Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218187.roa
File:                     AS218187.roa (raw, json)
Hash identifier:          UpAqPgMkAi0X8caTkKXhspTa0WQZMNEdhxLIuVrmlGU=
Subject key identifier:   BB:58:8D:BF:E8:B4:61:29:D4:F7:60:03:A9:3A:9E:EA:F2:26:F5:68
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       4D82FCB779333B96AFEBEBB38E9203E744993B2F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218187.roa
Signing time:             Wed 04 Nov 2026 13:35:09 +0000
ROA not before:           Wed 04 Nov 2026 13:30:09 +0000
ROA not after:            Wed 03 Nov 2027 13:35:09 +0000
asID:                     218187
IP address blocks:        2a14:7581:3ef5::/48 maxlen: 48
                          2a14:7581:3ef6::/48 maxlen: 48
                          2a14:7581:3eff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:82:fc:b7:79:33:3b:96:af:eb:eb:b3:8e:92:03:e7:44:99:3b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Nov  4 13:30:09 2026 GMT
            Not After : Nov  3 13:35:09 2027 GMT
        Subject: CN=BB588DBFE8B46129D4F76003A93A9EEAF226F568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:51:35:c3:89:22:13:ed:db:86:37:f8:e7:
                    1c:c1:28:b3:81:7d:7a:51:dc:32:3c:f2:ea:62:47:
                    07:f9:36:5f:94:79:b0:05:c1:72:f1:68:55:ba:46:
                    93:f7:21:41:08:37:5a:a0:03:b7:2f:32:19:e0:3d:
                    5d:45:79:ba:29:8e:b5:a2:ab:99:72:38:15:41:7a:
                    90:57:96:23:06:5b:40:ad:c1:fa:92:b3:04:e8:3c:
                    40:23:6d:64:78:34:b2:26:9b:04:bc:3f:dc:b7:d9:
                    5b:7b:c6:a1:e0:cc:26:c5:37:b6:fe:be:7f:e9:6d:
                    8c:39:a1:28:82:15:da:f4:1e:e4:d4:3f:47:b1:64:
                    6c:da:1e:73:47:0d:66:d0:d5:1a:47:d2:57:e7:98:
                    48:5e:ff:2f:51:91:de:54:ca:48:d2:23:6a:11:6c:
                    2c:57:08:c8:37:28:ef:4c:11:c6:02:af:f0:48:fa:
                    2c:bd:d6:30:b5:99:2d:52:6a:38:fd:c6:56:f8:74:
                    40:17:a9:23:83:3f:8d:94:db:98:bc:67:0d:35:c4:
                    e8:80:59:d9:1f:b8:b2:c1:ce:fc:56:81:7a:e3:95:
                    94:9a:fc:38:0c:f7:50:ec:a4:d4:43:b8:99:60:79:
                    7e:d6:2b:da:99:d0:13:b5:93:47:1a:04:a4:a7:29:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:8D:BF:E8:B4:61:29:D4:F7:60:03:A9:3A:9E:EA:F2:26:F5:68
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3ef5::-2a14:7581:3ef6:ffff:ffff:ffff:ffff:ffff
                  2a14:7581:3eff::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:21:bc:32:89:d2:5a:ed:5f:5e:ee:5f:df:04:13:98:d5:0d:
         0a:37:a5:af:9a:78:61:92:0d:3f:04:12:fa:c4:43:60:0e:e8:
         38:04:ae:28:fe:6b:56:76:a0:13:a5:15:4d:30:3f:df:4b:09:
         a0:a8:30:83:90:41:72:57:65:5a:bc:24:8a:c0:80:5e:c8:95:
         0f:cc:d5:76:dc:86:06:4a:9a:18:24:c2:a5:47:31:6d:db:07:
         26:a3:68:3b:7d:13:fb:4f:6e:30:13:db:81:03:46:3a:57:52:
         b6:c3:70:1d:38:cd:5c:bd:67:d2:0e:6f:83:4f:90:88:99:10:
         f3:84:36:8a:ba:d4:cd:36:bb:d1:40:29:83:f9:4e:1b:38:3d:
         f3:fd:56:ff:93:d7:0a:0d:a3:82:7d:92:85:14:a8:37:7f:ab:
         d7:76:41:8f:fe:1b:09:05:b5:19:08:e5:3c:23:6d:f0:ae:6a:
         81:61:de:72:51:a1:42:11:83:46:17:c8:a6:8d:68:c9:cc:28:
         08:b6:16:c6:9b:17:83:d2:d1:b6:73:89:99:cc:7a:ff:73:11:
         36:c5:c6:c1:e5:80:a8:a0:d1:2e:62:11:7b:81:da:86:3a:7f:
         b0:5c:fe:c7:d5:35:d1:85:6f:25:7a:1a:54:94:83:c2:83:5d:
         a4:7f:ff:2d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUTYL8t3kzO5av6+uzjpID50SZOy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjExMDQxMzMwMDlaFw0yNzExMDMxMzM1MDlaMDMxMTAvBgNV
BAMTKEJCNTg4REJGRThCNDYxMjlENEY3NjAwM0E5M0E5RUVBRjIyNkY1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIlE1w4kiE+3bhjf45xzBKLOB
fXpR3DI88upiRwf5Nl+UebAFwXLxaFW6RpP3IUEIN1qgA7cvMhngPV1FebopjrWi
q5lyOBVBepBXliMGW0CtwfqSswToPEAjbWR4NLImmwS8P9y32Vt7xqHgzCbFN7b+
vn/pbYw5oSiCFdr0HuTUP0exZGzaHnNHDWbQ1RpH0lfnmEhe/y9Rkd5UykjSI2oR
bCxXCMg3KO9MEcYCr/BI+iy91jC1mS1Sajj9xlb4dEAXqSODP42U25i8Zw01xOiA
WdkfuLLBzvxWgXrjlZSa/DgM91DspNRDuJlgeX7WK9qZ0BO1k0caBKSnKUQhAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUu1iNv+i0YSnU92ADqTqe6vIm9WgwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE4MTg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAq
FHWBPvUDBwAqFHWBPvYDBwAqFHWBPv8wDQYJKoZIhvcNAQELBQADggEBAHIhvDKJ
0lrtX17uX98EE5jVDQo3pa+aeGGSDT8EEvrEQ2AO6DgErij+a1Z2oBOlFU0wP99L
CaCoMIOQQXJXZVq8JIrAgF7IlQ/M1XbchgZKmhgkwqVHMW3bByajaDt9E/tPbjAT
24EDRjpXUrbDcB04zVy9Z9IOb4NPkIiZEPOENoq61M02u9FAKYP5Ths4PfP9Vv+T
1woNo4J9koUUqDd/q9d2QY/+GwkFtRkI5TwjbfCuaoFh3nJRoUIRg0YXyKaNaMnM
KAi2FsabF4PS0bZziZnMev9zETbFxsHlgKig0S5iEXuB2oY6f7Bc/sfVNdGFbyV6
GlSUg8KDXaR//y0=
-----END CERTIFICATE-----