Route Origin Authorization

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u21/1/AS202934.roa
File:                     AS202934.roa (raw, json)
Hash identifier:          jiBQ8OeqVywBxZJh6WtP2Wk87WNOV7w4VIYh9A6oZJM=
Subject key identifier:   00:B3:E3:11:41:47:42:94:FF:10:C1:51:88:15:96:26:D8:29:BE:F2
Certificate issuer:       /CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
Certificate serial:       277F0F5F47048F2477E19E6BE1CA7584FE79A1AD
Authority key identifier: 4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/AS202934.roa
Signing time:             Sat 07 Nov 2026 12:25:26 +0000
ROA not before:           Sat 07 Nov 2026 12:20:26 +0000
ROA not after:            Sat 06 Nov 2027 12:25:26 +0000
asID:                     202934
IP address blocks:        2a13:c8c4:fc11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7f:0f:5f:47:04:8f:24:77:e1:9e:6b:e1:ca:75:84:fe:79:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
        Validity
            Not Before: Nov  7 12:20:26 2026 GMT
            Not After : Nov  6 12:25:26 2027 GMT
        Subject: CN=00B3E31141474294FF10C15188159626D829BEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:b1:7c:17:65:79:c5:84:b5:44:58:13:56:
                    f8:6b:1b:68:c0:8f:70:ff:c9:30:b1:e5:f7:64:29:
                    1c:7c:28:21:03:61:20:ba:e4:65:58:1f:b0:37:e2:
                    8e:7b:5f:1c:18:bf:68:26:f7:6d:5b:8e:35:aa:51:
                    6c:d3:6d:63:9e:44:b8:ba:c9:a2:e0:d1:2f:9f:83:
                    76:d4:75:1c:a2:83:5f:c3:63:22:03:69:64:35:82:
                    83:0a:bd:45:06:6d:ed:e1:6e:a0:ea:d3:1c:bb:f3:
                    eb:cf:ff:c4:75:65:8f:a3:27:cc:1d:76:15:ec:d6:
                    31:07:b1:4e:4f:2a:f8:51:d0:8a:0c:c2:b6:f9:37:
                    3e:b2:df:f4:e5:ff:72:2f:2b:2c:56:e2:13:ff:8d:
                    0d:8b:97:6d:7a:6d:c5:83:7e:ed:58:21:9f:fe:6b:
                    8a:51:99:c5:82:ab:50:8d:e6:7f:26:76:48:fe:bf:
                    01:bc:7d:e1:dd:d3:55:e5:42:09:bf:ee:af:c8:31:
                    2f:0c:e9:86:5d:68:55:6b:7e:16:fd:92:d3:ad:80:
                    a4:10:0d:ca:25:b3:35:c6:a6:48:87:4b:6d:48:5d:
                    c7:d1:b7:bf:9d:03:ce:a8:71:a7:50:69:a8:08:b2:
                    a6:44:68:37:68:0e:58:88:d4:6d:3d:18:7e:81:eb:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B3:E3:11:41:47:42:94:FF:10:C1:51:88:15:96:26:D8:29:BE:F2
            X509v3 Authority Key Identifier:
                keyid:4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/AS202934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:fc11::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:78:94:1f:fe:00:e3:e2:9b:2c:dc:f0:d4:29:b3:c9:05:03:
