Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219498.roa
File:                     AS219498.roa (raw, json)
Hash identifier:          hwyZ+ZAm9hRYVObELNxEpPbNz9Yi55ZZ+aDDQK7a6Ls=
Subject key identifier:   4D:17:91:7B:71:85:20:9B:5F:70:A5:3C:E1:56:BC:14:01:3D:4E:3E
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       724E0F2ED6E327E403ED3BA228D6732BADE3E274
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219498.roa
Signing time:             Mon 02 Nov 2026 10:16:03 +0000
ROA not before:           Mon 02 Nov 2026 10:11:03 +0000
ROA not after:            Mon 01 Nov 2027 10:16:03 +0000
asID:                     219498
IP address blocks:        45.158.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4e:0f:2e:d6:e3:27:e4:03:ed:3b:a2:28:d6:73:2b:ad:e3:e2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Nov  2 10:11:03 2026 GMT
            Not After : Nov  1 10:16:03 2027 GMT
        Subject: CN=4D17917B7185209B5F70A53CE156BC14013D4E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:fc:ed:2c:35:7e:80:3c:6d:c9:0c:93:74:
                    c5:ce:4b:5a:3f:9c:37:3d:03:38:de:6f:98:df:6b:
                    d3:16:1b:d6:bb:83:d5:a5:e8:1f:ff:d6:2f:d5:fe:
                    d8:d7:a9:ce:10:c1:50:44:47:4d:8d:bc:bc:a0:bf:
                    4e:0d:70:3b:4a:a3:d9:87:ec:08:a0:62:28:a4:b5:
                    44:58:0d:1f:97:23:d2:db:63:cf:51:fa:53:99:2f:
                    7f:80:98:64:25:de:78:d6:54:0c:ee:aa:28:20:59:
                    f9:62:04:ef:d9:9d:51:27:25:b3:a0:d7:56:66:b7:
                    84:72:80:39:1c:eb:65:a4:3a:e1:f9:62:d6:f6:0d:
                    50:fe:92:88:53:57:7e:6c:a1:3d:d0:d3:35:ed:4f:
                    83:09:60:2a:ca:cc:33:85:0d:86:af:52:e5:89:a9:
                    50:c3:41:57:b6:0a:a0:0e:af:4e:bd:d2:d4:97:3f:
                    11:63:71:a3:60:c6:5b:2f:98:11:c9:91:0c:99:4d:
                    2e:9d:1f:0a:03:3a:cb:f8:b1:98:bd:28:a2:29:b7:
                    ea:54:01:e5:74:f7:d1:6e:03:42:ef:3b:10:01:f2:
                    f9:12:b0:75:b3:5a:38:16:02:c2:60:92:84:d7:79:
                    23:35:15:1d:1f:bc:c4:78:55:ea:8a:ef:d2:7f:99:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:91:7B:71:85:20:9B:5F:70:A5:3C:E1:56:BC:14:01:3D:4E:3E
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS219498.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:15:03:75:20:6b:f6:8f:6d:fb:92:7b:82:c5:6e:31:e5:28:
         f7:d2:58:4d:2b:3f:54:62:90:8c:09:4a:25:4b:88:ee:80:ea:
         c0:23:4d:67:6b:45:6e:8b:5f:80:89:49:9b:06:52:82:e7:f0:
         aa:11:30:d8:e8:bb:1b:01:9f:e1:81:12:a8:fa:aa:37:46:a0:
         c5:48:49:5d:08:46:26:1e:51:cb:83:05:71:ae:c9:90:c7:f8:
         7a:ef:94:5a:96:11:3f:b4:38:cd:cc:4e:07:f2:66:de:1a:21:
         19:98:89:b8:92:f5:10:14:1a:a1:17:17:31:bd:9e:27:a6:30:
         4b:b7:78:4f:3d:0d:4e:dd:88:49:b1:e0:ef:04:c4:4b:bc:44:
         62:2f:92:c6:3b:11:02:33:4f:d9:aa:15:9d:14:26:ca:a4:12:
         f4:ea:ee:06:e3:99:8a:39:1b:46:54:68:cb:57:18:f6:a8:ba:
         4e:77:39:4c:5a:f7:0d:65:38:da:73:09:bf:71:52:2a:ae:08:
         79:18:3c:15:64:c7:9c:56:cf:17:50:18:5c:61:d4:4c:6a:69:
         3a:6a:db:1f:d0:ea:63:c0:02:17:98:a0:2f:95:52:b8:97:c1:
         f9:e5:57:0c:1e:33:03:98:3b:8c:09:17:69:1c:f2:e2:eb:cd:
         11:00:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----