Route Origin Authorization

$ rpki-client -vvvf rsync.proxy-arp.network/repo/bgp43-u21/1/AS40419.roa
File:                     AS40419.roa (raw, json)
Hash identifier:          ZpRJUhGfb/cvdZqU/TvVqC3eh9AZ3uCGLlRL33ceZ0c=
Subject key identifier:   33:C2:82:F3:39:6F:6F:5B:80:11:F6:84:8C:F1:22:AB:44:34:84:A4
Certificate issuer:       /CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
Certificate serial:       5FA34AFA707DB350E2ABC4040D52CB64479582AF
Authority key identifier: 4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer
Subject info access:      rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/AS40419.roa
Signing time:             Wed 04 Nov 2026 18:29:15 +0000
ROA not before:           Wed 04 Nov 2026 18:24:15 +0000
ROA not after:            Wed 03 Nov 2027 18:29:15 +0000
asID:                     40419
IP address blocks:        2a13:c8c4:fc07::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a3:4a:fa:70:7d:b3:50:e2:ab:c4:04:0d:52:cb:64:47:95:82:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC2EBEEF1D41C396D96A3AC58414E9E8228517B
        Validity
            Not Before: Nov  4 18:24:15 2026 GMT
            Not After : Nov  3 18:29:15 2027 GMT
        Subject: CN=33C282F3396F6F5B8011F6848CF122AB443484A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:c2:5c:60:e3:a6:6d:2c:6d:90:eb:87:75:
                    ba:fd:04:9a:33:2c:75:24:2a:32:c6:81:0a:d3:61:
                    f5:01:cd:3c:27:01:23:0d:5d:7d:3c:28:08:cd:cb:
                    fc:bc:5c:61:70:c7:69:b3:32:6c:b1:c7:62:56:dd:
                    c2:89:4c:8e:c8:73:f1:b6:c0:1c:07:97:fe:69:13:
                    cb:c0:67:fc:f6:f7:29:3b:a1:06:b1:79:00:ba:08:
                    a7:b0:44:4e:58:ab:df:72:2e:ec:7a:15:96:35:58:
                    cb:5e:29:9a:93:7d:ad:d9:7b:e7:9e:c1:62:0d:81:
                    38:6d:a8:a9:73:d0:d8:65:09:20:d8:b2:3c:8e:44:
                    ea:e7:06:02:7c:c0:18:29:24:a2:4c:fa:44:e4:08:
                    2b:f1:3c:13:51:87:d5:e9:97:5e:f5:76:83:48:6f:
                    42:ef:0c:9c:d2:7a:7e:21:28:75:35:a6:80:30:3a:
                    4d:cc:03:a7:12:1f:9c:97:43:c1:c3:c5:d5:3d:f4:
                    09:80:37:e9:3d:50:39:12:05:75:c0:c1:a0:d1:11:
                    1b:f9:74:fc:d6:3e:66:69:dc:c5:7e:10:d4:b6:9e:
                    7a:26:38:d4:e2:8f:cd:07:97:aa:72:23:80:0b:f4:
                    1a:b2:82:b8:66:f6:c0:68:04:6e:93:fe:d6:fc:7c:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C2:82:F3:39:6F:6F:5B:80:11:F6:84:8C:F1:22:AB:44:34:84:A4
            X509v3 Authority Key Identifier:
                keyid:4E:C2:EB:EE:F1:D4:1C:39:6D:96:A3:AC:58:41:4E:9E:82:28:51:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/4EC2EBEEF1D41C396D96A3AC58414E9E8228517B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.proxy-arp.network/repo/bgp43-u21/1/AS40419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:fc07::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:a6:a2:2b:a8:b2:35:a8:85:c6:16:6f:66:bc:4a:ed:3f:
         d0:b0:9f:d4:f0:05:4a:9d:1f:e3:81:e9:8c:40:17:ab:8c:ab:
         78:c7:40:86:3a:e2:ec:3a:f3:5f:3b:da:f9:a4:65:8d:5b:d7:
         6b:18:12:86:5f:25:9d:ac:67:4a:13:f4:9c:a4:96:53:08:01:
         20:c9:98:7e:c7:3c:26:ed:64:bb:33:fd:6d:d4:fa:b0:ad:f1:
         af:2f:1e:27:e8:31:78:6b:4f:5c:ef:0f:95:0b:6c:21:82:d3:
         68:d7:ef:b4:28:06:3f:31:bf:03:0f:01:a8:8c:1b:ec:3a:93:
         47:c4:74:01:fd:d5:64:c8:9a:f7:b0:38:6d:e1:c8:2c:63:68:
         51:74:50:26:45:26:37:6a:3b:2b:23:7f:3d:8c:dc:a4:4b:d3:
         7a:cb:fa:0f:e9:e3:7e:15:83:10:2c:c5:13:a8:87:7a:29:a2:
         f5:a7:fc:15:ab:af:c2:3d:36:bd:38:4b:2b:ea:e0:fa:66:42:
         45:a3:48:28:34:ed:e0:86:df:5b:5d:c3:c2:7f:16:99:60:28:
         95:2a:80:85:d1:ce:33:eb:7f:4f:b0:dd:be:69:10:2d:63:ab:
         2e:bf:60:74:18:e6:76:d7:0a:7f:d8:7b:a1:15:24:aa:95:ca:
         5a:4f:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----