Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa
File:                     323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa (raw, json)
Hash identifier:          SaIspmDtgapkEKg7ZqZM3qYiG5uKAV/UwCPYGBNu0oA=
Subject key identifier:   DA:2A:D2:51:6E:E8:C2:0B:BC:E5:3F:81:55:F2:59:C7:54:25:40:77
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       145ABBB2A1AC2B20A33E65656C85A2462565F8C9
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     52210
IP address blocks:        2602:fcd3:10::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5a:bb:b2:a1:ac:2b:20:a3:3e:65:65:6c:85:a2:46:25:65:f8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=DA2AD2516EE8C20BBCE53F8155F259C754254077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:8a:c0:17:61:7d:2b:04:c4:ca:96:52:ad:
                    cc:58:d9:25:b2:82:1a:61:c0:2a:93:ff:e8:b4:de:
                    fd:74:14:59:b8:06:ec:b7:17:bc:f3:b0:da:47:fe:
                    19:bb:56:44:1d:c4:dc:88:4a:17:95:1e:76:47:40:
                    4e:83:94:0e:5c:13:bc:75:04:66:18:75:87:c8:01:
                    fa:b2:58:a6:49:e4:25:36:78:9f:0f:4f:15:23:43:
                    99:51:7e:26:80:dd:c7:3c:1f:c1:f2:37:e7:44:df:
                    8c:a0:ee:c4:c9:4c:d7:5b:8c:98:52:94:87:8a:62:
                    fe:8b:99:f6:94:b8:ea:ca:3f:e5:21:dc:6e:1e:d0:
                    e2:b0:57:ee:a7:fc:30:10:01:28:64:97:49:23:73:
                    76:51:55:e7:75:af:99:98:84:bb:b3:86:1c:27:17:
                    d4:73:e3:a9:82:f1:e2:c3:cb:7a:6d:63:b6:0b:04:
                    22:2e:d4:22:85:ef:b7:c1:49:1b:d1:a0:17:68:40:
                    ec:dc:76:4a:b2:67:bc:18:e3:7c:04:eb:1e:98:6f:
                    2e:1e:82:07:01:69:01:1f:43:44:2c:b6:01:5e:ce:
                    b9:4e:84:2a:b0:44:f4:13:3d:79:73:ec:e6:55:bc:
                    9b:d8:af:69:4b:39:c6:70:d1:04:12:38:34:e1:37:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2A:D2:51:6E:E8:C2:0B:BC:E5:3F:81:55:F2:59:C7:54:25:40:77
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a31303a3a2f34342d3434203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:a5:50:d5:1a:8f:ea:61:88:6f:9c:64:55:d8:14:61:fb:
         ba:b1:13:87:94:de:70:d7:6f:81:6c:bf:5a:e1:78:12:cf:97:
         78:07:ee:3d:52:6f:29:84:84:25:9e:b8:33:60:45:66:7d:d9:
         c2:cf:cd:f0:1d:e8:2f:4a:a6:3b:44:f1:dd:6f:43:a8:28:ee:
         9f:cf:8b:0a:f6:c0:ba:b0:c8:e9:34:65:6d:7b:61:02:65:bb:
         3e:98:aa:8b:e3:87:db:22:ed:ab:4d:cb:29:89:83:ab:ec:26:
         e9:02:19:8f:3c:79:12:28:b6:72:0a:5d:1c:7b:bb:1b:98:7f:
         53:24:18:cd:ff:bd:56:63:ef:bc:6e:ff:c4:10:3e:00:37:0e:
         2b:26:34:b5:42:70:af:2d:f1:97:35:f9:30:65:02:62:0e:97:
         eb:4b:78:15:57:2d:f1:fe:c0:a5:77:02:34:e2:4f:89:20:4e:
         34:3a:b4:3b:b1:90:08:44:40:30:6f:c0:9e:66:9f:be:9f:50:
         a7:b6:47:fb:ca:6f:07:e0:82:81:bd:4a:d8:3f:1d:16:fa:d6:
         7a:e0:c7:65:dd:a0:6d:cd:27:94:15:34:db:92:c1:df:70:f1:
         83:7a:34:5b:c6:c5:e7:c4:b0:ec:01:e1:e9:e8:c5:b5:a7:38:
         e8:d9:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----