Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          5+3RC2uTtz8AGLa2EwJz0SdEnC/Nt9X6bKmhKq9V9zQ=
Subject key identifier:   0E:67:0D:EC:1D:02:07:F1:08:47:75:E2:5C:FB:E4:F9:49:2D:95:6B
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       1D3113E0830D873915769144E1103D1A8274AC80
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS262287.roa
Signing time:             Tue 27 Oct 2026 13:08:17 +0000
ROA not before:           Tue 27 Oct 2026 13:03:17 +0000
ROA not after:            Tue 26 Oct 2027 13:08:17 +0000
asID:                     262287
IP address blocks:        2.216.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:31:13:e0:83:0d:87:39:15:76:91:44:e1:10:3d:1a:82:74:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct 27 13:03:17 2026 GMT
            Not After : Oct 26 13:08:17 2027 GMT
        Subject: CN=0E670DEC1D0207F1084775E25CFBE4F9492D956B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:00:73:96:43:f9:ed:58:00:52:1c:d3:aa:6d:
                    2e:d4:5e:94:c3:61:36:0e:6d:40:05:a7:b8:9b:55:
                    64:46:fc:bd:59:5f:20:54:c3:19:52:06:77:f8:4e:
                    1b:c2:51:63:c3:38:7d:67:45:26:ac:60:3c:61:8f:
                    5d:99:47:00:e1:7a:82:a4:ac:71:43:f3:83:9a:c8:
                    e2:cf:73:61:fd:8f:99:61:36:11:ee:16:70:4c:de:
                    45:5c:13:4e:c0:79:9e:45:fc:f7:7a:5e:4b:10:6c:
                    a2:71:8e:8a:82:7c:91:ae:2e:eb:91:25:54:ba:f6:
                    35:78:17:17:ea:c0:3a:d8:62:d5:5a:2d:91:4b:5b:
                    4f:40:2f:1f:36:97:fa:7c:e1:c3:60:5c:43:5a:fd:
                    80:cd:9c:65:b2:06:3e:ee:37:39:d4:6d:fa:f1:65:
                    5c:26:6d:91:50:02:8f:a5:49:54:f3:81:84:92:f7:
                    98:ee:42:70:d1:88:13:dd:2a:b5:24:3e:da:67:da:
                    f1:f3:34:85:9e:55:fe:09:c2:f9:c9:55:8f:ef:12:
                    36:e5:b3:c3:8f:d1:d1:c4:21:40:89:01:c6:b2:0b:
                    53:53:0c:76:4f:ea:33:d3:dc:15:67:e3:1c:ab:50:
                    89:c4:0b:cb:1b:6a:b4:0a:c8:85:d7:39:6c:a5:a7:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:67:0D:EC:1D:02:07:F1:08:47:75:E2:5C:FB:E4:F9:49:2D:95:6B
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.216.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:dd:56:0a:42:33:c3:ba:20:30:22:99:a3:89:ab:fc:6f:e1:
         76:2b:88:b8:5d:36:21:fa:80:82:6d:83:66:77:73:2a:0e:53:
         f9:d2:0a:8c:68:4f:0a:4a:1e:70:61:46:d2:e8:87:ac:50:13:
         35:8a:ed:d2:10:c4:8c:41:db:51:d0:b1:68:aa:ce:19:d2:31:
         42:3f:f5:61:a8:71:be:96:28:90:0c:81:4d:c7:63:9b:f6:bb:
         b8:fb:69:92:21:71:5c:60:b6:ca:5d:ae:d5:5c:93:2b:2e:7c:
         d8:e5:d5:3b:39:6a:87:e1:74:04:0c:ff:89:c8:a0:fb:ae:f2:
         3d:38:8e:d6:69:94:b2:9d:e7:85:dd:c9:b8:9b:52:6a:3a:3e:
         f2:7e:36:66:c0:53:9d:11:f3:53:18:8d:80:7f:12:f7:75:da:
         bb:ef:8b:12:20:6d:bb:d6:8a:89:6a:d5:b2:12:e1:e2:fe:b9:
         8a:6d:fe:9a:af:22:3c:ba:92:3d:68:e2:74:84:64:6a:98:5c:
         75:a3:a0:52:8f:86:c1:76:0c:be:53:2c:48:f2:a0:41:ea:e1:
         9b:e0:15:2f:45:ba:ec:94:bc:20:3f:43:4b:db:3a:f1:c7:05:
         c9:41:a4:38:31:26:e7:05:62:52:47:b2:30:9a:a0:cd:8d:d4:
         6c:37:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----