Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162363a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3162363a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          kIpGbgQPOT949Sxo5S037dwogqA/4JTwycbcYEd/TaE=
Subject key identifier:   11:A3:BD:75:82:93:8C:C3:38:FD:31:1D:83:EC:7C:9A:A6:02:90:4C
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       0418DF2B20B1EF19E679E4D937C85950E15F9836
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162363a3a2f34382d3438203d3e203532323130.roa
Signing time:             Mon 14 Apr 2025 04:40:36 +0000
ROA not before:           Mon 14 Apr 2025 04:35:36 +0000
ROA not after:            Mon 13 Apr 2026 04:40:36 +0000
asID:                     52210
IP address blocks:        2602:fcd3:1b6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:18:df:2b:20:b1:ef:19:e6:79:e4:d9:37:c8:59:50:e1:5f:98:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr 14 04:35:36 2025 GMT
            Not After : Apr 13 04:40:36 2026 GMT
        Subject: CN=11A3BD7582938CC338FD311D83EC7C9AA602904C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:f4:8a:de:d4:38:a4:84:e8:f1:4e:ba:84:
                    66:ea:4b:43:3c:aa:31:8a:27:d6:3e:12:69:9e:a2:
                    28:fd:69:0b:36:3f:f8:8f:cc:2c:d6:fe:56:69:4a:
                    21:b4:30:12:19:76:70:08:cb:07:38:7e:62:17:45:
                    46:c5:49:73:a5:9f:53:3a:42:7b:07:82:0a:75:9a:
                    8a:e2:22:5a:5a:72:17:2a:a4:cb:e4:f1:e5:39:3d:
                    b8:e6:78:27:68:bc:a7:01:ea:78:46:da:27:51:00:
                    75:c6:56:4f:a3:35:d7:7d:a1:bd:cd:5c:73:d2:ea:
                    bf:a4:6b:ae:ce:f0:3e:f5:28:6b:5e:8b:2c:86:ed:
                    e6:93:3a:53:f2:ce:e1:51:2c:c3:68:c6:85:d1:db:
                    84:94:72:38:d7:33:cb:23:46:14:4e:6e:6c:56:6a:
                    71:42:b2:7c:22:4d:4a:14:8a:80:ad:b1:44:52:01:
                    b2:6f:ee:10:2d:bc:d4:b8:ad:13:c6:95:0b:2f:26:
                    73:4f:34:fc:29:07:3b:af:14:e1:c6:76:be:7c:8c:
                    dd:75:68:fa:f3:a5:d4:d0:42:99:57:51:3e:bb:95:
                    5b:8c:73:70:8f:ae:10:da:23:7d:3b:99:a7:12:d5:
                    be:99:c2:3d:87:13:b5:4e:17:ad:7b:49:a9:b5:18:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A3:BD:75:82:93:8C:C3:38:FD:31:1D:83:EC:7C:9A:A6:02:90:4C
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3162363a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:47:78:5a:89:3b:5e:68:74:a0:4a:dc:37:6c:69:f7:fd:58:
         67:c7:25:af:81:b4:e1:68:61:54:24:1d:20:e0:75:67:1e:a2:
         b5:64:6c:9b:b7:52:54:1b:8c:9b:69:1d:f7:95:9f:e1:b9:b2:
         77:4f:de:88:70:71:aa:a0:f6:32:e3:3e:cd:ef:28:b3:85:6e:
         3a:cb:3b:9d:e0:e0:b2:4a:5b:24:54:f3:4f:27:38:a2:6d:d5:
         36:d8:5f:38:fa:fe:e6:32:78:bd:c4:e8:b5:22:09:16:2b:c9:
         d2:af:d4:a6:b9:0f:d5:d4:8b:f4:61:a1:2f:37:4a:18:74:00:
         fe:7f:fd:8d:75:7b:fc:b5:30:5a:9b:04:69:f5:5d:2d:8e:5f:
         43:2d:60:87:dd:b5:e7:36:e8:d3:67:ab:66:da:9a:2f:9c:2f:
         3c:d1:db:ca:18:31:31:74:84:48:29:9c:01:a8:6a:ea:e5:cb:
         5c:1b:69:7f:8b:b0:c3:e7:34:82:33:29:0d:71:d2:67:ac:63:
         0a:97:f9:39:41:f0:43:22:44:00:56:6b:3e:0a:3d:a5:7c:87:
         43:ad:cc:75:6a:77:94:74:2c:26:04:c1:a1:02:12:f2:e5:5c:
         50:43:da:84:11:03:de:c0:8b:a3:0d:59:73:1b:2a:f5:3d:c1:
         b8:13:c0:2a
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIUBBjfKyCx7xnmeeTZN8hZUOFfmDYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjUwNDE0MDQzNTM2WhcNMjYwNDEzMDQ0MDM2
WjAzMTEwLwYDVQQDEygxMUEzQkQ3NTgyOTM4Q0MzMzhGRDMxMUQ4M0VDN0M5QUE2
MDI5MDRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lb0it7UOKSE
6PFOuoRm6ktDPKoxiifWPhJpnqIo/WkLNj/4j8ws1v5WaUohtDASGXZwCMsHOH5i
F0VGxUlzpZ9TOkJ7B4IKdZqK4iJaWnIXKqTL5PHlOT245ngnaLynAep4RtonUQB1
xlZPozXXfaG9zVxz0uq/pGuuzvA+9ShrXosshu3mkzpT8s7hUSzDaMaF0duElHI4
1zPLI0YUTm5sVmpxQrJ8Ik1KFIqArbFEUgGyb+4QLbzUuK0TxpULLyZzTzT8KQc7
rxThxna+fIzddWj686XU0EKZV1E+u5VbjHNwj64Q2iN9O5mnEtW+mcI9hxO1Thet
e0mptRhumQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBGjvXWCk4zDOP0xHYPsfJqm
ApBMMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGhBggr
BgEFBQcBCwSBlDCBkTCBjgYIKwYBBQUHMAuGgYFyc3luYzovL2tyaWxsLmFjY3Vy
aXN0ZWNobm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzMy
MzYzMDMyM2E2NjYzNjQzMzNhMzE2MjM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMjMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/NMBtjANBgkqhkiG9w0BAQsFAAOCAQEA
JUd4Wok7Xmh0oErcN2xp9/1YZ8clr4G04WhhVCQdIOB1Zx6itWRsm7dSVBuMm2kd
95Wf4bmyd0/eiHBxqqD2MuM+ze8os4VuOss7neDgskpbJFTzTyc4om3VNthfOPr+
5jJ4vcTotSIJFivJ0q/UprkP1dSL9GGhLzdKGHQA/n/9jXV7/LUwWpsEafVdLY5f
Qy1gh9215zbo02erZtqaL5wvPNHbyhgxMXSESCmcAahq6uXLXBtpf4uww+c0gjMp
DXHSZ6xjCpf5OUHwQyJEAFZrPgo9pXyHQ63MdWp3lHQsJgTBoQIS8uVcUEPahBED
3sCLow1Zcxsq9T3BuBPAKg==
-----END CERTIFICATE-----