Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
File:                     AS137897.roa (raw, json)
Hash identifier:          yW4tl/NbWntPV7djBSxK0JbRYNv40gEtgjJOLx9MSIQ=
Subject key identifier:   AA:C5:90:DF:18:86:66:2F:73:3B:5B:42:02:E3:65:9F:FA:03:FB:FA
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       16F5A40E5674F4307F8273CED5E071F1BB2F73AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
Signing time:             Tue 03 Nov 2026 00:00:21 +0000
ROA not before:           Mon 02 Nov 2026 23:55:21 +0000
ROA not after:            Tue 02 Nov 2027 00:00:21 +0000
asID:                     137897
IP address blocks:        82.38.42.0/23 maxlen: 24
                          82.38.46.0/23 maxlen: 24
                          82.38.80.0/23 maxlen: 24
                          82.38.215.0/24 maxlen: 24
                          178.83.82.0/23 maxlen: 24
                          2a13:9500:7c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f5:a4:0e:56:74:f4:30:7f:82:73:ce:d5:e0:71:f1:bb:2f:73:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov  2 23:55:21 2026 GMT
            Not After : Nov  2 00:00:21 2027 GMT
        Subject: CN=AAC590DF1886662F733B5B4202E3659FFA03FBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:67:f9:33:10:a4:8d:24:9c:54:ef:3c:f1:
                    9b:8d:73:04:54:86:26:12:29:10:f4:a6:27:9a:a3:
                    99:e3:23:d9:fb:55:b0:96:04:a5:ef:5b:de:80:bb:
                    85:89:ea:36:89:22:c2:c3:79:da:ec:7c:2f:17:f9:
                    82:66:c0:a8:5b:0e:fc:c0:0f:bd:35:0a:7f:6b:22:
                    75:33:cd:e5:61:4b:bb:40:46:f4:42:ac:54:9f:1b:
                    13:e5:4f:6e:4a:91:44:d1:81:95:4e:2c:af:73:e3:
                    fb:ee:35:1c:b0:97:31:c5:37:f2:22:cb:90:01:ac:
                    e3:ed:21:91:72:d6:e2:51:1e:be:d4:8b:17:8e:20:
                    1e:33:44:55:68:49:7f:fe:81:b5:d6:6c:f6:19:98:
                    f1:4d:ec:1a:e1:91:a4:0e:61:0a:2a:8d:12:0f:19:
                    88:2d:3d:67:89:95:ce:2f:05:87:17:e1:f3:b7:93:
                    c5:c9:4b:08:a3:55:91:5b:12:06:ab:f5:b2:96:ae:
                    75:ab:9a:00:03:76:83:76:9c:f3:1a:06:e8:10:23:
                    0b:c7:5b:ca:c1:2f:b9:32:51:6e:e3:e1:29:3a:3e:
                    a1:8b:cf:b4:d5:5b:29:fb:bb:bf:c7:35:41:5b:58:
                    85:cf:b2:da:3b:7f:59:b1:78:90:cc:bf:e3:c8:30:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C5:90:DF:18:86:66:2F:73:3B:5B:42:02:E3:65:9F:FA:03:FB:FA
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.42.0/23
                  82.38.46.0/23
                  82.38.80.0/23
                  82.38.215.0/24
                  178.83.82.0/23
                IPv6:
                  2a13:9500:7c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:4a:e0:bf:a9:79:db:5f:51:e2:74:ba:7f:18:7a:6c:e6:
         a2:b0:03:e6:8f:cc:c6:8c:af:21:82:10:46:1b:15:e7:26:47:
         84:34:f5:0f:2c:ee:b3:0b:05:03:00:65:c6:12:9a:8d:a5:5d:
         78:82:1d:c5:c7:d2:33:d4:cc:84:c7:08:68:63:02:71:2f:fd:
         53:3b:45:a9:2c:ce:5e:14:08:65:3d:9a:ed:ee:92:af:63:13:
         c0:b6:8c:56:85:b1:a4:dc:0e:80:5e:d1:51:09:01:14:40:c3:
         0c:dd:65:9d:dd:2f:a0:e1:0d:9e:c7:5f:53:3d:51:d9:64:54:
         a9:98:7f:13:ec:5d:65:d9:54:a8:c2:28:3c:75:11:6f:1d:e9:
         1a:d1:c3:4b:5f:ca:3f:eb:39:b8:00:8b:91:cf:c9:41:38:cc:
         c4:28:58:3b:b2:75:a9:d2:44:fa:2d:16:a1:57:df:e7:49:01:
         38:5c:48:30:7b:2e:03:70:11:61:9d:2f:78:f0:16:fb:b0:49:
         61:09:31:97:84:76:cf:89:0b:b7:d8:01:91:27:5b:72:77:27:
         f4:f2:53:82:a3:ec:aa:d7:94:48:8c:2d:f0:de:df:fc:14:77:
         81:46:0f:6b:62:2e:f5:66:be:9e:ba:ba:1e:5c:5c:e5:8c:8b:
         67:3c:fa:a1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUFvWkDlZ09DB/gnPO1eBx8bsvc64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMDIyMzU1MjFaFw0yNzExMDIwMDAwMjFaMDMxMTAvBgNV
BAMTKEFBQzU5MERGMTg4NjY2MkY3MzNCNUI0MjAyRTM2NTlGRkEwM0ZCRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/mf5MxCkjSScVO888ZuNcwRU
hiYSKRD0pieao5njI9n7VbCWBKXvW96Au4WJ6jaJIsLDedrsfC8X+YJmwKhbDvzA
D701Cn9rInUzzeVhS7tARvRCrFSfGxPlT25KkUTRgZVOLK9z4/vuNRywlzHFN/Ii
y5ABrOPtIZFy1uJRHr7UixeOIB4zRFVoSX/+gbXWbPYZmPFN7BrhkaQOYQoqjRIP
GYgtPWeJlc4vBYcX4fO3k8XJSwijVZFbEgar9bKWrnWrmgADdoN2nPMaBugQIwvH
W8rBL7kyUW7j4Sk6PqGLz7TVWyn7u7/HNUFbWIXPsto7f1mxeJDMv+PIMGw9AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUqsWQ3xiGZi9zO1tCAuNln/oD+/owHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3ODk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQBUiYq
AwQBUiYuAwQBUiZQAwQAUibXAwQBslNSMA8EAgACMAkDBwAqE5UAAHwwDQYJKoZI
hvcNAQELBQADggEBABwRSuC/qXnbX1HidLp/GHps5qKwA+aPzMaMryGCEEYbFecm
R4Q09Q8s7rMLBQMAZcYSmo2lXXiCHcXH0jPUzITHCGhjAnEv/VM7Rakszl4UCGU9
mu3ukq9jE8C2jFaFsaTcDoBe0VEJARRAwwzdZZ3dL6DhDZ7HX1M9UdlkVKmYfxPs
XWXZVKjCKDx1EW8d6RrRw0tfyj/rObgAi5HPyUE4zMQoWDuydanSRPotFqFX3+dJ
AThcSDB7LgNwEWGdL3jwFvuwSWEJMZeEds+JC7fYAZEnW3J3J/TyU4Kj7KrXlEiM
LfDe3/wUd4FGD2tiLvVmvp66uh5cXOWMi2c8+qE=
-----END CERTIFICATE-----