Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218804.roa
File:                     AS218804.roa (raw, json)
Hash identifier:          DYbkGCQUl1blvjA0NwrwNlDiRIExkzlu+74Jd3fHp1g=
Subject key identifier:   46:0D:8B:D7:BE:2B:5D:2B:4E:44:4D:67:60:1F:C5:47:4C:FC:9B:96
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       2A00B0CBA37587456142819FB817A966AFB43D5B
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS218804.roa
Signing time:             Sun 11 Oct 2026 00:37:40 +0000
ROA not before:           Sun 11 Oct 2026 00:32:40 +0000
ROA not after:            Sun 10 Oct 2027 00:37:40 +0000
asID:                     218804
IP address blocks:        2a0f:6280:1084::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:00:b0:cb:a3:75:87:45:61:42:81:9f:b8:17:a9:66:af:b4:3d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 11 00:32:40 2026 GMT
            Not After : Oct 10 00:37:40 2027 GMT
        Subject: CN=460D8BD7BE2B5D2B4E444D67601FC5474CFC9B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:51:0b:9d:02:d1:61:89:25:16:f6:21:3c:
                    4a:93:1d:4f:f8:17:c5:c9:dd:23:2d:cc:3d:63:ae:
                    36:86:fd:cd:9f:9a:2d:c0:2c:a6:f2:ae:20:2f:f6:
                    ba:e4:c8:66:33:5f:e4:4a:d2:c2:5a:c1:f1:56:94:
                    9c:c9:d6:48:0d:2f:fd:61:8d:ac:fa:26:63:a1:84:
                    55:09:44:d5:35:c5:1c:ab:a9:87:ae:f5:87:a4:d8:
                    0f:01:64:d0:99:94:2e:89:91:66:1e:c1:70:3b:7b:
                    83:7a:74:67:05:13:5c:20:be:5c:a1:95:66:a9:79:
                    4b:24:2b:1f:0c:b6:ad:23:47:a0:68:a9:f7:80:7e:
                    59:fa:93:c7:6d:a3:26:b0:99:27:3a:de:8e:23:1b:
                    a5:20:ff:7e:cb:11:55:27:0f:c8:18:3b:12:54:68:
                    66:a0:3f:9e:d0:3a:e2:f3:d6:19:ba:1f:63:d5:21:
                    59:42:c1:cc:80:1b:f1:62:24:e0:a3:90:1e:a4:86:
                    0b:40:fa:75:0d:07:ea:29:db:59:8e:1c:0e:88:48:
                    44:15:20:71:5a:10:73:22:b1:5f:f3:6a:50:9b:bf:
                    08:26:9b:4b:6a:ba:a2:c7:d5:ce:0d:ef:18:78:87:
                    6c:cd:f3:cd:40:8f:05:2a:56:83:f4:2b:91:09:66:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0D:8B:D7:BE:2B:5D:2B:4E:44:4D:67:60:1F:C5:47:4C:FC:9B:96
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218804.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1084::/46

    Signature Algorithm: sha256WithRSAEncryption
         29:98:71:6c:3a:fc:9b:00:63:33:43:12:ab:32:d9:a4:d8:6f:
         62:27:95:f3:9e:6f:7e:c8:d2:f6:c2:4f:48:56:27:70:9c:dc:
         da:a0:0d:9a:84:ba:a4:58:23:3a:2a:45:9c:52:02:1d:15:02:
         a0:0c:cc:2e:64:8e:fe:87:80:4d:9f:3b:7c:74:c8:44:05:e2:
         36:0b:db:bc:3a:83:a7:3e:c6:e0:d7:f8:c0:50:e4:66:95:99:
         54:7b:13:bf:34:d3:84:f9:3b:2d:97:7b:75:ba:4a:25:0f:39:
         0c:b2:7a:0a:a7:57:62:bb:a1:9d:ad:ef:a1:69:d8:5d:35:7f:
         b4:98:90:e5:59:8b:61:14:05:10:bf:bd:c5:de:1c:f5:c5:81:
         d2:39:f6:c8:10:b7:a1:67:36:b0:30:fb:da:7d:a3:5f:35:3a:
         60:b5:97:dc:29:05:ee:93:e7:09:2a:dd:d0:4b:af:eb:13:be:
         13:b7:00:cc:45:b6:51:36:58:8c:ba:83:30:97:45:10:f9:a7:
         f6:ad:cc:3b:0c:cc:f9:c1:2b:e6:03:82:87:dd:b5:74:0c:a5:
         2a:39:1b:74:2c:6b:6d:75:dc:da:29:41:45:06:76:70:07:13:
         42:3d:8d:39:7c:fd:29:2e:a5:bf:2d:d6:36:4e:fd:80:47:fc:
         4a:8f:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----