Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219418.roa
File:                     AS219418.roa (raw, json)
Hash identifier:          gsC+YYQjC0EHp9CrP/1qQexBNWjC6iwiMYCGatrxiRI=
Subject key identifier:   C0:F4:2E:55:B0:1F:55:90:AF:B6:03:62:1D:4B:57:99:F3:C7:82:26
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       6C2D1DBAA122E8C58B666B510CAA2AE98BB63910
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa
Signing time:             Sun 18 Oct 2026 17:27:27 +0000
ROA not before:           Sun 18 Oct 2026 17:22:27 +0000
ROA not after:            Sun 17 Oct 2027 17:27:27 +0000
asID:                     219418
IP address blocks:        2a0f:6280:1600::/48 maxlen: 48
                          2a0f:6280:1601::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2d:1d:ba:a1:22:e8:c5:8b:66:6b:51:0c:aa:2a:e9:8b:b6:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 18 17:22:27 2026 GMT
            Not After : Oct 17 17:27:27 2027 GMT
        Subject: CN=C0F42E55B01F5590AFB603621D4B5799F3C78226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:d4:e9:d1:19:10:e2:33:0a:2c:5d:59:18:
                    7c:42:75:41:45:7f:a4:98:43:50:70:8c:51:78:60:
                    9f:ba:12:37:86:9f:3b:59:5d:19:d4:b0:73:5c:ef:
                    b8:02:9b:b6:58:70:08:5c:a5:1a:6b:ed:d1:d0:aa:
                    29:3e:30:1f:1c:7c:ad:23:e2:29:eb:c4:7c:c7:60:
                    b2:62:3c:f0:c0:e5:e4:76:95:0f:aa:f3:aa:2b:7d:
                    5c:c4:41:0a:c5:35:87:c4:f1:44:07:e1:18:5b:01:
                    a5:fd:ae:17:52:d3:8d:c6:94:63:84:fc:5f:44:c7:
                    0a:6a:0e:14:1e:73:f7:80:c9:63:57:e8:25:f8:be:
                    c6:76:34:0e:fd:54:c5:7f:ac:b8:2d:83:1a:25:cd:
                    9b:05:b6:51:ec:ed:01:d3:b7:65:3b:20:26:fc:06:
                    ee:51:58:08:14:7b:ad:cd:1c:05:1f:06:81:0c:03:
                    35:82:2d:ec:d1:5a:ec:06:f0:a0:90:06:c3:58:15:
                    01:f4:17:c1:7e:28:fb:fb:df:0b:47:ee:d7:a4:8f:
                    f1:b1:d6:6b:5c:73:c3:f2:ef:91:33:cb:08:b7:fd:
                    50:5f:6e:ed:6b:94:00:7d:aa:ca:94:ac:76:26:75:
                    f1:f5:df:19:26:f5:a6:51:d8:33:a6:f9:e6:88:2c:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F4:2E:55:B0:1F:55:90:AF:B6:03:62:1D:4B:57:99:F3:C7:82:26
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219418.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1600::/47

    Signature Algorithm: sha256WithRSAEncryption
         78:28:cb:6e:16:d9:df:ff:cc:c6:de:9f:e1:20:d3:b4:3c:07:
         aa:75:03:15:82:4b:b5:7e:d1:bc:c8:49:94:9f:ed:cf:0e:12:
         83:a4:f1:31:87:c8:be:d4:2a:a2:8d:fd:6e:66:aa:4a:68:84:
         3c:0f:34:26:31:5b:da:06:7f:77:db:ff:73:a3:e1:7c:2e:5a:
         82:96:0c:81:67:31:95:95:37:3f:54:e6:0a:bb:87:91:c3:ce:
         d4:01:e2:13:19:dc:db:0e:bd:5f:0a:70:55:bf:8e:35:0c:2f:
         40:99:94:59:f3:2d:d9:f9:60:d0:a3:22:5a:db:7e:bc:a1:00:
         f2:a4:92:6c:7a:2e:7d:f0:be:5e:24:0b:9e:8c:ce:5a:57:5e:
         34:7f:0a:d3:b7:33:bf:78:48:fe:d9:db:b7:f9:c4:50:67:dd:
         7c:4d:20:81:ca:c8:17:17:e8:63:48:37:36:e4:7e:4a:0c:99:
         74:0c:d8:21:a7:f7:e9:48:7e:4b:e0:34:0e:64:63:e6:00:93:
         52:ff:75:22:f4:64:1d:cb:4d:a8:f8:4a:9e:42:cb:b0:b0:f7:
         03:40:80:86:c3:0b:bf:6f:3f:5f:de:f6:77:4d:5c:6e:70:e4:
         c9:b0:10:7f:ce:ea:32:cd:4b:52:5f:f3:49:04:6c:5a:86:44:
         fc:79:59:8c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUbC0duqEi6MWLZmtRDKoq6Yu2ORAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjEwMTgxNzIyMjdaFw0yNzEwMTcxNzI3MjdaMDMxMTAvBgNV
BAMTKEMwRjQyRTU1QjAxRjU1OTBBRkI2MDM2MjFENEI1Nzk5RjNDNzgyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKdTp0RkQ4jMKLF1ZGHxCdUFF
f6SYQ1BwjFF4YJ+6EjeGnztZXRnUsHNc77gCm7ZYcAhcpRpr7dHQqik+MB8cfK0j
4inrxHzHYLJiPPDA5eR2lQ+q86orfVzEQQrFNYfE8UQH4RhbAaX9rhdS043GlGOE
/F9ExwpqDhQec/eAyWNX6CX4vsZ2NA79VMV/rLgtgxolzZsFtlHs7QHTt2U7ICb8
Bu5RWAgUe63NHAUfBoEMAzWCLezRWuwG8KCQBsNYFQH0F8F+KPv73wtH7tekj/Gx
1mtcc8Py75Ezywi3/VBfbu1rlAB9qsqUrHYmdfH13xkm9aZR2DOm+eaILAUBAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUwPQuVbAfVZCvtgNiHUtXmfPHgiYwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEq
D2KAFgAwDQYJKoZIhvcNAQELBQADggEBAHgoy24W2d//zMben+Eg07Q8B6p1AxWC
S7V+0bzISZSf7c8OEoOk8TGHyL7UKqKN/W5mqkpohDwPNCYxW9oGf3fb/3Oj4Xwu
WoKWDIFnMZWVNz9U5gq7h5HDztQB4hMZ3NsOvV8KcFW/jjUML0CZlFnzLdn5YNCj
IlrbfryhAPKkkmx6Ln3wvl4kC56MzlpXXjR/CtO3M794SP7Z27f5xFBn3XxNIIHK
yBcX6GNINzbkfkoMmXQM2CGn9+lIfkvgNA5kY+YAk1L/dSL0ZB3LTaj4Sp5Cy7Cw
9wNAgIbDC79vP1/e9ndNXG5w5MmwEH/O6jLNS1Jf80kEbFqGRPx5WYw=
-----END CERTIFICATE-----