Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402904.roa
File:                     AS402904.roa (raw, json)
Hash identifier:          HbX7AzmxfPM9ki4/mJxUEO1Ge4guSmx/zWHJMwsiu2k=
Subject key identifier:   77:D5:FF:E5:4D:E5:92:0D:81:D5:54:7E:D2:41:A4:D1:0C:94:34:28
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       63ADCCA5637A7939FDCA2F221D128A9BF88A6B68
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402904.roa
Signing time:             Tue 03 Nov 2026 14:13:20 +0000
ROA not before:           Tue 03 Nov 2026 14:08:20 +0000
ROA not after:            Tue 02 Nov 2027 14:13:20 +0000
asID:                     402904
IP address blocks:        45.151.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ad:cc:a5:63:7a:79:39:fd:ca:2f:22:1d:12:8a:9b:f8:8a:6b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Nov  3 14:08:20 2026 GMT
            Not After : Nov  2 14:13:20 2027 GMT
        Subject: CN=77D5FFE54DE5920D81D5547ED241A4D10C943428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:69:06:60:e2:29:fc:7c:4a:51:e0:2a:33:
                    13:e7:6f:c4:17:ba:0a:93:8b:22:dd:a5:e1:f4:5d:
                    ab:38:16:a9:d2:a5:a1:d0:50:b7:a2:7d:04:0b:0e:
                    b2:29:d7:f8:be:83:f1:a0:9e:77:d7:de:cb:c7:5c:
                    3b:99:97:01:cd:97:cf:81:7a:de:9b:75:50:85:65:
                    24:79:8c:1c:48:f3:80:c2:a6:50:87:ed:b2:fb:a3:
                    10:b0:9a:54:ec:a3:ac:49:01:e7:0e:a1:7a:43:d1:
                    28:80:fa:4e:e2:3e:10:95:e6:e6:18:e2:36:e4:41:
                    1a:d7:1b:33:6c:f0:68:0d:f8:5d:d8:99:ef:e9:0e:
                    8f:41:de:96:b1:9e:1e:42:fd:89:41:3e:57:cb:99:
                    c6:60:7b:7e:5a:8c:6d:e4:33:07:1f:76:16:68:d0:
                    4e:27:68:cb:1f:44:9c:43:4c:72:2f:ae:2f:01:2b:
                    87:43:ed:11:19:3d:7e:34:c4:86:b3:6b:62:61:70:
                    1d:b2:f6:7e:63:53:a0:07:36:85:46:92:c3:55:bb:
                    26:e0:a8:b4:2b:f8:25:9c:a9:96:87:df:fd:9c:a8:
                    a6:dd:09:18:b9:12:a1:78:5a:df:5c:84:6d:ed:3c:
                    48:34:12:21:9a:67:a8:83:34:96:27:c8:d8:d6:7c:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:FF:E5:4D:E5:92:0D:81:D5:54:7E:D2:41:A4:D1:0C:94:34:28
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:9c:26:73:46:14:b7:b7:92:f4:f2:7b:53:46:28:95:6b:
         ce:83:b6:66:2f:2f:27:96:c2:55:cb:d5:c5:50:7c:6f:50:04:
         77:a0:9b:3a:42:20:ee:bb:1a:2c:14:f7:d7:54:26:43:ee:20:
         95:bc:16:e1:eb:71:42:79:74:2e:c2:f3:5b:81:7b:b0:27:c3:
         c9:23:48:23:9a:95:6e:87:f7:b8:b8:60:f0:f7:d9:4e:ed:a0:
         12:27:33:95:b5:d4:37:d4:a2:8a:44:82:e8:9d:37:16:29:dc:
         8b:cc:b2:f0:4e:16:c6:5f:99:b3:7c:b9:b5:c8:19:b1:4c:79:
         7c:94:24:12:76:06:f8:b9:bb:b6:b5:a9:3a:df:41:a6:10:4f:
         37:82:41:4e:f2:c5:a0:00:31:7e:23:44:00:09:43:da:d1:70:
         92:88:df:97:71:43:22:53:14:4b:84:99:4d:8c:7a:17:fd:05:
         e8:c7:9a:e6:f1:6c:10:66:14:c8:75:03:42:00:16:88:5f:49:
         ca:aa:86:79:25:52:76:54:24:d3:25:96:3c:46:fd:97:8d:c5:
         d8:b4:f8:2b:e9:64:30:ab:1a:b1:f4:86:eb:b4:dc:93:0c:27:
         b7:8e:e7:15:18:1d:d7:23:07:fe:a5:02:10:ab:3b:ff:7b:5b:
         ac:f3:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----