Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130333a3a2f34382d3438203d3e203437323732.roa
File:                     323630323a663936643a3130333a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          vyOTyUgKzxkSGyLb3m+eyyc8CPBejcn3++hewFRlWKU=
Subject key identifier:   BA:C5:53:4F:12:42:13:3A:D9:E7:76:A9:56:70:7A:5A:12:71:89:78
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       7A771DB28F3B80F51E7AB355188EDD87637222A4
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130333a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 08 Nov 2026 17:10:26 +0000
ROA not before:           Sun 08 Nov 2026 17:05:26 +0000
ROA not after:            Sun 07 Nov 2027 17:10:26 +0000
asID:                     47272
IP address blocks:        2602:f96d:103::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:77:1d:b2:8f:3b:80:f5:1e:7a:b3:55:18:8e:dd:87:63:72:22:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Nov  8 17:05:26 2026 GMT
            Not After : Nov  7 17:10:26 2027 GMT
        Subject: CN=BAC5534F1242133AD9E776A956707A5A12718978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:d3:09:85:67:94:9b:ec:12:26:30:8c:8e:
                    78:0b:91:db:05:de:2b:e6:e2:5e:9f:66:cc:d6:32:
                    62:33:5c:2f:26:de:8f:b8:4a:20:49:c8:3d:f0:1e:
                    18:41:90:f8:c6:53:9a:5e:89:d1:1d:2a:89:86:08:
                    67:ba:53:f8:6b:d4:5c:b1:77:68:ed:bd:3b:16:72:
                    dc:d6:d0:2a:da:b4:dc:52:7a:a5:ac:99:51:ab:bb:
                    9a:7e:24:1b:1d:bd:79:fb:20:32:32:b3:99:d6:9f:
                    45:42:49:90:46:12:df:cc:3a:1e:62:7f:25:11:ea:
                    75:53:8e:08:cb:0d:ab:8b:aa:48:d2:3e:7b:2f:c5:
                    2c:09:dc:e6:0a:8a:4b:fa:eb:3c:61:21:71:34:f9:
                    7c:76:90:b9:a5:83:01:3f:60:69:9f:85:b3:69:c6:
                    c5:a5:8a:d2:ee:da:38:fb:12:58:c7:5c:0b:66:c4:
                    c5:fe:cb:39:83:46:21:46:d5:d9:4a:bb:7b:9f:7e:
                    74:d5:dc:c2:e3:fd:71:0c:40:85:03:17:e6:3d:4b:
                    48:4c:f6:d9:e7:30:b0:a0:55:8d:1b:3b:8c:26:ef:
                    6a:d8:d1:84:ec:34:40:15:7a:b7:7d:36:2e:63:f9:
                    26:22:86:e0:6e:ae:7a:12:0c:09:de:70:90:c7:8f:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:53:4F:12:42:13:3A:D9:E7:76:A9:56:70:7A:5A:12:71:89:78
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130333a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:14:ea:96:7c:0d:1a:ad:97:8f:2a:00:5a:23:c4:83:1c:76:
         11:c3:90:f3:6d:59:74:d5:42:e6:01:ff:47:2f:87:35:8a:35:
         f3:6e:dd:2b:b4:f6:1f:a4:82:bd:98:33:46:52:fd:cc:5f:ac:
         53:7e:c3:23:01:e2:86:de:06:f7:f3:d2:13:e8:a8:11:0b:10:
         dc:23:80:16:76:e8:4a:5b:33:7f:94:fd:d0:15:d8:7f:d0:ed:
         4d:0f:b4:26:cf:0a:49:ba:54:f7:3a:59:ed:25:cf:ca:a3:a7:
         0c:a1:97:f6:df:66:12:6f:aa:63:73:7f:f9:b9:d7:e7:02:44:
         89:6e:e2:db:44:64:d2:7b:d4:62:89:fd:df:25:04:3d:cd:a9:
         8c:a4:be:37:d4:c6:86:04:87:86:45:e0:04:1f:54:9d:34:67:
         30:12:2b:b2:76:a2:25:f2:73:26:13:1b:51:19:48:e2:cd:59:
         f1:e5:2b:73:c6:f6:31:26:21:1d:83:49:23:06:51:46:34:b8:
         cc:5d:4e:39:ee:71:54:f6:56:7a:dc:80:f0:25:2e:8d:d8:42:
         60:19:3b:e7:52:db:44:b4:3d:70:74:61:24:82:f3:ad:90:59:
         a6:49:eb:26:85:94:29:75:da:e4:c9:42:08:3c:f4:16:65:fe:
         23:62:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----