         63:27:d3:0f:35:72:5a:93:30:4f:c1:c3:fa:92:5a:3c:37:ca:
         5f:71:08:44:f3:9b:f4:4f:e0:db:bc:fb:ae:3a:0b:3d:c4:fc:
         70:4e:fd:5c:51:92:6d:b0:c2:e6:50:df:56:fe:90:de:97:26:
         ff:a9:15:ff:25:4a:59:d0:01:f2:25:22:47:06:3f:09:e8:e7:
         64:a9:85:c9:a5:62:c1:67:1b:2f:f9:fa:2b:e3:d7:f5:6c:90:
         9d:4d:ed:ac:ec:9f:1a:41:27:5a:bf:7f:18:33:8f:77:f6:e8:
         61:72:b9:f2:08:2e:45:bb:94:69:5e:ff:b8:7f:00:2e:d0:94:
         12:c0:80:d5:01:ab:e4:e4:ca:7b:1a:10:2f:3f:61:72:7e:d2:
         71:cf:37:b4:5b:df:f9:2f:10:e3:f8:82:01:42:93:09:ea:e7:
         36:86:44:ad:fe:a7:1f:1e:a8:37:02:bd:c7:56:30:57:6b:b6:
         55:0c:ee:36:ed:d3:a8:2d:ac:65:40:0b:6f:36:55:ca:e9:8d:
         bb:28:89:ab:d5:3d:33:50:69:96:77:e7:5b:d0:3f:5a:a2:f8:
         e9:9d:d4:3a:21:f0:92:c4:c7:4b:9a:74:5b:b3:af:8e:23:fd:
         ad:3f:78:8b
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUJ38PX0cEjyR34Z5r4cp1hP55oa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVDMkVCRUVGMUQ0MUMzOTZEOTZBM0FDNTg0MTRFOUU4
MjI4NTE3QjAeFw0yNjExMDcxMjIwMjZaFw0yNzExMDYxMjI1MjZaMDMxMTAvBgNV
BAMTKDAwQjNFMzExNDE0NzQyOTRGRjEwQzE1MTg4MTU5NjI2RDgyOUJFRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sbF8F2V5xYS1RFgTVvhrG2jA
j3D/yTCx5fdkKRx8KCEDYSC65GVYH7A34o57XxwYv2gm921bjjWqUWzTbWOeRLi6
yaLg0S+fg3bUdRyig1/DYyIDaWQ1goMKvUUGbe3hbqDq0xy78+vP/8R1ZY+jJ8wd
dhXs1jEHsU5PKvhR0IoMwrb5Nz6y3/Tl/3IvKyxW4hP/jQ2Ll216bcWDfu1YIZ/+
a4pRmcWCq1CN5n8mdkj+vwG8feHd01XlQgm/7q/IMS8M6YZdaFVrfhb9ktOtgKQQ
DcolszXGpkiHS21IXcfRt7+dA86ocadQaagIsqZEaDdoDliI1G09GH6B66I1AgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUALPjEUFHQpT/EMFRiBWWJtgpvvIwHwYDVR0j
BBgwFoAUTsLr7vHUHDltlqOsWEFOnoIoUXswDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnN5bmMucHJveHktYXJwLm5ldHdvcmsvcmVw
by9iZ3A0My11MjEvMS80RUMyRUJFRUYxRDQxQzM5NkQ5NkEzQUM1ODQxNEU5RTgy
Mjg1MTdCLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAwMmY4ZWU2
LWFiZTctNGFlOC05NjRjLTc4OGJiOThjOTc1Yy8xLzRFQzJFQkVFRjFENDFDMzk2
RDk2QTNBQzU4NDE0RTlFODIyODUxN0IuY2VyMFkGCCsGAQUFBwELBE0wSzBJBggr
BgEFBQcwC4Y9cnN5bmM6Ly9yc3luYy5wcm94eS1hcnAubmV0d29yay9yZXBvL2Jn
cDQzLXUyMS8xL0FTMjAyOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPIxPwRMA0GCSqGSIb3DQEB
CwUAA4IBAQAEeJQf/gDj4pss3PDUKbPJBQNjJ9MPNXJakzBPwcP6klo8N8pfcQhE
85v0T+DbvPuuOgs9xPxwTv1cUZJtsMLmUN9W/pDelyb/qRX/JUpZ0AHyJSJHBj8J
6OdkqYXJpWLBZxsv+for49f1bJCdTe2s7J8aQSdav38YM4939uhhcrnyCC5Fu5Rp
Xv+4fwAu0JQSwIDVAavk5Mp7GhAvP2FyftJxzze0W9/5LxDj+IIBQpMJ6uc2hkSt
/qcfHqg3Ar3HVjBXa7ZVDO427dOoLaxlQAtvNlXK6Y27KImr1T0zUGmWd+db0D9a
ovjpndQ6IfCSxMdLmnRbs6+OI/2tP3iL
-----END CERTIFICATE-----