Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa
File:                     AS211826.roa (raw, json)
Hash identifier:          Zsy3dTDzV4pREOGaS8alwvNkGbjkO4wKY57Ilfw6/iE=
Subject key identifier:   F9:7C:B0:47:2A:1E:A2:A8:4F:8A:0F:6E:38:67:8B:F1:B4:F4:12:16
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       409EA12802D6DC99C080B06AD9691C34E26C55ED
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa
Signing time:             Mon 02 Nov 2026 00:49:39 +0000
ROA not before:           Mon 02 Nov 2026 00:44:39 +0000
ROA not after:            Mon 01 Nov 2027 00:49:39 +0000
asID:                     211826
IP address blocks:        46.202.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9e:a1:28:02:d6:dc:99:c0:80:b0:6a:d9:69:1c:34:e2:6c:55:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov  2 00:44:39 2026 GMT
            Not After : Nov  1 00:49:39 2027 GMT
        Subject: CN=F97CB0472A1EA2A84F8A0F6E38678BF1B4F41216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:48:29:c1:b2:2b:99:1e:a7:e5:93:f4:2b:
                    fa:2d:a6:13:11:f8:5c:33:db:40:cf:b4:e8:a5:fe:
                    1b:13:b8:10:ee:35:09:12:71:30:7f:9f:30:68:49:
                    58:8c:9f:ac:0a:59:86:a9:e1:ea:7f:a0:a8:1a:6f:
                    ef:00:e8:bd:9e:87:17:59:58:8b:c4:20:d8:ee:55:
                    0a:2b:3e:16:a9:5e:19:32:43:c8:79:f3:28:63:2d:
                    32:f8:6e:1f:64:83:f2:8b:f3:38:39:cc:20:2e:4d:
                    2e:5e:16:6c:08:87:58:a3:69:09:c2:51:cb:82:70:
                    0a:59:e2:86:09:44:fb:90:3e:5e:97:ea:46:93:7b:
                    df:41:7b:a9:3a:3f:66:9f:e4:80:1e:f6:5d:72:47:
                    91:dd:e4:e5:08:37:11:aa:78:69:bb:13:40:56:b7:
                    1a:33:e3:68:fa:62:a7:ea:26:0b:57:85:f0:da:3e:
                    1f:c0:62:ef:55:71:68:ad:58:83:e6:17:5d:6b:8e:
                    79:6f:66:8a:15:22:6c:75:ed:ae:9b:99:ee:69:f4:
                    9d:4c:87:6f:ca:46:7a:9f:e3:36:8e:3d:b0:66:50:
                    94:33:fb:92:fd:ce:e0:98:08:a7:87:9f:5f:23:d0:
                    8f:73:69:4b:b2:9f:7e:9b:f4:6d:f7:27:b2:f8:f6:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:B0:47:2A:1E:A2:A8:4F:8A:0F:6E:38:67:8B:F1:B4:F4:12:16
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:cb:29:be:26:f1:9c:60:3d:db:d2:b8:8d:97:46:40:79:
         f0:34:2a:d4:c7:cd:a2:4e:f0:29:f0:1a:15:43:e1:dd:dc:19:
         c2:03:70:be:14:37:4a:0f:1f:eb:c6:b5:8d:38:bd:7d:9a:ac:
         0e:39:25:df:d3:fb:44:0f:0d:ee:10:9e:92:82:13:7a:0b:8d:
         35:17:3f:91:3e:94:33:7b:0e:73:8a:0a:8c:66:73:7b:d6:f4:
         0c:a7:8b:5d:9f:d4:84:d8:ac:14:6c:76:93:5c:0f:bc:7b:ba:
         e3:a7:d5:b4:b3:1f:4b:da:cc:70:24:d1:4b:b3:ed:bb:b5:ed:
         c0:89:57:2c:41:42:69:8c:20:5b:e0:00:df:7c:cb:a2:de:8a:
         21:a0:67:3f:bb:a6:20:87:f5:89:89:5d:58:f5:83:61:c9:33:
         b8:31:9b:66:7c:07:64:31:97:8f:09:9f:fe:28:ae:90:08:0f:
         f1:af:b7:97:a7:be:73:85:41:8c:82:ac:73:07:b0:09:99:80:
         ef:52:f4:05:2d:81:70:71:9f:b3:d5:7b:a5:77:0e:fb:0b:7e:
         c6:3b:08:2e:e1:9b:9d:5e:c5:83:40:33:80:48:c7:bf:5c:87:
         5a:5a:1f:8c:77:3e:14:fb:a5:d0:54:ea:a5:82:c5:f1:83:fa:
         46:a6:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----