Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218217.roa
File:                     AS218217.roa (raw, json)
Hash identifier:          BlxLZpuDYHL6NiWdQbK4yyN5V3vFUZjKtqiLk2Ryde8=
Subject key identifier:   64:B6:B5:FE:65:F8:B7:52:3B:2B:1F:6B:34:05:45:CE:05:F9:46:DF
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       5A79F17D658DFF7E8B1CC103E4D1CB5D8105A529
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218217.roa
Signing time:             Mon 02 Nov 2026 20:23:53 +0000
ROA not before:           Mon 02 Nov 2026 20:18:53 +0000
ROA not after:            Mon 01 Nov 2027 20:23:53 +0000
asID:                     218217
IP address blocks:        2a14:7583:efc7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:79:f1:7d:65:8d:ff:7e:8b:1c:c1:03:e4:d1:cb:5d:81:05:a5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Nov  2 20:18:53 2026 GMT
            Not After : Nov  1 20:23:53 2027 GMT
        Subject: CN=64B6B5FE65F8B7523B2B1F6B340545CE05F946DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:45:1a:62:70:d4:b7:36:45:8a:86:e7:10:
                    8e:16:f1:bf:d4:68:0c:8a:f8:ee:ab:39:93:fa:ad:
                    3e:c6:d5:fa:9a:2a:16:f4:be:90:23:b1:08:8b:c9:
                    8f:f4:d8:bb:5e:15:69:58:a9:02:19:ad:40:d1:9f:
                    1d:15:07:c4:b5:56:c6:3c:b9:46:02:46:d0:20:47:
                    d9:5f:21:71:77:3f:6b:a9:c2:77:81:01:f0:c2:4c:
                    9d:70:da:55:16:ea:cb:0f:23:9e:ce:1e:94:02:49:
                    07:a5:88:8b:7e:a3:db:57:06:32:39:f9:a9:da:fc:
                    8a:c5:9e:a7:24:ed:ce:ee:81:d5:b5:c0:a8:0c:df:
                    ad:47:89:90:cf:69:2b:30:a0:57:00:04:f0:97:4d:
                    95:02:46:a8:f1:1f:9d:8d:9f:7d:db:d6:44:35:b4:
                    e2:13:c4:4b:51:72:f0:da:25:54:02:fe:bf:1d:29:
                    b0:8d:4f:25:c9:f9:fd:7f:60:dd:e0:7b:52:81:d6:
                    50:fd:84:f2:ab:e8:be:a9:f1:05:dc:90:e3:99:86:
                    46:b8:b0:16:0c:da:6b:b6:6f:fd:d0:ed:a1:09:b3:
                    a3:06:f1:25:b3:59:76:69:42:b8:46:4d:bb:a5:30:
                    55:c5:bf:25:a4:59:df:ca:66:88:87:0c:e5:17:be:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B6:B5:FE:65:F8:B7:52:3B:2B:1F:6B:34:05:45:CE:05:F9:46:DF
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS218217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:efc7::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:17:ee:31:95:bc:3d:fb:c5:eb:70:ba:20:a5:58:f4:4b:
         47:09:b3:f8:83:a0:90:6b:c4:16:5c:56:a4:04:e3:39:1f:42:
         63:94:69:23:bb:94:de:ab:a1:26:90:16:cf:77:5d:33:3b:79:
         25:a9:83:f7:1c:51:25:db:01:0a:02:5c:83:8a:c0:f1:68:61:
         9a:79:2a:eb:3c:38:1e:df:75:e0:95:4a:5d:90:fb:ba:f7:f0:
         3c:ad:4f:c7:ec:22:14:c0:3d:64:b3:45:35:28:62:56:66:4d:
         f3:2c:e5:26:6b:de:e6:9e:22:43:f3:08:c1:bc:fd:24:d8:3c:
         81:23:5e:e5:7d:75:25:33:32:8d:e3:42:e3:0e:83:da:d7:ae:
         c7:b4:09:0b:4c:67:c5:11:20:0b:da:42:5c:f6:93:f3:45:56:
         46:40:7d:46:de:8f:d3:4c:11:da:aa:29:b7:4f:81:8f:99:61:
         9c:6d:e3:1a:cf:d9:07:23:2b:2f:37:e3:83:d4:a1:18:e8:46:
         e4:d8:fa:02:30:8f:6b:9e:70:98:31:24:31:7c:27:fd:d3:e8:
         8d:fc:f8:e3:ce:d9:44:88:13:d6:07:ef:8f:0e:00:02:07:2d:
         68:30:66:1d:7c:66:8e:21:e3:0f:74:9e:94:b3:08:df:2d:a6:
         96:1b:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----