Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3135323a3a2f34382d3438203d3e20313939313834.roa
File:                     323630323a666364333a3135323a3a2f34382d3438203d3e20313939313834.roa (raw, json)
Hash identifier:          b2U1myVN/gRDLlLp1dbOScU+7sGd5HwNcSJ3GboI/58=
Subject key identifier:   3D:65:97:B1:E3:66:A1:19:1A:02:76:01:7B:07:74:65:FA:C9:FE:19
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       4933A2E2C3AAF5EA6B0EE1066DEA4B277CA1977A
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3135323a3a2f34382d3438203d3e20313939313834.roa
Signing time:             Wed 03 Apr 2024 07:27:24 +0000
ROA not before:           Wed 03 Apr 2024 07:22:24 +0000
ROA not after:            Wed 02 Apr 2025 07:27:24 +0000
asID:                     199184
IP address blocks:        2602:fcd3:152::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:33:a2:e2:c3:aa:f5:ea:6b:0e:e1:06:6d:ea:4b:27:7c:a1:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr  3 07:22:24 2024 GMT
            Not After : Apr  2 07:27:24 2025 GMT
        Subject: CN=3D6597B1E366A1191A0276017B077465FAC9FE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:b9:51:fe:f3:0f:e6:8a:40:fe:68:36:3d:
                    5c:a3:4b:15:5b:48:9f:90:7b:1e:30:23:28:df:b8:
                    b0:85:93:b7:66:a5:e3:84:ba:23:9f:0b:20:ec:1f:
                    fd:60:6c:70:18:d5:a5:56:ad:60:4b:8d:fc:0d:fb:
                    31:3c:85:c6:06:40:f9:67:ec:08:aa:db:0d:cd:0c:
                    5c:59:ee:b3:e3:48:06:28:74:8b:b1:b8:f9:4e:46:
                    2b:38:06:32:c1:a5:48:e7:55:50:82:07:eb:40:a5:
                    25:0b:81:fc:12:1d:1f:f0:5f:0f:18:2a:5f:b9:27:
                    de:b0:cf:08:ea:0f:1d:32:48:2e:29:ea:53:4e:a4:
                    54:1d:9b:37:4d:d3:46:03:b7:78:a5:f1:08:7f:53:
                    b9:9a:2e:c3:22:76:5f:1c:7d:b4:a3:a7:b2:6c:77:
                    86:45:48:45:b2:de:41:b1:20:90:08:81:4a:a4:9f:
                    2c:43:1b:e1:63:25:5f:5f:c2:0f:2f:22:98:3e:65:
                    54:fa:d7:04:a9:61:2e:e8:98:fc:b6:db:cf:b9:a0:
                    e7:49:64:78:74:26:7d:2d:32:8b:09:5e:6a:f4:52:
                    da:23:57:a3:ce:23:bc:51:40:ce:bb:53:52:1f:1d:
                    59:3d:b0:f2:c2:72:94:c3:c7:ec:31:9d:1c:26:64:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:97:B1:E3:66:A1:19:1A:02:76:01:7B:07:74:65:FA:C9:FE:19
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3135323a3a2f34382d3438203d3e20313939313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:152::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:da:e6:e5:1f:bd:28:5a:96:1c:1a:d9:b1:53:7f:06:74:
         bb:70:2f:35:ba:4d:2f:2a:20:af:ad:9a:00:f7:b2:8f:35:d9:
         42:8e:37:cb:b3:93:c8:7a:e5:7f:9a:4f:33:84:a1:55:b5:e2:
         a8:41:30:0b:1f:50:31:59:f5:fa:6d:b5:92:c7:8e:f7:33:42:
         f8:74:74:e6:ee:3e:30:56:e8:02:a4:15:71:b3:68:ed:a4:45:
         bd:7a:c2:84:92:12:f8:a9:2f:55:14:56:f6:ae:e4:d6:cb:3f:
         d9:79:be:19:08:77:19:b0:28:5b:53:8a:39:32:4e:35:41:31:
         08:80:72:b9:72:1d:bc:77:90:7f:55:7b:99:9e:bc:7a:66:92:
         d0:d8:5c:89:b1:57:4f:a8:b1:87:42:b3:84:f8:44:9b:06:a1:
         a9:f0:d4:ce:d0:a5:74:e5:73:a2:3c:85:48:45:63:9b:3a:12:
         b1:c9:31:4a:15:a4:73:51:13:8a:e0:8a:79:59:7b:eb:67:df:
         11:3b:67:32:35:4a:b4:b9:3f:12:ad:82:09:f0:31:a6:32:c6:
         61:97:0a:43:fc:8b:f8:fb:28:85:56:10:b7:1d:86:15:a2:9c:
         13:05:ba:84:1a:9c:b0:f6:cd:29:0a:85:91:c2:6b:98:b7:5f:
         47:c8:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----