Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS215147.roa
File:                     AS215147.roa (raw, json)
Hash identifier:          kJIdTRFUFBhxkiBTa8GVUF8sTG5DD0Za1bitpI1fyWQ=
Subject key identifier:   84:1F:AD:59:D0:AE:26:4F:3C:D7:7C:B0:1E:54:C3:41:B9:05:05:C9
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       4F9913F9D6763720BB2D29C09430A47C2E784426
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS215147.roa
Signing time:             Thu 29 Oct 2026 11:37:27 +0000
ROA not before:           Thu 29 Oct 2026 11:32:27 +0000
ROA not after:            Thu 28 Oct 2027 11:37:27 +0000
asID:                     215147
IP address blocks:        2a0f:6280:1602::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:99:13:f9:d6:76:37:20:bb:2d:29:c0:94:30:a4:7c:2e:78:44:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 29 11:32:27 2026 GMT
            Not After : Oct 28 11:37:27 2027 GMT
        Subject: CN=841FAD59D0AE264F3CD77CB01E54C341B90505C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f2:72:f2:a8:85:a9:29:08:1b:0c:fe:30:d1:
                    a3:83:d7:fe:3f:69:75:38:7a:f3:3a:03:96:ff:f9:
                    02:12:7a:30:7b:15:ab:9e:92:17:53:0d:b4:4f:2a:
                    8e:4a:c6:57:c7:48:a1:ec:ea:c2:48:a4:1c:a5:67:
                    de:a2:91:50:f5:69:2c:81:f8:ea:c5:94:02:82:e3:
                    e9:c8:62:1a:28:e5:5d:02:35:a2:3d:06:2c:83:e6:
                    a0:43:f9:57:75:83:58:ca:e9:68:74:0c:ce:7c:9c:
                    49:5e:90:3b:83:1a:f5:e7:a6:f9:2a:5e:91:47:1e:
                    57:46:9a:f1:68:da:aa:9b:17:f7:1f:a4:04:4c:6f:
                    ad:26:75:4b:a9:a7:29:e9:e6:26:b7:11:cc:82:ac:
                    78:a5:46:13:17:80:50:82:aa:93:1e:08:03:73:bd:
                    f7:57:17:a8:e2:a8:83:f5:f9:62:97:f4:b6:c6:70:
                    07:1d:43:ca:62:c2:4e:4f:84:1e:da:9b:a5:7b:25:
                    33:f9:90:c2:1d:0f:3a:ec:04:a4:26:13:b8:a8:e3:
                    56:34:bb:a5:88:db:f7:7a:06:a9:c4:dc:0f:41:80:
                    66:61:01:2b:72:19:aa:4e:00:14:d0:15:b8:c7:ad:
                    24:e0:03:66:eb:44:4f:dc:e1:fc:c0:cd:e6:b0:a9:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:AD:59:D0:AE:26:4F:3C:D7:7C:B0:1E:54:C3:41:B9:05:05:C9
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215147.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1602::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:6b:71:f0:51:40:66:f7:ff:c6:e3:a9:94:56:4f:7e:3e:
         be:4d:8b:01:b4:1b:32:a6:d9:62:77:c3:ee:e0:97:95:24:eb:
         46:32:1e:2f:82:41:28:d4:fd:0e:55:48:70:4b:c7:6d:8c:32:
         6c:70:3c:5a:cf:72:32:de:1c:92:ec:2b:56:b0:83:69:e2:20:
         31:7b:79:dd:c9:3a:c4:58:9f:3d:d0:59:73:cb:29:6b:51:85:
         c6:1d:fb:9e:af:91:17:ca:8c:8c:7b:5d:fb:a7:3c:fc:9e:31:
         57:dc:6f:95:a7:8f:87:98:54:37:c8:52:ec:70:b3:42:5b:e2:
         26:33:d9:04:c1:3f:f5:6a:c6:be:22:76:81:ef:07:03:f1:5c:
         db:36:f5:09:bd:e6:b2:49:07:15:ab:49:2d:5c:22:6a:7d:6d:
         f6:07:18:02:d9:c0:ca:3e:24:cc:7a:72:16:30:81:19:e9:36:
         bc:2b:ba:30:76:1c:0c:d8:1b:2f:68:ea:c3:e4:2d:c7:7c:ab:
         ab:06:94:a1:2a:be:a1:08:e8:ea:61:e5:47:14:db:8e:47:6c:
         57:b4:12:26:cd:1b:ef:e3:a0:ac:cc:08:3f:10:d5:73:24:87:
         7e:fd:f8:3b:88:0f:51:ba:b3:b0:ff:eb:fc:83:8e:dc:22:3e:
         10:4d:8e:c4
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUT5kT+dZ2NyC7LSnAlDCkfC54RCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjEwMjkxMTMyMjdaFw0yNzEwMjgxMTM3MjdaMDMxMTAvBgNV
BAMTKDg0MUZBRDU5RDBBRTI2NEYzQ0Q3N0NCMDFFNTRDMzQxQjkwNTA1QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM8nLyqIWpKQgbDP4w0aOD1/4/
aXU4evM6A5b/+QISejB7FauekhdTDbRPKo5KxlfHSKHs6sJIpBylZ96ikVD1aSyB
+OrFlAKC4+nIYhoo5V0CNaI9BiyD5qBD+Vd1g1jK6Wh0DM58nElekDuDGvXnpvkq
XpFHHldGmvFo2qqbF/cfpARMb60mdUuppynp5ia3EcyCrHilRhMXgFCCqpMeCANz
vfdXF6jiqIP1+WKX9LbGcAcdQ8piwk5PhB7am6V7JTP5kMIdDzrsBKQmE7io41Y0
u6WI2/d6BqnE3A9BgGZhAStyGapOABTQFbjHrSTgA2brRE/c4fzAzeawqfM/AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUhB+tWdCuJk8813ywHlTDQbkFBckwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUxNDcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
D2KAFgIwDQYJKoZIhvcNAQELBQADggEBAAtJa3HwUUBm9//G46mUVk9+Pr5NiwG0
GzKm2WJ3w+7gl5Uk60YyHi+CQSjU/Q5VSHBLx22MMmxwPFrPcjLeHJLsK1awg2ni
IDF7ed3JOsRYnz3QWXPLKWtRhcYd+56vkRfKjIx7XfunPPyeMVfcb5Wnj4eYVDfI
Uuxws0Jb4iYz2QTBP/Vqxr4idoHvBwPxXNs29Qm95rJJBxWrSS1cImp9bfYHGALZ
wMo+JMx6chYwgRnpNrwrujB2HAzYGy9o6sPkLcd8q6sGlKEqvqEI6Oph5UcU245H
bFe0EibNG+/joKzMCD8Q1XMkh379+DuID1G6s7D/6/yDjtwiPhBNjsQ=
-----END CERTIFICATE-----