Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22427.roa
File:                     AS22427.roa (raw, json)
Hash identifier:          7bCXfrxcXIiYsqRxuE+Oe5huC6yn/EYP/BBvQMX/Js8=
Subject key identifier:   91:89:75:11:2F:0D:A0:F6:0D:8A:60:70:A1:73:12:1D:81:05:B2:32
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       4AA813723E243473B7A683165865F2C2D5988B75
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22427.roa
Signing time:             Wed 28 Oct 2026 05:49:39 +0000
ROA not before:           Wed 28 Oct 2026 05:44:39 +0000
ROA not after:            Wed 27 Oct 2027 05:49:39 +0000
asID:                     22427
IP address blocks:        181.41.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:13:72:3e:24:34:73:b7:a6:83:16:58:65:f2:c2:d5:98:8b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Oct 28 05:44:39 2026 GMT
            Not After : Oct 27 05:49:39 2027 GMT
        Subject: CN=918975112F0DA0F60D8A6070A173121D8105B232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:e7:52:4e:e0:12:23:e9:47:ce:80:5e:d1:
                    79:60:6b:c0:8c:86:c8:db:90:54:04:82:ba:ba:15:
                    8c:38:bf:e1:9a:ab:8e:cf:74:b0:2d:83:b5:27:29:
                    14:58:8f:fc:f9:12:2e:6c:04:52:20:aa:60:4e:0a:
                    ae:82:10:f2:f1:11:1b:07:f3:e9:e7:71:be:b8:b9:
                    4c:c3:19:0d:4b:94:db:33:72:fb:ed:66:b9:41:d0:
                    10:98:4d:8f:9d:e6:e1:4c:10:a8:15:d3:d0:1e:d8:
                    0c:36:32:84:fe:d2:4e:39:5e:c9:e8:70:bd:f0:b6:
                    66:a6:1b:59:22:81:76:d9:39:ea:fd:42:44:cd:87:
                    e9:ee:3e:73:e0:dc:3f:2e:5d:76:3e:63:68:08:85:
                    4d:d5:e4:d7:d4:7a:13:b3:84:87:5f:36:c5:c6:5c:
                    9e:20:da:8c:76:2d:bf:f2:f8:1b:c0:79:14:e3:5a:
                    b0:d8:fe:a7:80:c0:e0:22:30:06:73:75:05:e1:3b:
                    11:9a:8a:c6:48:0d:8c:1d:3c:35:4f:68:9e:e9:4b:
                    ba:cc:8e:de:34:1e:f3:74:87:3b:b6:e7:28:04:82:
                    31:66:f4:79:24:54:30:26:1f:0d:c3:42:d7:ae:2c:
                    56:e0:3d:ae:35:fb:15:95:be:d9:93:e9:5a:64:2f:
                    12:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:75:11:2F:0D:A0:F6:0D:8A:60:70:A1:73:12:1D:81:05:B2:32
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:1b:ce:ac:c0:53:4b:1c:74:cf:c0:23:c8:13:76:4c:24:
         b1:f2:50:19:bb:ca:ea:f2:ec:0a:48:b7:f3:1c:f8:f1:cd:71:
         f7:5b:ac:be:10:e1:ed:74:90:d4:37:6d:d5:db:5d:3b:3e:25:
         b3:b4:97:d2:68:11:3e:5b:19:ef:0e:c0:7c:f8:9f:00:e5:55:
         ab:9e:9e:1a:4f:e7:0f:9e:3e:a1:9f:e3:5c:60:3d:ca:cc:d8:
         93:1a:14:29:1f:a0:24:3a:2b:6a:31:4e:52:02:03:fc:87:28:
         ef:db:32:d2:37:06:54:d8:b2:68:d4:06:11:fa:d6:7a:51:8b:
         0c:4b:ca:9e:ea:f3:56:c1:3b:67:18:9f:e0:78:cc:f4:73:20:
         0d:d5:2c:02:40:64:3b:ea:f4:97:12:1f:61:64:be:67:67:48:
         0b:f9:d7:36:37:5e:41:cb:a5:ac:fa:e1:f8:df:02:f9:b7:19:
         05:70:87:cb:f8:63:da:dd:5e:a9:19:30:c9:aa:dc:c3:a5:88:
         50:32:8e:68:d2:7a:fc:76:a3:d3:bd:9b:1c:97:df:70:76:fa:
         42:7c:98:49:0c:0f:07:72:92:24:da:21:07:c5:a2:b9:85:7d:
         7a:29:23:e3:c1:03:90:00:87:e5:5c:18:f7:75:66:f7:77:ca:
         03:56:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----