Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
File:                     AS402265.roa (raw, json)
Hash identifier:          O8YsqsTr/16drsgwSNG/Dn61EMlZSnxDYvPopjXim+8=
Subject key identifier:   41:E2:E2:54:43:13:D1:5B:55:84:8F:F7:2B:AD:CF:00:66:C4:BE:7C
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       4658901A1E98BCDFFEE10CA40196A94E18DCA105
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
Signing time:             Thu 05 Nov 2026 00:08:25 +0000
ROA not before:           Thu 05 Nov 2026 00:03:25 +0000
ROA not after:            Thu 04 Nov 2027 00:08:25 +0000
asID:                     402265
IP address blocks:        188.221.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:58:90:1a:1e:98:bc:df:fe:e1:0c:a4:01:96:a9:4e:18:dc:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Nov  5 00:03:25 2026 GMT
            Not After : Nov  4 00:08:25 2027 GMT
        Subject: CN=41E2E2544313D15B55848FF72BADCF0066C4BE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:7e:4a:02:24:da:f6:97:54:21:2a:fb:c1:
                    4e:00:19:65:82:30:8e:16:73:e6:4d:ad:d4:30:35:
                    51:9e:7b:5d:a7:14:f5:e7:81:c5:d3:14:ff:f1:15:
                    86:d7:e0:ee:ea:d1:01:e6:57:e0:ba:66:ea:0a:69:
                    77:ac:41:85:75:99:dc:9b:e9:dc:78:4b:04:af:47:
                    5d:67:12:62:4a:8b:57:67:30:3f:fa:2e:2d:51:ee:
                    ad:ce:72:7f:95:ff:01:0d:30:b4:ec:85:04:22:2e:
                    5f:ce:6e:f0:32:46:9f:4c:5e:c1:96:1b:a5:92:a7:
                    98:be:5a:98:7f:f0:7d:6f:aa:17:03:b4:41:cf:53:
                    42:66:87:d3:10:d1:ea:20:cc:ee:f6:97:65:4a:d1:
                    66:e5:1d:cd:15:e4:c6:c0:00:47:a6:f7:f5:83:62:
                    44:80:77:4a:2c:02:85:6d:1b:16:85:28:1f:97:18:
                    44:36:9d:0e:2c:64:ec:40:6a:da:3c:6e:82:cc:5b:
                    ca:02:db:93:b5:ff:e0:19:cf:02:ce:eb:bd:ba:c4:
                    dd:47:ee:ab:93:34:df:7f:67:d7:6b:f2:49:ad:9a:
                    ee:83:97:66:e5:6b:d3:1c:5e:a3:52:ab:04:2f:47:
                    b1:14:ac:98:be:7c:2d:c8:e3:35:29:5c:e9:b6:e9:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:E2:54:43:13:D1:5B:55:84:8F:F7:2B:AD:CF:00:66:C4:BE:7C
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.221.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:33:01:46:05:0e:26:78:0a:0b:a3:7d:ab:1d:1c:ec:a7:a6:
         79:0e:5a:dc:ae:8c:e6:c2:5b:2d:62:54:c2:84:03:d1:4f:02:
         03:7d:55:09:fb:b8:2e:96:3b:80:19:d8:a9:6c:ad:53:a8:f9:
         c7:b6:5b:6c:e3:43:5d:c5:cb:2d:37:26:3d:02:d3:68:9e:2f:
         63:d5:a4:2a:26:65:9f:84:e3:19:06:5c:9e:68:80:81:35:6a:
         ff:96:e4:33:c1:b7:47:3c:1d:26:80:89:e6:10:0b:d6:76:97:
         4d:fe:a8:31:3c:a0:ce:37:a0:46:fa:d8:da:0c:97:ca:2a:10:
         53:c8:82:31:cd:f5:82:02:2d:0b:26:aa:ff:00:9d:ae:e5:19:
         0a:9b:6a:80:b5:5a:7a:79:7b:5a:c8:95:61:df:6d:0d:9e:bd:
         86:a4:fe:73:22:b2:0d:fc:0f:4d:9e:60:d6:24:cd:f0:4c:04:
         d9:0d:ce:1c:04:54:40:c9:8c:11:c5:ad:ad:0d:ea:8c:b4:5d:
         4e:40:f3:06:df:19:0c:6c:70:d3:5d:2d:3b:d8:57:c6:71:6d:
         7e:29:ed:4a:c5:22:eb:b8:a5:80:51:ef:31:fa:86:04:2e:d6:
         9b:10:ef:76:41:b3:ad:de:7f:ca:78:a7:e7:03:45:bc:db:9e:
         ea:ad:93:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURliQGh6YvN/+4QykAZapThjcoQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMDUwMDAzMjVaFw0yNzExMDQwMDA4MjVaMDMxMTAvBgNV
BAMTKDQxRTJFMjU0NDMxM0QxNUI1NTg0OEZGNzJCQURDRjAwNjZDNEJFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+H5KAiTa9pdUISr7wU4AGWWC
MI4Wc+ZNrdQwNVGee12nFPXngcXTFP/xFYbX4O7q0QHmV+C6ZuoKaXesQYV1mdyb
6dx4SwSvR11nEmJKi1dnMD/6Li1R7q3Ocn+V/wENMLTshQQiLl/ObvAyRp9MXsGW
G6WSp5i+Wph/8H1vqhcDtEHPU0Jmh9MQ0eogzO72l2VK0WblHc0V5MbAAEem9/WD
YkSAd0osAoVtGxaFKB+XGEQ2nQ4sZOxAato8boLMW8oC25O1/+AZzwLO6726xN1H
7quTNN9/Z9dr8kmtmu6Dl2bla9McXqNSqwQvR7EUrJi+fC3I4zUpXOm26bQrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUQeLiVEMT0VtVhI/3K63PAGbEvnwwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvN0/
MA0GCSqGSIb3DQEBCwUAA4IBAQCIMwFGBQ4meAoLo32rHRzsp6Z5Dlrcrozmwlst
YlTChAPRTwIDfVUJ+7guljuAGdipbK1TqPnHtlts40NdxcstNyY9AtNoni9j1aQq
JmWfhOMZBlyeaICBNWr/luQzwbdHPB0mgInmEAvWdpdN/qgxPKDON6BG+tjaDJfK
KhBTyIIxzfWCAi0LJqr/AJ2u5RkKm2qAtVp6eXtayJVh320Nnr2GpP5zIrIN/A9N
nmDWJM3wTATZDc4cBFRAyYwRxa2tDeqMtF1OQPMG3xkMbHDTXS072FfGcW1+Ke1K
xSLruKWAUe8x+oYELtabEO92QbOt3n/KeKfnA0W8257qrZNf
-----END CERTIFICATE-----