Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218939.roa
File:                     AS218939.roa (raw, json)
Hash identifier:          EC0xYYkGm53A9viboE84OtBgM4JIKW3EMoeS24A+KUo=
Subject key identifier:   80:52:6C:31:D7:BB:C3:8F:64:A4:BC:6C:F3:18:27:73:CE:88:19:FF
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       25395D256F8CE9F367C152D45716B6900A3DB606
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS218939.roa
Signing time:             Thu 05 Nov 2026 12:09:44 +0000
ROA not before:           Thu 05 Nov 2026 12:04:44 +0000
ROA not after:            Thu 04 Nov 2027 12:09:44 +0000
asID:                     218939
IP address blocks:        2a0f:6283:3000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:39:5d:25:6f:8c:e9:f3:67:c1:52:d4:57:16:b6:90:0a:3d:b6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Nov  5 12:04:44 2026 GMT
            Not After : Nov  4 12:09:44 2027 GMT
        Subject: CN=80526C31D7BBC38F64A4BC6CF3182773CE8819FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:f3:f8:3a:1e:a6:57:4f:3c:d7:6c:1e:ea:
                    5e:ce:ce:0f:b4:01:52:02:24:a0:fb:e1:58:0e:5c:
                    b4:bb:47:4b:d0:9e:a5:30:e6:09:9f:cf:3e:8e:97:
                    9c:3c:1c:c6:ca:fe:08:30:e0:fb:ac:68:f9:ee:49:
                    fd:3f:f8:0a:c5:51:e1:8a:c2:4b:d3:7a:35:aa:97:
                    12:25:4c:27:39:48:15:80:e2:4e:e3:4c:a5:e9:ab:
                    ea:4c:5e:ff:76:c6:80:ed:40:e8:6f:e2:01:91:eb:
                    89:c2:a9:a7:0a:0c:54:8e:1d:2b:ac:9b:07:1d:d2:
                    7e:cc:9f:3a:6f:d0:05:d2:8e:6e:54:de:f9:80:79:
                    b8:ba:0c:26:d8:59:13:ec:36:03:60:a4:57:a5:c0:
                    70:f1:e9:82:df:93:a1:69:df:fb:c8:50:c4:a2:64:
                    04:f8:24:60:03:91:5c:33:e8:21:80:1b:f6:71:3b:
                    03:f2:54:4a:df:fc:4d:a8:95:a5:48:9a:15:6a:73:
                    df:00:2b:6e:27:b2:1d:f7:03:a7:b0:01:e7:8c:56:
                    09:ee:ce:72:8e:9a:16:ae:57:c1:ad:06:2b:0e:03:
                    df:06:06:46:55:cd:df:6d:04:c2:97:68:cf:75:ea:
                    cb:dc:f4:20:82:b7:eb:b8:7b:7b:82:0d:85:69:46:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:6C:31:D7:BB:C3:8F:64:A4:BC:6C:F3:18:27:73:CE:88:19:FF
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6283:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:5e:73:3e:22:4c:6b:d5:4d:6c:6f:93:cd:c6:9f:13:03:
         ae:a8:13:42:25:73:12:d0:d2:02:a4:ce:d9:1f:a6:dc:53:67:
         4a:d8:39:76:9c:c7:de:59:d5:1e:a9:8d:10:a6:3e:aa:f3:d7:
         10:d5:c3:4c:da:f5:2d:e2:b3:4d:61:a8:e3:f7:f8:78:22:26:
         7d:c6:78:38:a7:b1:fe:a1:e8:1e:5d:c1:0c:91:9e:f2:06:0d:
         f4:d8:64:3c:25:c6:2a:00:f2:ff:03:0b:01:b4:e6:53:b4:bb:
         f7:5c:5e:80:78:9c:53:52:b8:7d:77:ee:06:92:7a:b8:78:4e:
         99:cc:9d:da:c9:d2:dd:70:00:e9:86:60:ba:ac:f3:39:b5:ab:
         40:8f:1c:95:a9:22:06:0d:b6:1f:b1:89:3b:0f:8a:2f:42:8f:
         f2:23:54:5f:f0:54:e0:b0:90:e3:39:5a:1c:9e:64:1f:3e:0d:
         87:fc:d3:3f:ef:32:ee:36:64:f8:e9:f2:a4:7e:99:5b:fb:34:
         e2:70:81:c4:e4:f1:0e:39:40:21:a9:c3:d3:ad:f9:07:20:ff:
         fd:c0:81:4b:be:96:dc:dd:e0:26:fd:09:e4:d8:92:01:ee:8f:
         9f:f0:f2:5d:78:e4:63:a1:b4:f6:a1:11:d2:2a:cb:af:d3:e5:
         d7:ce:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----