0:fd:e4:86:02:28:c9:a3:a9:78:06:72:3a:
                    53:27:87:c8:96:47:7f:8e:dc:a5:47:f9:0a:ca:a5:
                    27:bb:54:0b:0e:ad:f8:0e:0d:6a:ad:b8:8b:c6:f8:
                    78:9b:6e:98:e7:9e:93:99:a3:8e:d6:c0:1d:9a:ff:
                    9a:a1:4b:0d:ad:3f:44:86:8a:9b:8d:ea:c7:44:57:
                    78:6c:d4:f9:5e:52:d4:5e:0d:c6:ee:3e:36:7c:f9:
                    5a:d6:43:ac:a7:8f:e2:9e:b8:6c:bf:37:b8:ef:fe:
                    83:db:78:0b:04:8c:8e:7d:0b:94:9c:c8:63:ae:cc:
                    a7:07:f4:c4:8d:0c:e4:41:2b:e3:59:20:ce:e3:5a:
                    8b:0d:8e:8d:a7:cf:0b:29:e0:92:37:e3:1c:a1:42:
                    20:a0:8d:2e:64:0c:05:c7:fb:51:de:07:c9:f1:6e:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:CE:AE:A5:42:59:E6:BF:24:AC:E4:FE:E5:97:D5:02:AF:E2:8C
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/v2_OrqVCWea_JKzk_uWX1QKv4ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:47:05:64:35:85:1b:dc:fe:40:b4:ff:7e:f0:fc:7b:6c:
         9d:c4:1c:c4:7a:58:2d:62:01:a0:41:2d:67:d7:da:44:04:03:
         a7:bd:2f:15:d7:9a:7f:f5:7f:d7:1a:43:ae:7c:b1:51:8c:53:
         25:8a:d0:66:1a:6f:e3:f6:99:55:f8:dd:88:9f:c0:01:9c:20:
         05:11:c6:bf:19:67:c4:a0:01:a9:b0:08:44:52:14:bb:df:1e:
         55:20:8b:82:b2:4b:85:32:96:e6:e0:f2:e0:1d:0d:8f:d9:9c:
         8c:ab:98:7d:c9:cd:6b:b9:13:df:d6:2b:8a:38:f4:44:79:d1:
         b8:7f:0f:99:1c:f8:69:3c:c1:43:25:8f:fe:ab:0a:6f:c6:b4:
         61:c7:12:be:51:97:f0:57:86:5c:20:c9:da:25:f8:e0:5f:ad:
         ae:4d:01:e2:41:14:99:fe:48:a1:06:26:ab:46:9d:1a:39:3d:
         b1:70:5b:ac:26:bd:75:e8:31:9a:61:46:3e:e4:a7:85:58:87:
         04:aa:ec:b6:41:31:bb:14:53:73:d1:3d:48:83:79:74:73:d5:
         cc:d6:d6:a1:7e:1f:66:3c:23:43:f6:6d:4d:0c:76:ec:f0:fe:
         3e:96:aa:a1:65:be:92:10:0d:0f:d5:c1:d4:e9:12:47:77:00:
         8e:a0:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:57 2025 by rpki-client