Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219459.roa
File:                     AS219459.roa (raw, json)
Hash identifier:          ZeqVkkJQoMhXXc7thXaboXlo17Qs9zh6WpK+zYOU2kY=
Subject key identifier:   EE:E0:20:28:7B:14:2B:3E:88:0B:15:5B:A9:E1:A7:B1:CA:20:E8:AD
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       39F89A9C6DD324712A96632E25BFC01A6F6E6649
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS219459.roa
Signing time:             Tue 27 Oct 2026 18:35:33 +0000
ROA not before:           Tue 27 Oct 2026 18:30:33 +0000
ROA not after:            Tue 26 Oct 2027 18:35:33 +0000
asID:                     219459
IP address blocks:        2a0f:6284:9000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:9a:9c:6d:d3:24:71:2a:96:63:2e:25:bf:c0:1a:6f:6e:66:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 27 18:30:33 2026 GMT
            Not After : Oct 26 18:35:33 2027 GMT
        Subject: CN=EEE020287B142B3E880B155BA9E1A7B1CA20E8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:33:79:ff:4c:f5:2b:28:8d:13:d0:76:57:
                    c9:27:aa:ec:82:34:e9:27:95:ae:a2:d3:5c:58:0d:
                    71:d0:b6:3f:ac:73:01:87:52:6f:cf:e6:25:b2:62:
                    9b:b8:19:d5:47:e9:8e:19:8e:e2:7b:c8:14:5a:4d:
                    4f:f5:36:28:93:c7:cf:d4:b6:c8:80:4c:a2:1b:26:
                    d5:7b:ce:cf:62:30:c2:3e:73:10:b9:d3:03:26:42:
                    09:7c:a4:64:2d:37:db:42:bb:84:56:63:42:cd:e9:
                    e6:8b:95:c2:62:70:04:e6:24:a1:c3:6b:71:7b:dd:
                    2b:2c:4a:e3:c0:70:08:52:d2:39:81:7d:68:83:09:
                    23:5e:38:96:3c:c0:b2:9d:68:b2:d0:61:a5:10:54:
                    f9:89:dc:c1:d9:3b:6a:0c:7d:3d:4e:87:7e:0c:32:
                    d9:85:8f:f9:96:7c:cd:1f:fe:b7:8a:f2:ce:11:71:
                    1d:51:9b:a5:db:13:6a:e1:78:b1:97:bc:3b:82:be:
                    ca:60:05:e2:94:1e:26:91:62:01:4e:dc:34:de:ac:
                    76:d7:55:34:78:ae:c1:99:5b:04:cf:aa:d7:7d:1f:
                    91:51:ff:3a:20:eb:b3:dc:c1:b5:94:8a:72:d7:a9:
                    6b:9c:6d:fb:d1:2a:37:31:cd:7f:a6:0e:53:fe:05:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E0:20:28:7B:14:2B:3E:88:0B:15:5B:A9:E1:A7:B1:CA:20:E8:AD
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6284:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:21:61:fe:73:a8:ab:71:d1:d4:dc:d5:76:bb:21:47:46:c8:
         e5:c5:57:73:f7:da:67:f0:f6:b8:77:de:26:34:ab:eb:ef:d3:
         6d:05:fe:1b:8c:21:58:58:94:bf:e6:ef:9f:e3:af:31:0c:1e:
         03:fa:ec:b8:93:15:2a:67:7d:14:b5:5c:82:9c:93:ab:26:77:
         86:21:c4:1f:c0:0c:4f:bd:19:0d:cb:71:47:7f:52:29:84:9c:
         d5:a5:91:9e:68:41:ea:7c:b9:3c:eb:d7:bd:9e:5f:87:78:e8:
         e0:16:08:fc:5a:a8:e6:5c:4b:5d:8d:0a:3a:67:0f:26:d7:50:
         b1:af:a2:c4:8b:a3:6e:45:a7:03:4e:d6:c8:e8:8d:62:fe:e6:
         54:c8:66:95:fa:0a:a8:1e:cf:3d:a9:e1:c7:d5:90:73:03:e7:
         ba:d4:2c:7f:fa:7b:2b:61:0d:35:ca:1d:e1:00:57:0b:da:3e:
         f8:97:fd:c1:a3:4b:88:53:6b:a8:8b:bb:53:40:47:95:0d:a5:
         8f:44:1f:11:52:89:bb:1b:29:08:34:7c:68:08:d5:d0:47:0f:
         04:37:5e:58:ce:39:63:86:17:b9:04:fa:bf:d3:48:88:30:5b:
         40:ed:d0:50:aa:5a:a8:5c:64:2a:51:dc:7f:d3:d6:dc:25:12:
         7d:04:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----