Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209181.roa
File:                     AS209181.roa (raw, json)
Hash identifier:          f+bkVkZoZpObrnwvc5kBevolwC59obeZGwzPT3ohZos=
Subject key identifier:   03:D5:14:24:5E:7B:E9:6D:40:ED:DE:43:63:7E:64:04:F4:39:C1:5E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       12B3BE82606617FE70EC407D6E6884D6764DADC7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209181.roa
Signing time:             Thu 05 Nov 2026 08:49:40 +0000
ROA not before:           Thu 05 Nov 2026 08:44:40 +0000
ROA not after:            Thu 04 Nov 2027 08:49:40 +0000
asID:                     209181
IP address blocks:        2a13:9500:2d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b3:be:82:60:66:17:fe:70:ec:40:7d:6e:68:84:d6:76:4d:ad:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov  5 08:44:40 2026 GMT
            Not After : Nov  4 08:49:40 2027 GMT
        Subject: CN=03D514245E7BE96D40EDDE43637E6404F439C15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:05:f0:75:e1:ed:29:3b:f9:80:2e:f9:fe:
                    3f:7c:a5:7a:b4:39:85:d7:42:09:fe:61:dc:fc:fa:
                    a1:c4:13:d9:ab:5b:f1:ca:4f:a7:33:f9:0e:01:65:
                    15:3a:b9:26:2a:4c:86:c5:6a:d7:54:3d:d7:ff:76:
                    54:8c:ba:1f:17:0f:0a:5d:2f:f8:6e:57:f3:23:18:
                    8c:f9:af:1f:f4:8a:8c:00:89:22:de:40:f0:a3:49:
                    92:0d:08:ed:c4:c9:7f:2c:e6:a4:0c:d2:84:0b:3d:
                    99:27:5e:f6:04:27:15:5c:dd:4d:64:41:26:45:3e:
                    fb:88:02:a0:e4:9f:0d:d6:0f:6d:af:c2:c5:65:99:
                    67:02:22:bd:fc:31:d2:bf:8a:f0:e7:2f:e5:36:28:
                    c0:70:37:c3:02:58:a5:16:3e:17:ae:d1:49:62:61:
                    c5:f0:64:cd:c5:ba:8c:d5:44:ec:97:eb:ac:6c:f4:
                    36:92:9b:53:77:e6:9f:9c:3f:d2:7c:55:3a:da:41:
                    f2:10:2a:b4:f0:a2:af:fd:29:38:2c:7d:cc:b6:bd:
                    bc:c6:14:b9:2f:b7:3b:bf:42:9b:a5:0a:2c:a4:bf:
                    c0:43:3e:db:9b:b8:66:91:50:83:45:94:c6:a2:17:
                    fc:26:47:eb:13:35:96:8e:ac:d8:68:65:a4:28:a1:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:14:24:5E:7B:E9:6D:40:ED:DE:43:63:7E:64:04:F4:39:C1:5E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:72:6b:e1:a6:55:2f:7a:33:d0:7a:41:2f:72:8f:84:1f:
         63:e9:c0:d6:8c:5a:a6:53:65:74:ea:b7:bd:34:e0:5d:6a:45:
         d4:2f:59:4b:74:34:9e:95:9d:f6:32:2d:d1:88:15:1d:ab:da:
         a1:f9:04:86:65:d3:06:74:9e:8e:6d:49:15:fe:f6:f1:4a:4d:
         2b:f0:bf:32:df:66:50:3f:c7:24:27:8b:43:ef:9e:9e:46:6a:
         39:db:d6:3c:1c:fe:9b:30:13:57:ed:ec:ef:b3:26:26:89:7d:
         30:e0:6a:16:19:06:8b:ea:8e:cf:05:68:3b:7e:36:fc:85:08:
         e6:a8:76:4f:8f:08:b8:0f:b8:2f:03:80:e5:11:3e:e9:8d:44:
         7f:41:3a:9c:d7:ff:1a:ae:f6:4b:a4:a5:8c:a4:8c:4c:5b:c5:
         df:7f:c3:d2:44:90:cc:97:49:d7:51:9f:8d:d1:15:37:f4:5c:
         55:5d:28:de:b8:68:f3:be:37:44:e5:15:55:40:5d:e1:67:18:
         ea:0e:65:6f:6a:2b:d4:bb:14:18:97:80:77:88:60:c9:c5:bd:
         e7:98:03:48:8d:34:43:bf:5b:1b:21:2a:c0:aa:95:92:ef:81:
         4f:2b:a7:e1:78:f4:0a:e9:1a:48:5f:cf:35:79:eb:06:11:bf:
         55:cf:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----