Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219498.roa
File:                     AS219498.roa (raw, json)
Hash identifier:          Y3KbwMJBBjJErWxdHjjDU1/UeGQncIoHmKShKN7caw8=
Subject key identifier:   4D:6A:AF:71:B7:C1:BB:87:01:FC:8C:B0:21:60:71:17:DB:21:43:D8
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       13867428D9ACDD901FDB7B7B0F796CDF258644EB
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219498.roa
Signing time:             Sat 31 Oct 2026 20:52:14 +0000
ROA not before:           Sat 31 Oct 2026 20:47:14 +0000
ROA not after:            Sat 30 Oct 2027 20:52:14 +0000
asID:                     219498
IP address blocks:        79.182.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:86:74:28:d9:ac:dd:90:1f:db:7b:7b:0f:79:6c:df:25:86:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct 31 20:47:14 2026 GMT
            Not After : Oct 30 20:52:14 2027 GMT
        Subject: CN=4D6AAF71B7C1BB8701FC8CB021607117DB2143D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:2f:81:97:d2:0b:58:a0:03:2a:5c:4c:8f:
                    58:23:97:6e:00:a6:3d:f4:03:98:a3:6d:34:46:0d:
                    f9:9a:af:74:58:1a:09:e1:a7:df:f4:0c:c1:66:d8:
                    1d:5c:a0:a0:ce:bf:ed:ff:0e:90:87:d7:10:f8:43:
                    57:e8:65:20:2f:43:ba:b0:0e:20:95:b3:df:fa:c5:
                    29:95:b7:72:4d:f5:95:5d:8c:0c:cf:dc:bf:2c:3b:
                    04:4e:a5:71:a2:1d:e2:a3:ba:a6:8f:06:ff:02:ed:
                    a2:8c:f9:e6:53:05:3a:4c:68:b4:63:c0:98:b3:71:
                    c6:f9:32:f4:07:fc:e6:15:41:76:fa:9d:33:44:7c:
                    af:0e:25:6e:4f:33:30:3b:e3:9b:d7:95:f6:e3:a5:
                    df:6d:ac:ec:9a:06:6d:05:89:fc:71:3a:4d:2d:e8:
                    ec:1b:af:89:05:52:19:4f:ab:71:c9:ba:59:fd:16:
                    d9:bd:18:76:dd:9c:25:cf:05:0e:34:c5:de:db:26:
                    28:96:fe:84:04:1b:af:a6:66:42:63:54:91:12:b3:
                    ad:43:1f:3a:52:59:5f:99:50:bc:9b:f4:29:c5:d9:
                    22:b7:3e:f3:14:bf:ca:f6:30:f4:a9:9d:ed:a6:77:
                    f9:2c:3e:a9:83:bc:7c:40:de:57:5b:fb:51:61:07:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:AF:71:B7:C1:BB:87:01:FC:8C:B0:21:60:71:17:DB:21:43:D8
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219498.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:4a:34:87:08:29:fb:fb:2d:a0:ee:d8:d4:38:45:cb:49:
         9b:45:3d:78:ae:33:d9:ec:6c:d7:64:4d:d0:76:e5:eb:57:23:
         bc:8f:94:dc:c3:11:83:b5:57:8c:68:ae:6d:c8:50:89:98:16:
         b8:95:29:1f:ef:99:0d:8c:0d:54:de:7c:28:a1:52:00:e9:cb:
         06:19:67:19:bf:0b:9b:cc:fe:7d:3d:5d:2b:6f:1a:01:38:30:
         37:2a:48:09:cd:b5:69:08:12:31:a3:ac:05:ea:ee:ce:90:e8:
         0c:99:d7:f9:57:f5:5a:5b:f2:54:44:a8:49:6f:7f:a8:5c:27:
         26:3d:b7:4f:9b:4e:47:74:b4:84:01:74:1a:98:ef:de:f5:f8:
         71:7c:14:30:e7:f3:81:bd:81:31:b4:33:64:07:49:40:6e:cc:
         d4:fe:c1:47:fc:8f:1d:61:d6:41:8d:b2:2e:a6:e6:0d:ef:b6:
         af:d0:8d:f5:75:ce:2e:a8:7d:23:41:cc:0a:72:4f:42:f3:3f:
         23:35:bd:a9:d5:69:69:b3:ef:43:5c:c3:ef:2f:93:7a:37:22:
         4c:92:e3:ca:ac:70:3e:e8:a7:92:b9:b2:9f:ae:03:d3:8d:4c:
         50:52:19:f1:91:74:df:73:fb:44:98:9d:f1:0f:6c:33:09:7d:
         46:ca:5b:42
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUE4Z0KNms3ZAf23t7D3ls3yWGROswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMzEyMDQ3MTRaFw0yNzEwMzAyMDUyMTRaMDMxMTAvBgNV
BAMTKDRENkFBRjcxQjdDMUJCODcwMUZDOENCMDIxNjA3MTE3REIyMTQzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMaS+Bl9ILWKADKlxMj1gjl24A
pj30A5ijbTRGDfmar3RYGgnhp9/0DMFm2B1coKDOv+3/DpCH1xD4Q1foZSAvQ7qw
DiCVs9/6xSmVt3JN9ZVdjAzP3L8sOwROpXGiHeKjuqaPBv8C7aKM+eZTBTpMaLRj
wJizccb5MvQH/OYVQXb6nTNEfK8OJW5PMzA745vXlfbjpd9trOyaBm0FifxxOk0t
6Owbr4kFUhlPq3HJuln9Ftm9GHbdnCXPBQ40xd7bJiiW/oQEG6+mZkJjVJESs61D
HzpSWV+ZULyb9CnF2SK3PvMUv8r2MPSpne2md/ksPqmDvHxA3ldb+1FhBzzdAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUTWqvcbfBu4cB/IywIWBxF9shQ9gwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTk0OTgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABPtoQwDQYJKoZIhvcNAQELBQADggEBAJmbSjSHCCn7+y2g7tjUOEXL
SZtFPXiuM9nsbNdkTdB25etXI7yPlNzDEYO1V4xorm3IUImYFriVKR/vmQ2MDVTe
fCihUgDpywYZZxm/C5vM/n09XStvGgE4MDcqSAnNtWkIEjGjrAXq7s6Q6AyZ1/lX
9Vpb8lREqElvf6hcJyY9t0+bTkd0tIQBdBqY7971+HF8FDDn84G9gTG0M2QHSUBu
zNT+wUf8jx1h1kGNsi6m5g3vtq/QjfV1zi6ofSNBzApyT0LzPyM1vanVaWmz70Nc
w+8vk3o3IkyS48qscD7op5K5sp+uA9ONTFBSGfGRdN9z+0SYnfEPbDMJfUbKW0I=
-----END CERTIFICATE-----