Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218495.roa
File:                     AS218495.roa (raw, json)
Hash identifier:          4sPGalIiaJfJwrglBU3wk+KVb3LzETU5RTK4djMV63c=
Subject key identifier:   7D:D6:B6:54:85:70:7C:13:E0:AE:E1:AF:F1:E5:92:A7:24:30:96:5B
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       5702DED4D70F0C6215723223A71E85E532D5B56C
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS218495.roa
Signing time:             Thu 29 Oct 2026 19:12:47 +0000
ROA not before:           Thu 29 Oct 2026 19:07:47 +0000
ROA not after:            Thu 28 Oct 2027 19:12:47 +0000
asID:                     218495
IP address blocks:        2a0f:6280:1089::/48 maxlen: 48
                          2a0f:6280:10c0::/42 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:de:d4:d7:0f:0c:62:15:72:32:23:a7:1e:85:e5:32:d5:b5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 29 19:07:47 2026 GMT
            Not After : Oct 28 19:12:47 2027 GMT
        Subject: CN=7DD6B65485707C13E0AEE1AFF1E592A72430965B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:ed:9f:f2:8f:29:dc:1d:6e:fc:30:b4:45:
                    1d:4c:83:10:28:14:76:c5:4f:65:c3:2c:ec:af:11:
                    54:3e:f8:29:4a:b2:00:d2:12:84:45:e7:ad:7c:68:
                    4a:87:e8:92:97:2a:eb:b8:25:b2:48:c3:de:63:26:
                    13:ba:1d:2f:e9:a2:f3:4b:4b:2d:8e:59:60:13:f1:
                    4e:22:c3:36:5b:34:70:86:51:e6:6c:ee:b1:b9:c6:
                    6a:0a:f2:9e:4c:96:0a:5a:8c:b6:0b:cc:ed:8c:59:
                    07:65:0b:24:c5:9d:fc:92:d6:d4:8a:6a:e8:ac:09:
                    b3:9b:d4:3b:7a:ef:16:08:fd:cf:7d:94:37:0e:68:
                    84:27:37:41:b2:cb:17:3a:1c:4b:a8:a6:85:18:23:
                    be:34:a9:45:b7:cd:8f:a8:21:82:f0:fb:ee:03:3e:
                    67:38:41:8e:3d:3f:ce:48:17:c1:f6:10:55:fb:37:
                    c3:83:e6:23:1f:71:81:7e:3d:07:d1:99:fc:16:af:
                    b6:c0:10:31:99:c2:8c:69:69:87:a1:e9:4d:10:a9:
                    6a:1a:ee:14:95:92:24:d2:83:0a:94:90:1e:6d:e3:
                    d0:14:b3:8b:47:55:ba:fb:e2:32:c5:16:19:4d:28:
                    9a:56:49:68:42:dd:86:7a:11:a6:d7:c2:40:51:dd:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:B6:54:85:70:7C:13:E0:AE:E1:AF:F1:E5:92:A7:24:30:96:5B
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218495.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1089::/48
                  2a0f:6280:10c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:92:b0:34:11:97:52:cc:33:61:16:e1:6c:8c:15:9b:82:
         a4:50:99:9c:b5:8c:f9:7c:5b:96:b8:59:13:fd:59:d6:33:6f:
         e3:dc:7e:eb:95:d7:91:61:09:2f:57:3e:47:45:fe:31:1d:26:
         5a:a9:fa:24:c0:49:c3:66:50:99:b6:2b:d4:d9:3d:fa:02:84:
         3d:30:26:04:2e:80:21:e7:69:ff:2e:36:cd:87:0f:bf:2a:98:
         30:28:40:00:92:80:cd:1b:20:95:5a:72:3e:f8:f4:e2:03:75:
         a1:60:92:50:14:f6:2c:dd:17:a8:cc:87:28:3b:84:30:50:90:
         9b:68:7e:4b:ba:bc:96:03:72:02:64:1b:c3:79:53:ba:91:cc:
         52:42:5c:c6:e8:12:86:12:64:69:51:43:80:cd:c4:51:5b:7d:
         a1:ec:05:bb:62:c8:cd:92:5e:33:ff:91:0d:ee:01:95:7f:25:
         c8:de:55:bc:df:a3:c1:0c:30:3a:2b:34:ae:5d:a8:b2:44:a6:
         4a:d8:0a:8d:ac:a8:0e:1e:74:19:95:92:b1:4f:42:38:51:f7:
         b3:0e:58:7c:72:cf:d4:6b:00:dd:7e:bc:a7:b6:98:36:c3:27:
         79:be:98:7e:4e:70:c0:1c:b4:29:f3:5a:44:1f:da:d8:cb:2f:
         3c:66:67:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----