Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
File:                     AS209181.roa (raw, json)
Hash identifier:          B7XEiYsAHZh3sz4x8ZcPEoV9YZ9Ty03LdKdgAOE3Q0I=
Subject key identifier:   7C:F7:0E:8C:8B:95:C6:64:E4:88:A4:5C:3A:2C:AD:A3:AF:02:05:2C
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       488A021C98AC10E52E797A64EC5145A931E04D16
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa
Signing time:             Sat 10 Oct 2026 21:26:19 +0000
ROA not before:           Sat 10 Oct 2026 21:21:19 +0000
ROA not after:            Sat 09 Oct 2027 21:26:19 +0000
asID:                     209181
IP address blocks:        178.94.175.0/24 maxlen: 24
                          178.94.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8a:02:1c:98:ac:10:e5:2e:79:7a:64:ec:51:45:a9:31:e0:4d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Oct 10 21:21:19 2026 GMT
            Not After : Oct  9 21:26:19 2027 GMT
        Subject: CN=7CF70E8C8B95C664E488A45C3A2CADA3AF02052C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:e0:3e:30:28:9b:3a:db:de:5c:c1:25:0e:
                    6a:6c:9f:b4:17:d1:8e:b9:85:73:f3:65:d9:f9:46:
                    24:fe:92:6b:5e:a2:da:2a:c7:5b:b2:58:4a:d9:06:
                    20:2a:4e:ea:bb:74:70:d5:b7:38:e0:b4:93:c1:2e:
                    53:07:ce:49:26:f5:51:b8:32:17:c0:9b:60:eb:4b:
                    0a:0e:7b:09:43:fc:08:4e:83:75:d6:c6:1e:ee:d0:
                    50:00:77:fe:cc:14:20:d5:fd:d8:3d:41:f9:6a:90:
                    f4:ab:04:07:6c:42:fe:66:2b:93:f8:ed:14:43:06:
                    16:13:7d:cb:29:6e:4c:de:73:d9:40:ba:65:5e:8c:
                    af:38:21:9b:13:8d:74:94:ee:dd:08:33:e6:e8:9f:
                    59:02:5a:3f:9a:6f:7e:a4:0a:80:9c:fd:2d:b1:7b:
                    e4:92:75:1f:07:1b:b6:ef:f0:26:df:3f:60:89:73:
                    94:3b:99:1b:72:59:ff:a0:2d:e1:b4:14:8d:d8:e9:
                    95:cb:39:3d:c5:e1:c4:fe:a9:58:39:ee:73:3c:07:
                    9a:80:3d:4f:19:57:48:26:80:8e:96:92:65:95:12:
                    af:d6:67:5f:9f:3e:dd:68:67:02:96:5a:15:a9:65:
                    76:49:b2:88:e0:2b:99:be:b5:b2:a6:57:6b:a0:5b:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:0E:8C:8B:95:C6:64:E4:88:A4:5C:3A:2C:AD:A3:AF:02:05:2C
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.94.175.0/24
                  178.94.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:06:d4:48:e1:4d:30:c3:ea:ee:30:f0:92:19:dc:84:c9:9b:
         6c:60:35:0f:29:08:0f:2d:06:02:f7:11:95:a2:6c:a3:c7:f1:
         ba:4e:44:ff:77:9d:fa:e9:03:63:0b:23:5b:57:48:e4:e1:68:
         95:b7:f6:cd:d5:c4:b2:84:a8:14:4f:12:d9:5e:5b:38:0a:84:
         69:04:9b:be:ce:ad:bd:ed:1f:b2:44:15:8b:a5:ec:d8:fb:b1:
         68:6c:f7:19:b6:83:54:c7:c4:22:95:fb:68:c5:a2:07:fa:9f:
         e8:09:3e:d5:a6:02:ef:6e:7a:b1:64:7c:5c:84:32:c0:b2:b6:
         b2:2f:9d:ee:f9:6e:2a:61:84:a2:f9:98:b0:2f:ac:aa:48:3e:
         13:04:17:9e:b2:4d:f2:0d:59:6b:b5:fc:f1:67:86:eb:fa:6f:
         fd:23:61:5c:a5:1c:6e:fa:6c:8f:89:b4:c1:9b:4c:c3:ac:fb:
         b8:99:d9:0c:71:b6:a7:54:53:fd:3a:e4:db:f7:18:6c:0e:e2:
         03:84:3c:e7:54:a9:37:e4:b3:1e:47:b0:c2:af:bd:63:86:5d:
         c9:58:03:29:55:b7:f4:50:ac:03:2b:f5:9f:2b:61:22:92:d1:
         e9:67:47:1d:d4:66:4c:22:2f:8a:67:8b:d1:43:95:f3:31:9c:
         e8:f9:3b:bc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUSIoCHJisEOUueXpk7FFFqTHgTRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMTAyMTIxMTlaFw0yNzEwMDkyMTI2MTlaMDMxMTAvBgNV
BAMTKDdDRjcwRThDOEI5NUM2NjRFNDg4QTQ1QzNBMkNBREEzQUYwMjA1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1eA+MCibOtveXMElDmpsn7QX
0Y65hXPzZdn5RiT+kmteotoqx1uyWErZBiAqTuq7dHDVtzjgtJPBLlMHzkkm9VG4
MhfAm2DrSwoOewlD/AhOg3XWxh7u0FAAd/7MFCDV/dg9QflqkPSrBAdsQv5mK5P4
7RRDBhYTfcspbkzec9lAumVejK84IZsTjXSU7t0IM+bon1kCWj+ab36kCoCc/S2x
e+SSdR8HG7bv8CbfP2CJc5Q7mRtyWf+gLeG0FI3Y6ZXLOT3F4cT+qVg57nM8B5qA
PU8ZV0gmgI6WkmWVEq/WZ1+fPt1oZwKWWhWpZXZJsojgK5m+tbKmV2ugW81LAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUfPcOjIuVxmTkiKRcOiyto68CBSwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA5MTgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsl6v
AwQAsl7sMA0GCSqGSIb3DQEBCwUAA4IBAQBmBtRI4U0ww+ruMPCSGdyEyZtsYDUP
KQgPLQYC9xGVomyjx/G6TkT/d5366QNjCyNbV0jk4WiVt/bN1cSyhKgUTxLZXls4
CoRpBJu+zq297R+yRBWLpezY+7FobPcZtoNUx8QilftoxaIH+p/oCT7VpgLvbnqx
ZHxchDLAsrayL53u+W4qYYSi+ZiwL6yqSD4TBBeesk3yDVlrtfzxZ4br+m/9I2Fc
pRxu+myPibTBm0zDrPu4mdkMcbanVFP9OuTb9xhsDuIDhDznVKk35LMeR7DCr71j
hl3JWAMpVbf0UKwDK/WfK2EiktHpZ0cd1GZMIi+KZ4vRQ5XzMZzo+Tu8
-----END CERTIFICATE-----