Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58212.roa
File:                     AS58212.roa (raw, json)
Hash identifier:          sE0vQTub+3e5J2m+D/IdeBEr/uTin00k0VGvO1ew7p8=
Subject key identifier:   5B:5F:7D:9F:5B:75:40:5F:39:1D:CC:96:D7:CB:0A:25:D6:A5:74:78
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       7C7EFCFAC6FBB966D6AAD45C692E0C3BA5693EE1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58212.roa
Signing time:             Tue 03 Nov 2026 00:49:39 +0000
ROA not before:           Tue 03 Nov 2026 00:44:39 +0000
ROA not after:            Tue 02 Nov 2027 00:49:39 +0000
asID:                     58212
IP address blocks:        141.11.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7e:fc:fa:c6:fb:b9:66:d6:aa:d4:5c:69:2e:0c:3b:a5:69:3e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Nov  3 00:44:39 2026 GMT
            Not After : Nov  2 00:49:39 2027 GMT
        Subject: CN=5B5F7D9F5B75405F391DCC96D7CB0A25D6A57478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:f0:4e:e5:84:e4:32:f6:e6:b9:05:d2:d0:
                    9e:96:05:f8:49:38:71:95:92:8e:c6:74:98:05:08:
                    64:ee:dc:c3:f1:bf:c1:17:16:a4:f7:57:9a:53:fe:
                    de:00:1c:65:5e:42:46:ce:2d:af:96:1c:4a:f0:c0:
                    55:35:d9:f0:da:22:9a:3b:a3:56:f9:98:1a:d2:93:
                    d4:d1:27:05:2b:92:7f:39:02:55:e5:aa:48:fb:a7:
                    80:04:6d:34:21:ff:aa:10:13:37:37:c1:33:85:47:
                    ea:0f:e6:5d:66:8f:c5:34:3f:aa:83:48:15:dd:6f:
                    99:fa:f0:1b:c2:90:1e:72:41:23:9c:94:f8:dd:ab:
                    4b:be:ba:22:50:c0:44:49:88:e4:0a:9b:0a:37:c7:
                    b0:57:ac:3b:7d:f6:18:07:cd:04:13:13:da:d3:1c:
                    80:dc:32:37:ac:2b:85:d8:23:f0:0d:a9:37:ff:76:
                    5b:b9:0a:ca:4c:c7:72:77:ea:7a:56:91:37:c7:c9:
                    91:b7:4f:4f:26:eb:f6:30:2e:f2:29:23:e6:b7:62:
                    04:31:bf:f7:c4:de:3e:45:08:c5:e1:ae:54:10:e4:
                    b8:88:23:5e:11:37:de:57:ad:9c:f0:bc:9a:c9:47:
                    92:a0:96:22:11:81:c8:4d:dc:e7:fc:86:a3:d1:10:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:7D:9F:5B:75:40:5F:39:1D:CC:96:D7:CB:0A:25:D6:A5:74:78
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:88:26:c9:ac:2a:18:ad:74:53:d1:95:6e:3b:df:bc:50:
         69:27:fc:d9:84:13:ec:67:82:e3:03:d2:52:a7:c0:63:37:1d:
         95:ac:b9:c0:82:61:27:5d:1b:f6:5b:5e:66:fd:e0:c9:67:b6:
         91:f2:59:5e:74:22:dc:1c:a2:35:e0:36:46:99:28:5b:de:0e:
         ce:08:9a:73:26:27:3e:45:9a:12:f2:12:e6:9e:25:13:2b:9b:
         23:3f:f3:ca:94:b0:81:b2:08:33:ff:a7:4d:aa:ca:3d:42:62:
         2c:c5:27:34:28:57:a3:a4:b1:97:59:ea:81:1c:60:70:45:4e:
         3f:13:fe:d6:26:df:db:b7:44:3b:7a:89:0d:e2:d6:cd:e0:f2:
         ae:50:7c:cb:80:bd:c7:71:91:34:3f:93:96:51:64:d2:17:a6:
         a2:1f:a4:3b:16:c5:06:3f:85:b9:2e:18:4a:c0:d1:1a:e5:6e:
         58:47:a4:4e:67:65:df:10:9f:a0:70:a7:98:cc:b4:ea:b0:de:
         d6:77:5c:d3:9f:4e:f6:ca:41:a8:9a:f2:26:36:9a:91:a3:b7:
         eb:9f:65:22:ba:7c:56:24:c0:75:7e:06:23:fa:6b:0b:ec:1c:
         1d:61:6c:71:a4:d2:2a:19:28:64:e7:40:40:61:67:02:b3:25:
         23:01:b8:04
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUfH78+sb7uWbWqtRcaS4MO6VpPuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjExMDMwMDQ0MzlaFw0yNzExMDIwMDQ5MzlaMDMxMTAvBgNV
BAMTKDVCNUY3RDlGNUI3NTQwNUYzOTFEQ0M5NkQ3Q0IwQTI1RDZBNTc0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgffBO5YTkMvbmuQXS0J6WBfhJ
OHGVko7GdJgFCGTu3MPxv8EXFqT3V5pT/t4AHGVeQkbOLa+WHErwwFU12fDaIpo7
o1b5mBrSk9TRJwUrkn85AlXlqkj7p4AEbTQh/6oQEzc3wTOFR+oP5l1mj8U0P6qD
SBXdb5n68BvCkB5yQSOclPjdq0u+uiJQwERJiOQKmwo3x7BXrDt99hgHzQQTE9rT
HIDcMjesK4XYI/ANqTf/dlu5CspMx3J36npWkTfHyZG3T08m6/YwLvIpI+a3YgQx
v/fE3j5FCMXhrlQQ5LiII14RN95XrZzwvJrJR5KgliIRgchN3Of8hqPRECR7AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUW199n1t1QF85HcyW18sKJdaldHgwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTgyMTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC0Qw
DQYJKoZIhvcNAQELBQADggEBADz6iCbJrCoYrXRT0ZVuO9+8UGkn/NmEE+xnguMD
0lKnwGM3HZWsucCCYSddG/ZbXmb94MlntpHyWV50ItwcojXgNkaZKFveDs4ImnMm
Jz5FmhLyEuaeJRMrmyM/88qUsIGyCDP/p02qyj1CYizFJzQoV6OksZdZ6oEcYHBF
Tj8T/tYm39u3RDt6iQ3i1s3g8q5QfMuAvcdxkTQ/k5ZRZNIXpqIfpDsWxQY/hbku
GErA0RrlblhHpE5nZd8Qn6Bwp5jMtOqw3tZ3XNOfTvbKQaia8iY2mpGjt+ufZSK6
fFYkwHV+BiP6awvsHB1hbHGk0ioZKGTnQEBhZwKzJSMBuAQ=
-----END CERTIFICATE-----