Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          HvGkUaGrgazSxDHCHHneX3zUszON00TljUFBx+go3pc=
Subject key identifier:   92:75:46:55:EC:17:FD:4D:A8:30:30:D3:E9:3E:A0:DA:F7:87:1A:27
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       74E7A62D070E8349A90D5E28559205E9A58A3010
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa
Signing time:             Sun 25 Oct 2026 08:47:32 +0000
ROA not before:           Sun 25 Oct 2026 08:42:32 +0000
ROA not after:            Sun 24 Oct 2027 08:47:32 +0000
asID:                     42831
IP address blocks:        51.194.134.0/24 maxlen: 24
                          51.194.136.0/24 maxlen: 24
                          51.194.138.0/24 maxlen: 24
                          51.241.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e7:a6:2d:07:0e:83:49:a9:0d:5e:28:55:92:05:e9:a5:8a:30:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Oct 25 08:42:32 2026 GMT
            Not After : Oct 24 08:47:32 2027 GMT
        Subject: CN=92754655EC17FD4DA83030D3E93EA0DAF7871A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:03:4d:8d:d7:ec:a1:e0:f9:a9:06:d1:3b:4d:
                    af:43:1a:76:bd:00:42:5e:73:e7:30:40:eb:2c:cd:
                    af:5d:29:ae:bd:38:51:d7:bf:5d:12:c2:a9:02:25:
                    f1:42:5c:89:36:1e:ed:e8:07:36:8b:c1:86:92:eb:
                    b1:65:cc:36:47:5f:62:26:04:d6:5d:08:7a:de:98:
                    a5:c3:cd:84:fb:3b:23:84:d5:62:ce:8e:34:31:dc:
                    ab:88:d6:3b:b4:8a:8e:9a:77:49:19:78:0b:4f:a8:
                    52:aa:35:7b:a2:34:a3:cf:c4:07:fc:1b:98:04:59:
                    fa:78:cd:72:e8:5d:85:ff:da:b4:25:be:0f:51:81:
                    e9:44:de:35:16:af:28:c7:04:da:fe:a8:88:c3:1c:
                    3b:7c:38:cb:0d:a4:eb:2f:1f:b5:42:28:0d:e9:a3:
                    9b:f6:50:fc:8a:41:5c:84:d3:46:06:d3:c3:fe:0d:
                    66:b9:a8:c1:53:cc:69:bd:b2:bb:ff:4e:e9:c5:23:
                    99:7f:62:e7:ff:22:54:df:87:a6:ce:a0:3f:79:9f:
                    94:43:dc:02:1f:ec:6f:7b:43:35:66:c5:02:16:1f:
                    eb:2e:b6:5d:3b:78:5b:62:f7:ac:e9:02:fc:b3:68:
                    49:d5:d7:73:f9:7e:d9:60:87:cb:25:c6:a2:b0:84:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:46:55:EC:17:FD:4D:A8:30:30:D3:E9:3E:A0:DA:F7:87:1A:27
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.134.0/24
                  51.194.136.0/24
                  51.194.138.0/24
                  51.241.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:02:f5:20:af:ff:96:e2:e5:bd:06:fa:7e:5a:ac:1d:07:
         db:da:18:ac:25:ed:eb:c1:7b:1e:cf:5a:b7:b3:3b:66:7b:f2:
         82:63:1f:0d:99:40:61:82:be:a2:0d:7c:b3:d0:05:44:0a:54:
         f0:eb:aa:8a:cf:5b:93:b6:0f:78:be:42:1f:fa:46:78:9b:c3:
         35:9b:b5:6b:90:52:a7:16:36:c5:34:e2:28:cc:3b:80:72:2a:
         e3:b5:d2:c6:60:2d:e0:a7:ed:90:65:c6:a9:e3:70:ef:8b:90:
         95:fb:81:3a:9a:a7:a4:08:1b:7a:06:72:9e:f9:cb:b9:0e:c7:
         f4:0c:ab:d2:7b:8f:46:ca:a2:e3:8e:56:1f:88:cc:19:ea:75:
         6f:29:0c:c8:a1:d6:21:3e:d3:4c:2a:b5:0a:e0:12:de:be:50:
         82:65:7b:6b:5f:13:56:91:58:08:f8:ce:ac:6f:c9:c8:59:54:
         dc:c8:22:35:48:55:f5:e9:3b:ec:10:18:76:ba:29:a2:07:a9:
         a1:08:93:dc:74:7b:24:85:d9:1f:4a:06:a7:2f:4f:58:9f:03:
         ff:e4:59:0d:d9:2f:b5:23:e4:bd:b5:b4:6b:9f:00:16:30:99:
         6f:98:5c:82:09:2f:f9:4e:2f:e7:df:b6:83:e6:e4:61:34:e0:
         48:f4:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----