Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
File:                     AS147281.roa (raw, json)
Hash identifier:          Uaba0tN0ZXwLXZFu195xuUkIjHhTBJW60vttBC4y2YY=
Subject key identifier:   75:B4:42:BE:3B:B7:38:B4:9F:A5:D4:8B:AE:55:02:48:DA:E4:A9:4C
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6D89B9E177270730B25E7846F11BDADD1C69F1F7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa
Signing time:             Thu 05 Nov 2026 07:29:28 +0000
ROA not before:           Thu 05 Nov 2026 07:24:28 +0000
ROA not after:            Thu 04 Nov 2027 07:29:28 +0000
asID:                     147281
IP address blocks:        82.39.129.0/24 maxlen: 24
                          82.39.170.0/24 maxlen: 24
                          82.39.185.0/24 maxlen: 24
                          82.39.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:89:b9:e1:77:27:07:30:b2:5e:78:46:f1:1b:da:dd:1c:69:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov  5 07:24:28 2026 GMT
            Not After : Nov  4 07:29:28 2027 GMT
        Subject: CN=75B442BE3BB738B49FA5D48BAE550248DAE4A94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:6c:ea:8c:11:63:31:eb:8a:77:15:f5:b7:
                    41:eb:1e:63:0d:59:78:10:3a:d6:0e:d7:26:e1:53:
                    9b:05:16:33:d3:8f:a7:66:47:fd:c7:5e:a4:ba:a1:
                    8c:1d:fb:38:2c:c7:97:4d:80:49:c0:b6:19:04:b0:
                    12:b0:8b:38:b6:9d:b4:a9:23:4e:99:20:3b:f7:52:
                    4d:9b:62:79:80:bb:34:b9:d4:52:99:f7:33:dd:d0:
                    a8:79:ae:f4:5b:be:f5:bb:9d:2e:05:f7:d9:27:7e:
                    86:4b:2f:8a:75:d6:d2:90:7f:62:43:d0:e7:29:e4:
                    0f:c0:44:0b:bc:f1:10:52:ea:15:be:b8:fc:93:74:
                    37:fd:1f:99:6b:e1:bb:ee:4d:29:7a:2e:71:67:f3:
                    a1:fd:e2:ad:17:54:d3:8e:7d:e1:d8:aa:2e:9e:52:
                    56:ec:8c:13:0c:5c:58:43:0f:74:8f:d9:21:d5:ea:
                    b3:d3:c4:ca:60:f9:b4:7d:92:23:5c:6c:9d:21:45:
                    73:77:b5:b9:e2:e6:92:e0:62:5a:aa:a1:5d:54:fb:
                    e0:25:96:52:5c:e4:35:71:a7:89:d1:3a:5a:06:f1:
                    7e:cd:55:1c:a5:f2:f1:22:7b:43:dd:70:fd:f0:91:
                    82:b4:64:26:a1:b4:6b:eb:02:e6:e8:05:31:91:2f:
                    f7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B4:42:BE:3B:B7:38:B4:9F:A5:D4:8B:AE:55:02:48:DA:E4:A9:4C
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS147281.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.39.129.0/24
                  82.39.170.0/24
                  82.39.185.0/24
                  82.39.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:13:4b:7e:6a:51:ed:c0:cd:e3:cd:9e:66:20:d4:39:86:
         3c:94:95:2d:de:c0:6e:e8:06:2c:ec:f6:94:32:4c:24:53:e5:
         75:3e:c5:b7:d1:df:fd:d3:4f:2e:83:9c:79:78:f1:57:b1:db:
         5b:da:06:f7:ed:bc:aa:11:6e:a3:e0:0d:d2:60:c7:3c:70:1d:
         40:96:a8:3e:44:30:ce:57:a5:bc:6f:ca:6d:55:26:a8:50:66:
         e5:1d:2b:8f:66:23:81:53:dd:69:15:db:f3:c3:5a:cb:3c:cc:
         e9:f6:2b:c2:d5:98:e6:df:a5:f8:15:f2:82:ae:44:ae:e7:ce:
         03:68:c2:0b:e3:f8:2e:79:68:ca:da:20:0b:bd:b7:ed:ce:ca:
         b3:e4:32:1f:3e:a8:29:89:57:23:28:38:c7:54:49:f2:d4:80:
         4f:11:ba:49:62:ea:c5:5d:e9:87:94:bb:7a:1f:d0:15:81:cb:
         6d:b7:67:9f:d0:8b:62:cd:c0:dc:2f:a7:7a:4d:b0:d4:8c:93:
         9a:7c:92:62:64:cb:25:0d:34:65:dc:26:48:b5:d2:73:7f:41:
         ba:34:4e:f6:be:d9:f4:13:2b:84:a4:8d:45:3e:ac:02:c4:a8:
         1a:ff:54:40:2e:a8:6b:c0:24:8c:c9:9a:60:07:df:76:25:3d:
         83:ba:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----