Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
File:                     AS137517.roa (raw, json)
Hash identifier:          yQHJ7B7ftUEfIdASBwIMTrIjhg38+8Va0A5OACixDn0=
Subject key identifier:   69:AC:F4:C5:02:F5:6C:D5:F5:41:DA:46:09:18:84:5C:E4:F2:29:7E
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       63D90EFBD5E81B8DC6433D093AAE7536DA62E5DB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
Signing time:             Sun 01 Nov 2026 00:15:27 +0000
ROA not before:           Sun 01 Nov 2026 00:10:27 +0000
ROA not after:            Sun 31 Oct 2027 00:15:27 +0000
asID:                     137517
IP address blocks:        143.14.95.0/24 maxlen: 24
                          148.135.199.0/24 maxlen: 24
                          167.148.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d9:0e:fb:d5:e8:1b:8d:c6:43:3d:09:3a:ae:75:36:da:62:e5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Nov  1 00:10:27 2026 GMT
            Not After : Oct 31 00:15:27 2027 GMT
        Subject: CN=69ACF4C502F56CD5F541DA460918845CE4F2297E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:de:40:b7:47:a5:df:fe:63:f6:b6:56:40:
                    43:30:3c:ea:66:dc:26:41:8b:21:44:33:5c:7f:58:
                    a0:c2:cb:48:e3:77:ee:b1:36:52:4f:63:77:15:9c:
                    0f:27:84:8a:a4:93:94:04:fd:98:78:cf:ad:e3:1f:
                    a8:94:b0:d8:95:3d:46:d1:7e:a8:f5:8d:23:d0:fd:
                    d8:e6:2d:89:ca:58:4b:89:25:96:51:64:5c:e6:f0:
                    54:a2:11:e1:86:8f:67:44:eb:c2:00:14:c3:75:d3:
                    c5:65:85:44:67:f4:34:c9:c1:91:34:ac:50:32:4a:
                    0e:03:ce:80:81:40:3e:ed:f6:2c:e4:1c:b1:b7:73:
                    56:f6:f4:4d:71:e1:91:27:97:f7:f6:f8:71:21:77:
                    12:c8:c9:8a:e6:21:d0:41:e7:2f:af:2c:1d:0b:07:
                    7f:35:88:a9:14:ce:b3:a3:5c:39:ef:a8:05:56:5b:
                    ea:c2:72:10:75:a2:21:f1:7b:db:51:ef:17:e1:0e:
                    fb:ca:a5:5d:8c:40:0e:24:2a:bd:f0:3b:f6:dd:52:
                    0a:f2:eb:6c:3c:68:06:34:52:7d:77:6a:62:6c:7a:
                    49:bd:2f:9c:3b:ce:45:59:53:20:57:d6:35:c5:e1:
                    12:b6:c1:6c:a5:ef:16:e7:b9:71:e8:5b:3f:59:e0:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:F4:C5:02:F5:6C:D5:F5:41:DA:46:09:18:84:5C:E4:F2:29:7E
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.14.95.0/24
                  148.135.199.0/24
                  167.148.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:50:2f:0a:33:2c:d4:d0:f5:10:43:89:0c:92:c6:b3:cf:
         a1:25:42:be:36:94:48:21:ce:d2:66:72:bb:68:9b:52:00:4c:
         70:95:67:b7:f7:6c:6b:23:55:77:f8:3e:0e:ab:d2:aa:a6:ff:
         1a:67:bd:c2:82:73:48:86:35:24:a6:1e:e4:4e:bd:2f:67:f3:
         a7:55:06:21:bd:d4:9c:30:f5:97:6c:c5:e2:a2:49:cd:75:5f:
         52:74:fd:c7:03:3b:f6:9b:fa:de:2f:19:71:fd:c5:7a:b4:82:
         38:26:16:61:39:16:85:73:7d:10:ff:85:9e:77:a9:80:1d:f9:
         bf:25:67:c5:19:ac:04:20:7d:59:47:cf:62:6c:29:d5:ec:fe:
         4f:29:7a:db:4a:59:46:5b:21:bc:43:42:32:79:16:86:f6:2c:
         9c:42:15:79:9f:af:3c:d9:4c:f7:64:be:33:54:8e:57:d0:1f:
         d7:c5:09:5c:4c:41:6d:94:90:07:1d:86:7c:68:fc:df:a8:36:
         a1:57:ad:89:ce:a0:b1:c1:d9:2a:c6:70:50:1e:93:e2:d5:2b:
         80:57:16:78:77:2f:5e:af:e7:01:9d:b3:6f:2c:42:66:fb:5c:
         c3:ac:bc:3b:a9:ae:eb:a8:77:bd:0b:7a:5d:a3:01:55:05:76:
         a7:7e:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----