Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52025.roa
File:                     AS52025.roa (raw, json)
Hash identifier:          ngKE2rFRjvUh/njkyxXU6+A/rmUqdUTa1RYXgXm0JPE=
Subject key identifier:   DF:9F:A0:04:E3:4B:F0:93:AD:85:9F:39:C5:29:D1:1F:05:26:26:4C
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       228820A69EDC226AFAB772D1B17ACB2EC32506F4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52025.roa
Signing time:             Fri 23 Oct 2026 05:55:00 +0000
ROA not before:           Fri 23 Oct 2026 05:50:00 +0000
ROA not after:            Fri 22 Oct 2027 05:55:00 +0000
asID:                     52025
IP address blocks:        84.75.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:88:20:a6:9e:dc:22:6a:fa:b7:72:d1:b1:7a:cb:2e:c3:25:06:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Oct 23 05:50:00 2026 GMT
            Not After : Oct 22 05:55:00 2027 GMT
        Subject: CN=DF9FA004E34BF093AD859F39C529D11F0526264C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:6c:90:ba:16:9a:3e:03:8e:f5:3e:46:61:
                    cb:75:64:59:6f:38:98:09:e0:4f:76:37:51:80:ec:
                    35:a4:29:7e:65:6e:d4:3b:19:98:16:fa:4a:ae:16:
                    f7:c0:ad:5d:7b:e1:7b:ae:72:e9:81:49:23:6d:57:
                    03:d5:c2:76:97:5c:cf:79:2d:24:1f:39:75:cd:ab:
                    9c:26:09:39:9c:01:2d:a5:78:d8:bd:99:00:e4:ae:
                    a4:34:e7:61:15:c2:75:eb:45:ed:ee:82:b3:a6:51:
                    38:ea:68:80:f4:d0:ce:2e:3a:a7:c8:ad:57:19:4d:
                    4a:92:a4:f0:a2:27:ec:97:9b:f4:30:94:41:d0:83:
                    2a:98:24:0c:6e:88:6f:6b:4c:02:1d:bf:df:75:79:
                    4a:74:b9:75:10:2c:ab:db:4a:37:5e:a9:37:77:e5:
                    fe:8a:71:09:be:ab:db:30:00:a5:e4:fa:97:c6:24:
                    37:22:dc:a5:58:4e:7d:d5:ef:7a:c2:af:0a:2b:b5:
                    07:23:a6:cc:e9:44:06:e1:a8:f4:ff:af:f0:af:eb:
                    1b:aa:99:24:ac:e5:63:6e:4f:8e:09:f7:9e:cc:62:
                    64:8a:64:90:b1:d8:d9:b3:64:18:bc:cd:4a:53:4a:
                    d0:a2:7a:fd:e0:4c:c9:cf:f1:bd:3b:37:e9:ae:60:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:A0:04:E3:4B:F0:93:AD:85:9F:39:C5:29:D1:1F:05:26:26:4C
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.75.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:37:ca:df:7c:71:bf:ac:19:67:59:1c:ad:ae:42:3c:15:ec:
         10:94:1a:d2:89:1c:79:0f:d7:9c:0d:be:4e:a0:9c:2f:97:51:
         37:59:7b:9b:e1:9d:cb:fb:7c:98:66:a8:18:4c:db:d1:58:1c:
         99:4c:86:80:87:bc:c6:64:0f:68:b0:17:d1:e8:6e:45:b3:26:
         34:c4:c9:73:1e:1c:d6:8d:70:7d:12:54:d3:7b:89:c7:49:e7:
         f3:2d:e3:cf:c0:55:ce:24:53:64:54:10:c3:80:09:f9:51:26:
         a2:0f:05:05:84:5b:74:5c:9a:1f:d8:d1:01:26:b8:7e:de:e7:
         d5:3d:62:aa:b9:ae:42:69:2a:bf:1c:e3:e0:dd:73:f2:f9:51:
         8c:35:a2:63:64:06:c6:42:ac:00:63:dc:19:95:10:56:7d:b7:
         30:c5:bd:de:e7:97:5b:7e:73:dc:40:ac:5f:71:6e:aa:44:29:
         81:c0:66:58:95:fd:99:65:90:a5:05:b4:07:6b:db:6b:4c:95:
         5c:6c:17:dd:d4:e6:bb:a9:50:12:ec:94:ac:06:20:a4:8d:99:
         1a:79:05:6a:a9:24:6f:1b:f0:b1:7d:b2:02:bc:03:ec:a4:49:
         42:19:c8:9a:5c:ee:54:d6:f9:ce:c9:1c:62:67:11:72:df:aa:
         8b:0b:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----