Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS202358.roa
File:                     AS202358.roa (raw, json)
Hash identifier:          9ffv3KulF1dz4mGGVf83ftz4MMl+ZMSGJUcoUmyqqJk=
Subject key identifier:   7A:75:69:89:42:58:C6:BC:1A:48:A5:41:EB:CE:AE:76:5D:B6:5D:8E
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       20C278574CB53E174B82D2A74C31AEB54964FF24
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS202358.roa
Signing time:             Sun 18 Oct 2026 17:30:43 +0000
ROA not before:           Sun 18 Oct 2026 17:25:43 +0000
ROA not after:            Sun 17 Oct 2027 17:30:43 +0000
asID:                     202358
IP address blocks:        2a0f:6280:1660::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c2:78:57:4c:b5:3e:17:4b:82:d2:a7:4c:31:ae:b5:49:64:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 18 17:25:43 2026 GMT
            Not After : Oct 17 17:30:43 2027 GMT
        Subject: CN=7A7569894258C6BC1A48A541EBCEAE765DB65D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:b5:48:09:86:b4:5c:fd:d7:e0:c9:50:04:
                    0a:28:5c:8f:98:a8:6a:43:eb:38:80:11:d1:55:33:
                    66:72:d4:dd:e9:39:23:98:62:53:d8:79:7d:78:ff:
                    77:d2:64:98:81:c2:af:76:34:9f:03:40:d6:a9:ef:
                    9a:f0:6d:8b:89:b3:15:fe:f3:a6:4a:b0:a3:1a:e3:
                    5e:bd:58:62:a7:9a:33:3b:e0:ff:0d:d0:b4:0c:8a:
                    0a:68:a4:35:49:ab:3f:f8:e7:3a:bb:d2:7d:a6:ce:
                    fb:88:4f:51:12:e3:c4:eb:0e:77:46:af:b1:c1:ea:
                    cc:e3:44:41:34:64:d8:4e:b2:66:86:61:91:45:f4:
                    48:fe:bd:91:09:4a:13:3b:6d:98:e5:70:d9:90:42:
                    02:8d:4f:ac:61:8e:39:1d:05:e6:25:c7:d0:2a:9d:
                    45:8e:98:6b:61:c9:80:bb:89:76:18:a3:8a:3e:90:
                    1b:3c:dc:7e:41:a4:23:ce:3a:38:5c:c2:cc:58:4f:
                    2a:db:9c:4c:92:7f:cc:0c:6a:84:e5:ce:32:81:fa:
                    55:c2:53:85:ef:17:23:c6:56:26:5d:0a:e8:cd:30:
                    48:83:87:26:5d:7c:21:64:95:94:55:59:dc:3c:a9:
                    63:d9:39:49:d3:8d:fb:af:2a:0f:d9:4b:71:33:b1:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:69:89:42:58:C6:BC:1A:48:A5:41:EB:CE:AE:76:5D:B6:5D:8E
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1660::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:03:3b:e6:d6:0e:5b:ec:5b:90:e5:18:b4:43:f5:46:6d:
         da:e2:c3:d1:e7:4c:a8:20:ac:0e:0e:94:ad:5c:6e:3c:a6:8e:
         ba:9e:8e:35:38:88:f3:31:8a:24:2f:6e:4e:ba:b8:04:e3:2e:
         ae:e6:12:95:04:fe:ce:9c:84:42:d5:e3:38:74:8d:3c:b1:31:
         df:3c:3c:d2:cb:c6:32:77:d9:6c:92:32:f2:f1:37:1c:17:e0:
         ba:33:4c:63:d8:e8:0a:22:9b:e1:41:87:1b:38:56:4e:c3:44:
         68:f0:17:26:29:52:df:87:d6:44:6f:e6:33:e3:e7:61:a3:40:
         7c:72:85:b8:60:b4:5d:34:f0:39:89:31:49:a7:22:41:10:37:
         52:e8:9e:15:6c:7f:74:e1:ba:22:9e:37:8c:8f:d3:81:c2:42:
         3f:fa:65:87:54:99:8c:ad:40:69:0d:4c:d2:45:70:62:10:62:
         f2:b9:c4:dc:59:ff:9e:f5:71:8f:b7:d4:e4:ec:f5:5e:61:c6:
         51:00:3c:a1:71:d7:e6:09:7d:5d:b8:fb:6e:99:47:80:f4:23:
         c9:5e:d8:b6:09:a1:6a:5c:55:e4:74:c2:f7:6b:fe:e8:37:b6:
         ef:31:72:b0:5f:54:21:a4:0c:01:af:3d:2a:2b:33:25:33:10:
         54:7b:9e:9e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUIMJ4V0y1PhdLgtKnTDGutUlk/yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjEwMTgxNzI1NDNaFw0yNzEwMTcxNzMwNDNaMDMxMTAvBgNV
BAMTKDdBNzU2OTg5NDI1OEM2QkMxQTQ4QTU0MUVCQ0VBRTc2NURCNjVEOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjrVICYa0XP3X4MlQBAooXI+Y
qGpD6ziAEdFVM2Zy1N3pOSOYYlPYeX14/3fSZJiBwq92NJ8DQNap75rwbYuJsxX+
86ZKsKMa4169WGKnmjM74P8N0LQMigpopDVJqz/45zq70n2mzvuIT1ES48TrDndG
r7HB6szjREE0ZNhOsmaGYZFF9Ej+vZEJShM7bZjlcNmQQgKNT6xhjjkdBeYlx9Aq
nUWOmGthyYC7iXYYo4o+kBs83H5BpCPOOjhcwsxYTyrbnEySf8wMaoTlzjKB+lXC
U4XvFyPGViZdCujNMEiDhyZdfCFklZRVWdw8qWPZOUnTjfuvKg/ZS3EzsSzTAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUenVpiUJYxrwaSKVB686udl22XY4wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDIzNTgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq
D2KAFmAwDQYJKoZIhvcNAQELBQADggEBAE+TAzvm1g5b7FuQ5Ri0Q/VGbdriw9Hn
TKggrA4OlK1cbjymjrqejjU4iPMxiiQvbk66uATjLq7mEpUE/s6chELV4zh0jTyx
Md88PNLLxjJ32WySMvLxNxwX4LozTGPY6Aoim+FBhxs4Vk7DRGjwFyYpUt+H1kRv
5jPj52GjQHxyhbhgtF008DmJMUmnIkEQN1LonhVsf3ThuiKeN4yP04HCQj/6ZYdU
mYytQGkNTNJFcGIQYvK5xNxZ/571cY+31OTs9V5hxlEAPKFx1+YJfV24+26ZR4D0
I8le2LYJoWpcVeR0wvdr/ug3tu8xcrBfVCGkDAGvPSorMyUzEFR7np4=
-----END CERTIFICATE-----