Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218285.roa
File:                     AS218285.roa (raw, json)
Hash identifier:          EL37B5+nsKPt0a1k6Du+dO3pToWs/BkyZYtp1qpHVZY=
Subject key identifier:   28:47:D8:77:46:1B:00:5C:9F:7C:2B:BD:FA:8E:36:0C:CF:B9:96:D5
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       62BCCE138FBC73177BCF597D2E737FB443273406
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS218285.roa
Signing time:             Sat 31 Oct 2026 13:48:44 +0000
ROA not before:           Sat 31 Oct 2026 13:43:44 +0000
ROA not after:            Sat 30 Oct 2027 13:48:44 +0000
asID:                     218285
IP address blocks:        2a0f:6280:2300::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bc:ce:13:8f:bc:73:17:7b:cf:59:7d:2e:73:7f:b4:43:27:34:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 31 13:43:44 2026 GMT
            Not After : Oct 30 13:48:44 2027 GMT
        Subject: CN=2847D877461B005C9F7C2BBDFA8E360CCFB996D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:e2:56:21:22:26:4c:16:f8:a7:a2:ea:b3:
                    17:9c:fc:0d:38:5d:97:0d:d4:41:02:e0:a7:f4:7a:
                    4b:1b:3e:42:0b:96:d0:04:47:b1:fe:72:3d:53:a8:
                    17:13:88:cc:95:d1:2b:e9:9c:ea:f6:e2:48:03:d2:
                    4b:0a:ed:56:70:44:b8:07:32:af:23:49:ea:44:e7:
                    83:96:7c:19:e8:9a:78:49:f9:04:40:de:7b:37:62:
                    f3:51:0e:48:f9:cb:6c:a6:33:f2:9b:7a:0b:2f:ca:
                    88:98:d2:0c:d7:0b:71:c4:13:c6:da:f5:31:08:aa:
                    96:9d:fe:8e:06:37:2d:35:ea:a7:50:24:b8:5a:dd:
                    76:fc:3f:d6:9b:26:56:61:3c:c4:a2:d8:c5:08:6c:
                    cd:82:59:1c:c0:aa:a8:fc:5a:4c:e2:26:35:cf:cd:
                    c7:64:65:a4:89:5a:3d:91:f3:c4:0f:85:95:4d:9b:
                    59:fa:39:6e:97:5c:e8:6a:7e:81:08:32:f7:69:c3:
                    9b:06:43:a3:f0:f1:65:3f:17:e5:78:16:a9:5a:3f:
                    ab:6e:88:49:3c:4a:50:70:ce:c8:58:8c:b6:4c:4c:
                    a0:7d:e1:20:de:c2:70:c2:6d:2d:77:11:7f:43:fd:
                    af:16:d1:22:22:b1:b9:d1:38:a6:7e:81:59:31:5e:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:D8:77:46:1B:00:5C:9F:7C:2B:BD:FA:8E:36:0C:CF:B9:96:D5
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218285.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:de:63:2e:3c:ae:eb:b7:dc:a4:9b:8d:83:fb:9d:9a:0f:81:
         ba:e0:eb:c9:a7:af:cb:a1:7b:cf:fe:04:53:4e:ac:3d:f1:b5:
         b5:23:e7:88:cb:03:c9:0f:b6:e5:7a:f2:d2:f6:f0:77:f6:08:
         6e:ba:7f:0d:be:8a:c0:71:71:08:53:59:74:c8:08:53:f2:f9:
         0b:2d:14:f9:3c:34:82:08:40:ba:05:cd:04:e9:88:c6:be:00:
         38:23:b6:62:15:5c:68:9e:84:1b:ad:a6:2f:97:af:be:ff:a4:
         fc:30:3d:e4:42:fd:8f:26:36:cf:bd:e5:c4:6f:db:e4:55:9a:
         d6:3d:87:a0:b2:c8:05:57:5d:4d:b2:f3:63:e0:38:08:5c:c3:
         66:81:5a:4a:5a:b0:49:31:55:70:97:89:87:51:fe:96:f1:c7:
         f8:8e:a7:ef:c6:32:51:a7:36:0b:3f:37:97:c7:a2:88:62:74:
         f8:0c:38:f5:29:7f:7f:0b:55:ec:5d:8e:9b:62:72:5a:1c:d6:
         ed:40:5b:32:8b:47:be:80:c2:0c:96:f0:a5:74:86:9e:df:0e:
         4a:cf:27:57:40:fb:f7:6e:6f:19:d9:69:9a:e4:3b:fc:71:5c:
         a2:91:46:e7:8f:22:99:d6:34:f0:20:20:10:f3:68:ee:e0:fb:
         af:33:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----