Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214999.roa
File:                     AS214999.roa (raw, json)
Hash identifier:          FKHoKeCJ61GdYkRqXhNv4FxLWxkMkHKJAEQaVtYJPBw=
Subject key identifier:   33:A8:C3:E9:DA:E7:1A:3B:99:1D:09:FD:FE:F9:40:A9:60:89:D9:26
Certificate issuer:       /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial:       6DC09920B619305D5086278D2F81464830B6BFA1
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214999.roa
Signing time:             Wed 04 Nov 2026 20:32:54 +0000
ROA not before:           Wed 04 Nov 2026 20:27:54 +0000
ROA not after:            Wed 03 Nov 2027 20:32:54 +0000
asID:                     214999
IP address blocks:        2a0e:8f02:f06d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c0:99:20:b6:19:30:5d:50:86:27:8d:2f:81:46:48:30:b6:bf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
        Validity
            Not Before: Nov  4 20:27:54 2026 GMT
            Not After : Nov  3 20:32:54 2027 GMT
        Subject: CN=33A8C3E9DAE71A3B991D09FDFEF940A96089D926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:21:e9:82:43:fc:07:93:a9:e6:f6:5c:33:
                    15:2e:46:b1:03:32:59:37:df:31:1b:5c:71:07:77:
                    45:8c:73:13:dc:c3:26:f0:e1:2f:ac:e2:03:ba:cf:
                    5d:7a:63:94:2d:57:c1:ed:d5:42:ba:4a:b3:08:ce:
                    95:36:40:c1:c8:e3:f2:09:92:66:a1:dc:78:d5:d9:
                    ac:88:1d:7b:b4:cd:e8:cc:d4:d9:41:9a:e1:ea:eb:
                    87:1b:32:1c:c9:46:ad:6a:bd:44:23:2d:a6:72:e4:
                    80:b9:ca:7c:68:60:a4:fe:f4:ca:f5:6f:85:ae:8e:
                    f0:05:e4:b7:5f:fd:2b:7d:cb:ca:ad:06:49:58:c3:
                    8c:65:6a:1e:b5:c7:af:0d:e0:a3:55:01:5f:84:dd:
                    b2:0d:be:5f:f7:1e:d8:26:d1:79:25:1a:49:41:ef:
                    49:7e:03:91:09:eb:a0:9d:07:bc:8a:b7:90:8f:99:
                    f1:54:62:e3:93:cc:89:7a:9e:44:77:6e:34:c1:94:
                    9c:a6:9b:60:e5:1e:1a:73:49:c7:3c:1d:68:a4:23:
                    fa:16:a3:b7:1a:82:7d:56:6a:85:1a:95:9f:e2:8c:
                    2e:6b:ea:87:31:64:dd:06:79:e0:05:0b:f9:3a:ad:
                    52:82:53:30:39:e8:51:b9:bc:d2:36:02:31:d2:9d:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A8:C3:E9:DA:E7:1A:3B:99:1D:09:FD:FE:F9:40:A9:60:89:D9:26
            X509v3 Authority Key Identifier:
                keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS214999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f06d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:34:76:e1:be:ca:dc:33:a8:a9:b7:3e:20:ae:46:cc:66:16:
         4a:68:cd:fa:8f:e8:e0:ca:f8:9b:c4:83:b5:7a:29:1c:52:a5:
         1e:11:39:f2:fb:35:ee:3f:5c:56:85:8e:20:cc:82:3b:1b:54:
         50:40:dd:cf:de:43:cd:bf:df:8d:1b:df:f0:fe:62:2c:d5:d2:
         47:93:65:d1:ab:e2:ff:61:92:2d:b6:d0:7c:a5:cd:7d:12:17:
         30:9d:c1:24:2f:db:93:6a:e1:5d:ff:ac:92:24:d7:1d:88:e1:
         05:71:f5:b0:5f:d6:d1:2e:94:0d:b0:4b:cf:35:98:7f:70:4d:
         56:09:88:02:f4:0b:f8:00:c8:b9:94:aa:67:96:6f:ea:6c:c6:
         16:35:d4:70:d9:fd:70:73:98:9e:f2:02:5a:99:ec:c4:90:6d:
         5b:f4:df:54:71:6a:29:39:5c:a6:41:b4:dc:86:40:a7:b4:6e:
         f4:39:8d:1e:25:b9:e2:18:80:0e:d1:6a:54:04:19:13:45:b2:
         98:e0:0c:72:3b:85:84:e4:9f:02:5e:1a:2b:7e:0e:2b:7c:cc:
         bc:43:d9:45:f7:a7:ea:f9:09:73:30:c0:a3:6f:59:db:c9:0c:
         b9:8f:b7:61:1b:d6:47:50:e7:a8:e5:e5:b8:92:58:b1:fa:9a:
         c2:3b:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----