Route Origin Authorization

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/1/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa
File:                     326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (raw, json)
Hash identifier:          pOVjMTHhWHkbmvh2WoSULf1MpQusOwPcSBK61Aue+i0=
Subject key identifier:   72:AF:F3:1D:DE:01:4A:50:57:0B:C6:5A:98:94:B1:55:E8:8E:2A:49
Certificate issuer:       /CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
Certificate serial:       7E3938DF6DC90656A361AA9ECF7EE88DF28954E0
Authority key identifier: 66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/1/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa
Signing time:             Mon 23 Feb 2026 12:24:48 +0000
ROA not before:           Mon 23 Feb 2026 12:19:48 +0000
ROA not after:            Mon 22 Feb 2027 12:24:48 +0000
asID:                     214749
IP address blocks:        2a11:f2c0:ffe0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:39:38:df:6d:c9:06:56:a3:61:aa:9e:cf:7e:e8:8d:f2:89:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C
        Validity
            Not Before: Feb 23 12:19:48 2026 GMT
            Not After : Feb 22 12:24:48 2027 GMT
        Subject: CN=72AFF31DDE014A50570BC65A9894B155E88E2A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:cb:35:ff:19:06:b2:71:21:ee:46:73:19:
                    50:04:37:d8:f1:99:a5:99:8c:69:5c:d0:0a:0c:8a:
                    cc:79:d5:a7:d3:62:6f:6d:65:55:a5:83:a8:0e:2a:
                    31:d3:c8:bc:88:88:18:d8:a1:3b:fb:9d:4b:54:13:
                    24:b1:6b:aa:f5:27:90:4e:6e:e9:dd:64:73:33:c2:
                    2e:44:21:64:c9:78:12:7b:08:5d:d9:cf:12:00:42:
                    7d:35:11:d5:cb:54:76:61:5b:88:8a:87:96:a3:f4:
                    22:e7:e7:4b:3c:ad:b3:94:f9:0d:4f:93:2e:92:29:
                    3b:9a:80:6c:27:03:41:c3:89:52:73:d6:a2:59:69:
                    86:b3:f7:92:cd:ae:1e:b9:28:9f:23:4b:ca:83:0c:
                    5f:a7:89:74:95:49:66:fc:f9:97:e4:0b:ce:0e:6c:
                    45:82:9a:4a:30:09:b9:50:ad:73:c6:66:37:a7:a1:
                    0d:ae:eb:70:06:78:08:f9:bf:2e:6a:c3:00:13:30:
                    47:c2:c5:67:76:6b:88:79:38:54:4a:19:6d:35:d7:
                    f7:94:90:c9:04:cb:c9:cb:8a:d1:1c:21:1f:65:41:
                    ab:7e:dc:35:b9:c6:16:5e:ba:e9:fc:bd:5b:26:0a:
                    9b:5c:f0:94:3b:2b:39:9d:66:fc:c8:41:15:f2:a5:
                    4e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AF:F3:1D:DE:01:4A:50:57:0B:C6:5A:98:94:B1:55:E8:8E:2A:49
            X509v3 Authority Key Identifier:
                keyid:66:BD:0C:10:13:5E:5D:BF:49:13:E2:EE:3F:2D:D9:D3:58:F9:F5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/66BD0C10135E5DBF4913E2EE3F2DD9D358F9F51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/1/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:af:2d:c6:ff:1f:9a:c6:d0:e5:1c:5f:26:29:16:dc:1a:
