Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          M4TO0lfklcwq3cpzhjT1balVXgXme9QnzWt43pukE9g=
Subject key identifier:   E8:C3:80:C9:6A:B7:9F:F4:D1:F7:95:6C:59:59:AA:5A:6A:4C:25:AA
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       0CD554768575B9DF34521FF2769C2BEAD6839040
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 17 Mar 2024 10:27:21 +0000
ROA not before:           Sun 17 Mar 2024 10:22:21 +0000
ROA not after:            Sun 16 Mar 2025 10:27:21 +0000
asID:                     52210
IP address blocks:        2602:fcd3:1b5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d5:54:76:85:75:b9:df:34:52:1f:f2:76:9c:2b:ea:d6:83:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:21 2024 GMT
            Not After : Mar 16 10:27:21 2025 GMT
        Subject: CN=E8C380C96AB79FF4D1F7956C5959AA5A6A4C25AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:60:07:07:8a:ba:9b:a2:ec:f0:26:50:fa:
                    5e:5f:53:01:d1:b3:a8:4a:98:64:fc:19:12:a8:91:
                    e2:9d:f4:e7:ce:48:01:58:0d:f3:ea:bc:bb:49:dd:
                    10:f6:3e:3b:62:2e:e2:e1:42:d5:36:6b:26:7a:ba:
                    33:22:20:83:7a:10:8b:71:21:14:e2:0a:94:6c:b1:
                    06:f7:0a:85:46:a1:5d:2a:94:b7:82:cb:f8:7a:d8:
                    1d:43:c4:9f:dc:ef:17:84:78:0f:92:d0:ae:cf:27:
                    57:67:3f:46:a3:71:83:76:a8:b7:19:4b:68:ab:ed:
                    bb:8e:cf:6b:24:2e:38:2a:c2:b7:f4:c1:73:0f:47:
                    b0:b4:3d:0c:ad:4f:86:ba:7f:5a:58:b0:63:9d:3a:
                    59:bf:88:33:c5:95:ec:47:cd:2c:c6:1a:2a:76:8b:
                    a9:4c:48:f1:d6:3e:72:2e:61:6d:9c:e2:42:35:7d:
                    da:43:83:a2:86:68:1c:c5:f3:bd:57:ec:22:b1:07:
                    64:2f:b0:3c:4f:c4:31:d9:5f:39:50:4d:2f:bf:6d:
                    2f:91:43:bc:31:0e:48:05:ba:28:eb:48:c2:a0:65:
                    c8:a3:94:e9:0a:ff:45:50:e3:a9:45:d7:b8:aa:93:
                    a7:ad:ec:11:99:e1:d4:11:de:60:fd:db:f3:a3:93:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C3:80:C9:6A:B7:9F:F4:D1:F7:95:6C:59:59:AA:5A:6A:4C:25:AA
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:89:60:9c:b4:16:2f:1a:90:59:e8:23:89:d3:ca:27:14:
         75:24:58:90:ca:35:d7:f5:be:ea:59:bc:6e:2d:5c:1f:0f:34:
         32:d2:d8:7e:08:bf:9f:8f:08:29:01:ce:0e:55:ad:73:01:57:
         c4:61:1e:29:ce:18:fe:6a:16:07:17:89:c7:d6:55:d6:f7:16:
         1a:ca:2d:bd:fc:f1:92:4d:04:83:ec:8c:bb:52:24:76:70:fe:
         87:5a:65:f8:7a:50:55:6e:28:d5:2c:18:5a:d9:02:f5:ad:3d:
         3f:2e:6e:b2:23:da:6f:25:a9:78:63:44:31:4b:ea:97:ee:ec:
         d2:90:1d:7c:3e:7c:91:19:0c:84:c1:b2:0b:da:f9:9d:f4:02:
         f1:57:b1:5c:81:51:be:43:21:51:19:71:fd:a9:12:db:86:4a:
         fd:20:7b:f1:06:dc:63:54:b1:5b:74:79:2d:bd:2f:4f:63:23:
         57:9d:0a:f4:14:08:25:91:76:ab:92:52:8c:16:dd:63:a3:1b:
         b5:fc:9b:19:dc:fa:b7:42:b8:5d:25:73:7e:12:8f:23:ec:bb:
         bf:25:c3:d6:8d:cc:50:43:ce:27:bd:32:7f:b5:0a:be:8b:74:
         5e:d0:30:35:49:fc:cb:eb:91:02:dc:73:ca:45:12:fb:ad:8e:
         82:5a:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----