Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214040.roa
File:                     AS214040.roa (raw, json)
Hash identifier:          WEnbHFcS+2114IypBj13nOZNe4+ehIh5Cppn5jixs8c=
Subject key identifier:   73:55:63:EC:DE:A6:E5:DB:7E:74:89:B6:AF:03:1C:C7:4F:F4:CD:20
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       1AE7266B274348A07AC691038865BBEB101D54C0
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
Signing time:             Mon 02 Nov 2026 05:21:45 +0000
ROA not before:           Mon 02 Nov 2026 05:16:45 +0000
ROA not after:            Mon 01 Nov 2027 05:21:45 +0000
asID:                     214040
IP address blocks:        2a0f:6280:8000::/36 maxlen: 48
                          2a0f:6280:9000::/36 maxlen: 48
                          2a0f:6280:a000::/36 maxlen: 48
                          2a0f:6280:d000::/36 maxlen: 48
                          2a0f:6280:e000::/36 maxlen: 48
                          2a0f:6282:1000::/36 maxlen: 48
                          2a0f:6282:a000::/36 maxlen: 36
                          2a0f:6282:e000::/36 maxlen: 36
                          2a0f:6283:2000::/36 maxlen: 36
                          2a0f:6283:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:26:6b:27:43:48:a0:7a:c6:91:03:88:65:bb:eb:10:1d:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov  2 05:16:45 2026 GMT
            Not After : Nov  1 05:21:45 2027 GMT
        Subject: CN=735563ECDEA6E5DB7E7489B6AF031CC74FF4CD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:16:3a:d5:39:9c:c1:61:ba:0c:11:b8:61:
                    e9:0f:39:0d:10:15:e6:f1:f7:df:6b:ff:fc:63:04:
                    db:20:c5:30:69:cf:93:88:c0:06:ca:67:0f:7f:bf:
                    8b:42:3a:fb:eb:ac:c3:5b:37:1f:86:f1:b5:78:6d:
                    6d:7d:c1:09:4b:d0:89:23:c3:21:a2:39:70:31:c7:
                    f0:92:ac:1c:ec:78:5e:0c:20:ef:a5:a4:10:54:7d:
                    69:7d:33:db:91:36:1e:41:d8:ed:ed:77:0b:ed:0b:
                    bd:8e:b8:d1:60:fb:cf:e6:de:ad:26:6a:3e:d8:5e:
                    d8:7c:3f:4e:0e:9b:22:94:a6:09:bf:5d:cb:53:b4:
                    19:fb:e6:be:6f:f4:78:7f:87:89:f8:6f:cb:90:0e:
                    ac:c9:29:21:b1:0d:21:a7:b4:01:80:32:b3:bb:57:
                    21:1d:b4:83:eb:e2:c7:1c:d1:53:e7:4a:be:79:69:
                    17:2b:b6:f3:10:93:51:68:fa:d5:a8:d3:79:39:63:
                    31:c5:f5:59:3f:ba:09:6d:01:f1:85:af:5e:8d:f3:
                    ef:ce:65:10:db:eb:59:a9:6e:1e:8d:8d:fe:de:e5:
                    90:10:6d:79:eb:c1:a4:7d:83:0a:cd:0c:18:5e:77:
                    80:dd:8c:19:24:cb:c5:7c:0f:af:78:0d:99:c2:8c:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:55:63:EC:DE:A6:E5:DB:7E:74:89:B6:AF:03:1C:C7:4F:F4:CD:20
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:8000::-2a0f:6280:afff:ffff:ffff:ffff:ffff:ffff
                  2a0f:6280:d000::-2a0f:6280:efff:ffff:ffff:ffff:ffff:ffff
                  2a0f:6282:1000::/36
                  2a0f:6282:a000::/36
                  2a0f:6282:e000::/36
                  2a0f:6283:2000::/36
                  2a0f:6283:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:25:b6:a5:bf:96:2c:41:59:d5:f2:eb:f3:7b:09:32:f1:
         14:91:73:65:55:72:5f:35:14:42:85:7d:a9:37:f2:32:bb:6c:
         41:87:ca:63:16:23:40:32:3a:76:90:dd:4e:23:8b:b5:1d:2c:
         01:f5:dd:3c:5a:25:43:8d:24:f8:b7:66:1d:53:15:c8:1e:25:
         08:e2:0f:8a:01:10:2e:fe:02:fe:e7:8f:95:f5:36:b6:ca:a8:
         99:98:16:38:e0:1c:42:8b:eb:1c:c0:c1:ca:61:46:ff:90:ef:
         8e:2b:f6:7d:d0:d2:18:bc:02:db:9c:f1:50:a3:51:2e:fb:46:
         57:2d:92:6d:81:b5:df:74:13:6f:67:cf:c9:22:4e:12:25:d4:
         29:e5:f1:0f:07:b9:a5:c5:bc:58:27:84:f8:ba:72:4b:3e:c6:
         85:a5:97:a0:d9:69:48:13:19:55:ab:a0:e1:5c:ec:f4:64:d6:
         bd:51:49:2d:55:57:c2:47:80:43:cf:42:4f:ff:02:e6:6a:f7:
         d7:5f:cf:69:64:0f:20:b5:da:ac:5f:f3:b9:e1:51:7b:53:65:
         5a:fa:da:8d:d4:e6:03:13:a3:5d:3f:1e:f1:25:10:ec:8e:53:
         5c:8e:6d:22:ed:42:d2:6b:53:1f:a7:d9:46:20:87:13:27:06:
         44:89:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----