Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200169.roa
File:                     AS200169.roa (raw, json)
Hash identifier:          zWWmXhqn29IVkgWeeCUumb+3GAb1WYoRKSa/pix0GSg=
Subject key identifier:   E6:39:CE:E0:6B:19:D9:FE:43:C2:3B:67:80:8D:FD:8E:80:2A:A4:7A
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       097F66B139BC2C20EA43EAA8483096099CC2421F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200169.roa
Signing time:             Wed 21 Oct 2026 07:54:49 +0000
ROA not before:           Wed 21 Oct 2026 07:49:49 +0000
ROA not after:            Wed 20 Oct 2027 07:54:49 +0000
asID:                     200169
IP address blocks:        82.26.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:66:b1:39:bc:2c:20:ea:43:ea:a8:48:30:96:09:9c:c2:42:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 21 07:49:49 2026 GMT
            Not After : Oct 20 07:54:49 2027 GMT
        Subject: CN=E639CEE06B19D9FE43C23B67808DFD8E802AA47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:e6:c1:01:88:e4:15:d7:22:d8:eb:b9:6e:
                    a3:8d:7b:38:2f:04:25:00:82:af:1a:4d:cc:c3:3c:
                    00:e1:cd:7f:72:fc:45:2c:06:2e:ae:82:e8:1b:70:
                    0d:2c:d8:7d:f7:76:ba:fa:8e:c3:59:cb:e3:ef:00:
                    b6:d4:16:48:e5:01:d0:dd:64:4e:14:62:2f:a5:73:
                    42:fd:4c:a6:69:ab:ce:6d:dc:74:4e:5b:f0:2c:56:
                    af:5c:d8:08:80:42:e5:ea:a0:33:9d:64:b4:05:53:
                    30:1e:ef:bf:14:da:d0:05:f2:2a:20:e4:ce:e9:b5:
                    6b:0b:6c:8a:b6:8e:5e:42:88:cc:54:0f:b8:dc:a5:
                    e2:d9:32:6b:71:9c:8b:58:39:32:2c:96:d6:40:a3:
                    0a:40:1f:0a:a3:6b:63:0e:32:f3:fe:f8:6c:8a:16:
                    f2:da:a7:02:8f:31:4b:b6:43:02:3c:5e:dd:76:b3:
                    a4:e7:e9:e8:e3:12:5a:fa:6d:44:db:1b:09:18:5f:
                    e4:68:90:dd:ac:ca:78:0b:e3:3c:bf:c3:8a:ae:17:
                    6b:f5:1a:85:8a:a3:9b:e2:86:d5:0a:a7:50:27:4a:
                    15:26:91:53:8d:bd:26:58:78:45:aa:5a:d3:ca:bf:
                    39:95:6d:35:a1:01:bb:bd:b6:95:6f:dc:a8:aa:86:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:CE:E0:6B:19:D9:FE:43:C2:3B:67:80:8D:FD:8E:80:2A:A4:7A
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200169.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:5d:2a:59:f2:8a:43:a8:d4:d9:3f:4d:a5:d9:0f:09:6b:
         f4:88:2b:a5:e2:c8:e9:a0:07:2f:25:e4:67:d3:cc:a2:5a:1c:
         a7:40:1c:db:53:be:da:f0:70:59:29:ad:b1:04:ff:9c:35:cb:
         c2:95:96:cc:0d:6e:5e:f2:97:6d:cd:72:e0:db:22:06:cb:c9:
         44:54:43:79:f4:b5:a0:c8:03:3a:ff:d2:43:ba:ef:7e:d8:4f:
         21:e5:4b:10:31:a9:5a:32:d3:b5:78:b6:3c:90:de:44:2a:0e:
         53:6d:8f:2f:64:68:d5:8e:cc:f0:a0:21:73:6b:eb:e7:aa:2b:
         00:ab:b4:c1:ce:b2:c4:a4:ba:0f:15:49:13:d1:3d:3b:70:d0:
         c4:b0:b5:a9:94:22:55:ff:66:17:c8:ea:fe:ef:64:ef:cd:09:
         14:68:4d:cf:41:f1:d8:b3:8b:d0:4b:3b:e8:11:49:c5:cf:df:
         26:66:86:7c:f9:b7:57:a2:7c:af:7c:28:b6:5b:e9:b1:dc:3d:
         9a:d4:81:98:13:7a:22:e8:59:14:d7:a1:ca:fb:09:91:d7:a5:
         19:e5:ed:44:3d:b7:a4:26:23:96:4a:ce:6d:96:05:1f:c1:f4:
         9d:44:ee:aa:8c:ed:ec:a0:3c:fc:d7:97:28:2e:09:4f:26:d7:
         67:58:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----