Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          Xpp6g30w+IKNlmPjW7SbNwhvrqh2b+WgAeWA8nedFVE=
Subject key identifier:   97:0D:C4:7F:73:AD:B2:A5:FB:F4:BD:BA:00:A6:09:00:1F:2B:39:48
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       37375EB6A234CCA89894A7F6EDF7903472015714
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa
Signing time:             Sat 24 Oct 2026 09:15:20 +0000
ROA not before:           Sat 24 Oct 2026 09:10:20 +0000
ROA not after:            Sat 23 Oct 2027 09:15:20 +0000
asID:                     219427
IP address blocks:        66.132.157.0/24 maxlen: 24
                          66.132.238.0/24 maxlen: 24
                          66.155.65.0/24 maxlen: 24
                          66.234.12.0/24 maxlen: 24
                          66.234.13.0/24 maxlen: 24
                          69.90.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:5e:b6:a2:34:cc:a8:98:94:a7:f6:ed:f7:90:34:72:01:57:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Oct 24 09:10:20 2026 GMT
            Not After : Oct 23 09:15:20 2027 GMT
        Subject: CN=970DC47F73ADB2A5FBF4BDBA00A609001F2B3948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:e5:67:28:25:dc:a4:9f:d3:80:63:8c:4f:
                    e8:59:1f:fb:30:41:0d:d9:02:b3:de:e4:32:e8:ec:
                    37:66:93:65:79:8d:0c:bf:89:30:40:0c:9d:3e:c5:
                    bc:21:ac:45:82:5d:b0:f2:6e:1b:7e:12:ac:2b:23:
                    fb:85:d2:3c:73:2d:dc:2a:cd:12:d7:bd:e4:d1:cd:
                    e4:2e:4a:e2:e5:0e:6c:da:a7:bf:3c:f1:b4:1f:18:
                    63:38:0f:02:26:3e:e5:fc:a1:00:bc:6b:73:8f:b9:
                    97:d0:cf:fd:18:67:4a:92:fe:29:d2:c4:c2:f4:36:
                    ed:c7:c7:bc:9b:fd:2e:b7:42:05:7c:e3:48:1a:d3:
                    18:6c:08:22:bf:af:53:01:c6:e7:83:b2:0c:01:fd:
                    07:62:57:3b:67:a2:26:87:2d:3f:38:7a:98:6d:5c:
                    9f:51:b0:db:97:32:8b:40:6b:61:c5:e8:e3:bd:bc:
                    9b:83:ab:73:1c:84:a1:51:b9:92:6b:96:99:46:8f:
                    bb:48:d2:7d:a5:91:6b:59:8d:46:fa:ed:fb:71:c2:
                    00:7f:18:0a:ad:73:67:05:32:ef:40:aa:65:78:62:
                    fc:b8:fd:47:3f:c7:e4:b0:91:da:b4:7c:1f:cb:c1:
                    fe:00:25:87:5a:41:61:07:20:b7:c1:5d:93:44:b2:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0D:C4:7F:73:AD:B2:A5:FB:F4:BD:BA:00:A6:09:00:1F:2B:39:48
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.157.0/24
                  66.132.238.0/24
                  66.155.65.0/24
                  66.234.12.0/23
                  69.90.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:e6:e0:b7:37:fc:51:16:91:6f:d9:bf:37:bf:a7:88:b3:
         38:7a:21:6f:09:73:91:7c:a2:06:6b:f0:ec:f1:f1:69:68:41:
         cd:32:d8:06:3c:99:dd:7b:77:ff:4f:60:be:cd:20:5a:68:e8:
         44:ad:86:e9:79:4c:35:7d:eb:9a:2b:ed:68:50:a2:d3:f6:b9:
         32:56:7b:1f:7d:c1:b1:8b:11:f4:9a:58:9e:61:3e:de:53:a2:
         75:a9:33:49:6c:ab:9f:a1:0c:58:d5:5e:f3:94:c3:3d:4f:a8:
         21:c5:01:05:08:e3:01:57:c6:c6:00:1f:07:de:d1:ed:1a:e1:
         e2:de:ae:f7:b2:f1:fe:ea:ad:0f:ab:b6:e1:95:63:88:dc:47:
         6e:76:89:12:4a:ab:57:86:77:fe:54:07:76:79:48:55:e1:77:
         5b:ec:7c:64:b4:69:22:42:54:fb:e1:b5:80:88:65:21:8c:ff:
         00:d6:1a:16:03:e7:b0:e7:cc:bd:d1:52:f6:ed:ab:95:3f:78:
         ee:8f:fa:08:fc:72:db:18:e2:ad:92:75:c2:81:a7:f8:99:c3:
         aa:f1:39:fd:27:a9:a9:6f:37:a9:3a:fb:df:07:6f:fa:28:a3:
         bb:2c:85:c4:76:26:4e:eb:85:95:ec:dc:05:17:26:a7:31:01:
         2c:0a:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----