         32:bb:81:30:32:58:cc:c0:4b:11:7d:18:12:7b:01:56:41:d0:
         aa:21:93:f5:59:73:e2:81:2c:63:cc:30:4a:99:8b:66:1b:9d:
         25:1c:7c:eb:6f:4e:a2:c2:1a:f0:34:a2:2c:f1:30:db:77:e8:
         27:d4:58:f4:95:e3:11:47:31:f7:d7:ff:97:47:34:cc:54:af:
         3d:a3:47:5f:3d:ee:9c:0a:c8:60:4c:df:8a:63:dc:e1:08:b3:
         c1:37:a0:c8:63:0e:8f:2a:b5:23:62:cb:17:93:9f:51:e5:4f:
         15:3b:f0:75:68:04:d4:8a:bd:c6:28:7f:4f:cf:e7:44:ec:b1:
         60:92:b2:81:11:12:df:45:5d:3c:3a:57:92:bf:c2:de:28:b6:
         a6:68:8c:b0:b8:63:dd:20:f2:b7:c6:26:a1:be:25:56:0d:67:
         28:84:64:d0:51:fe:5b:67:40:d0:77:15:42:ef:5f:c7:88:aa:
         ca:57:97:46:66:9c:08:cc:2d:4a:7d:13:c6:a9:f7:ce:f7:e0:
         58:d9:d9:3e:3a:96:b5:68:26:41:f1:25:c2:96:64:61:22:90:
         a3:fb:6d:2a:2a:49:e2:d8:3b:f3:87:b4:61:c3:b8:46:fa:55:
         b4:6e:87:27
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUfjk4323JBlajYaqez37ojfKJVOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZCRDBDMTAxMzVFNURCRjQ5MTNFMkVFM0YyREQ5RDM1
OEY5RjUxQzAeFw0yNjAyMjMxMjE5NDhaFw0yNzAyMjIxMjI0NDhaMDMxMTAvBgNV
BAMTKDcyQUZGMzFEREUwMTRBNTA1NzBCQzY1QTk4OTRCMTU1RTg4RTJBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADMs1/xkGsnEh7kZzGVAEN9jx
maWZjGlc0AoMisx51afTYm9tZVWlg6gOKjHTyLyIiBjYoTv7nUtUEySxa6r1J5BO
bundZHMzwi5EIWTJeBJ7CF3ZzxIAQn01EdXLVHZhW4iKh5aj9CLn50s8rbOU+Q1P
ky6SKTuagGwnA0HDiVJz1qJZaYaz95LNrh65KJ8jS8qDDF+niXSVSWb8+ZfkC84O
bEWCmkowCblQrXPGZjenoQ2u63AGeAj5vy5qwwATMEfCxWd2a4h5OFRKGW011/eU
kMkEy8nLitEcIR9lQat+3DW5xhZeuun8vVsmCptc8JQ7KzmdZvzIQRXypU6tAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUcq/zHd4BSlBXC8ZamJSxVeiOKkkwHwYDVR0j
BBgwFoAUZr0MEBNeXb9JE+LuPy3Z01j59RwwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnJkcC5hczIxNDc0OS5uZXQvcmVwby9hczIx
NDc0OS1wYXcvMS82NkJEMEMxMDEzNUU1REJGNDkxM0UyRUUzRjJERDlEMzU4RjlG
NTFDLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov
L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RkZTgzN2ZiLTYz
OTAtNDFiNS04MmEwLWYwZDAyYzAzYTJjNi83LzY2QkQwQzEwMTM1RTVEQkY0OTEz
RTJFRTNGMkREOUQzNThGOUY1MUMuY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+Bggr
BgEFBQcwC4ZycnN5bmM6Ly9ycmRwLmFzMjE0NzQ5Lm5ldC9yZXBvL2FzMjE0NzQ5
LXBhdy8xLzMyNjEzMTMxM2E2NjMyNjMzMDNhNjY2NjY1MzAzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMxMzQzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEfLA/+AwDQYJKoZI
hvcNAQELBQADggEBAFcNry3G/x+axtDlHF8mKRbcGjK7gTAyWMzASxF9GBJ7AVZB
0Kohk/VZc+KBLGPMMEqZi2YbnSUcfOtvTqLCGvA0oizxMNt36CfUWPSV4xFHMffX
/5dHNMxUrz2jR1897pwKyGBM34pj3OEIs8E3oMhjDo8qtSNiyxeTn1HlTxU78HVo
BNSKvcYof0/P50TssWCSsoEREt9FXTw6V5K/wt4otqZojLC4Y90g8rfGJqG+JVYN
ZyiEZNBR/ltnQNB3FULvX8eIqspXl0ZmnAjMLUp9E8ap98734FjZ2T46lrVoJkHx
JcKWZGEikKP7bSoqSeLYO/OHtGHDuEb6VbRuhyc=
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:02:08 2026 by rpki-client