Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa
File:                     323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa (raw, json)
Hash identifier:          QSohXdWc2fTqXUEGTXZ99OvQMYN1XstYpOTFgHPj3bc=
Subject key identifier:   76:B7:B5:9F:F4:03:0C:67:72:F4:C8:CB:95:AD:01:DE:20:0D:1F:A6
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       692901A576D1C5266B4BDE0B9930EB6804B60601
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa
Signing time:             Wed 09 Apr 2025 12:40:35 +0000
ROA not before:           Wed 09 Apr 2025 12:35:35 +0000
ROA not after:            Wed 08 Apr 2026 12:40:35 +0000
asID:                     401038
IP address blocks:        2602:fcd3:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:29:01:a5:76:d1:c5:26:6b:4b:de:0b:99:30:eb:68:04:b6:06:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr  9 12:35:35 2025 GMT
            Not After : Apr  8 12:40:35 2026 GMT
        Subject: CN=76B7B59FF4030C6772F4C8CB95AD01DE200D1FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:68:ea:d3:dc:31:25:88:7d:bc:44:14:68:
                    e8:be:0d:84:8b:d1:bc:50:23:4e:b8:5f:d6:50:dd:
                    d3:d5:4b:e8:a5:63:d1:7b:c4:6c:2f:83:99:9b:97:
                    9e:4b:8d:f9:ad:3e:52:c7:61:72:34:0a:e6:92:bd:
                    31:d2:a2:32:78:92:d0:21:72:7e:71:89:9c:cd:46:
                    23:d1:ea:8f:e9:a6:9f:ac:2d:a4:e5:2d:7f:76:f5:
                    69:f4:48:ca:55:c2:12:6e:d3:10:9d:86:b9:1a:05:
                    0b:6d:17:9c:c8:31:e6:5c:b8:fb:84:93:a4:b4:18:
                    f1:9e:54:62:8b:20:d6:e7:8f:9f:f9:a7:cc:3e:b7:
                    ab:c8:16:c4:b9:c5:30:66:3f:48:fc:47:c2:af:64:
                    dc:a5:ff:4d:81:8b:a4:36:63:a3:fb:4d:95:c6:de:
                    01:de:b8:91:32:8e:69:09:ee:29:74:e1:db:26:e9:
                    3b:f8:55:99:51:4b:d0:67:94:e4:10:d0:9d:1e:f5:
                    c3:7f:9f:d6:5a:08:d8:74:d5:9d:4b:a6:8f:5b:38:
                    0c:1d:87:bc:35:4d:fc:17:d6:27:a6:a3:5b:44:5c:
                    5b:da:8e:04:7d:e9:03:fc:1f:0c:0b:b5:53:58:62:
                    02:52:8a:66:fb:0a:ae:66:3b:74:02:d1:61:ca:64:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B7:B5:9F:F4:03:0C:67:72:F4:C8:CB:95:AD:01:DE:20:0D:1F:A6
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a623a3a2f34382d3438203d3e20343031303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:98:8b:c3:84:16:4e:d1:a1:0a:7d:74:aa:8c:33:be:d2:5c:
         81:82:9b:df:7a:c3:4e:7f:a9:16:6d:8e:fd:73:25:5f:e4:ef:
         c4:07:0a:b0:86:dd:31:4b:75:84:42:1f:92:27:ba:c9:8d:12:
         b2:4c:c4:36:0b:32:61:41:24:b3:52:96:7e:b2:37:16:54:a7:
         6d:2c:6b:86:d0:7b:d0:08:98:70:47:1f:3f:f5:48:b6:58:9c:
         4c:55:fd:9b:12:f2:1e:4a:34:cf:35:52:18:73:1a:45:14:f3:
         1b:62:f8:bf:ae:58:0d:c4:07:b5:c2:6b:c0:ab:e3:4f:de:94:
         fb:30:04:84:1b:02:a8:f5:7b:ad:01:90:c1:bf:29:70:ae:c3:
         6d:69:98:f8:de:8b:84:68:98:1b:5a:ba:90:32:4b:a3:48:86:
         c5:04:58:ed:b5:c6:21:07:27:09:e8:df:6e:d4:83:e0:60:8c:
         bf:e3:fd:bd:48:bd:ea:18:75:3a:6a:c6:32:d1:cc:f6:5b:32:
         3d:0b:09:51:e2:49:0a:21:52:48:23:df:84:70:7c:fb:57:62:
         38:70:ac:8d:3f:25:56:a0:d0:26:d8:73:bf:48:dc:be:e7:bb:
         6d:7c:fe:79:be:5a:ba:82:2e:34:a5:c0:10:43:1b:8a:db:76:
         3d:c0:b1:29
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUaSkBpXbRxSZrS94LmTDraAS2BgEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzdlZWRhMWEzYTJlYmFkYTRiNGRhYzg5
YWNiZjM4YjNkZjc1ZDNjZTkwHhcNMjUwNDA5MTIzNTM1WhcNMjYwNDA4MTI0MDM1
WjAzMTEwLwYDVQQDEyg3NkI3QjU5RkY0MDMwQzY3NzJGNEM4Q0I5NUFEMDFERTIw
MEQxRkE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnexo6tPcMSWI
fbxEFGjovg2Ei9G8UCNOuF/WUN3T1UvopWPRe8RsL4OZm5eeS435rT5Sx2FyNArm
kr0x0qIyeJLQIXJ+cYmczUYj0eqP6aafrC2k5S1/dvVp9EjKVcISbtMQnYa5GgUL
bRecyDHmXLj7hJOktBjxnlRiiyDW54+f+afMPreryBbEucUwZj9I/EfCr2Tcpf9N
gYukNmOj+02Vxt4B3riRMo5pCe4pdOHbJuk7+FWZUUvQZ5TkENCdHvXDf5/WWgjY
dNWdS6aPWzgMHYe8NU38F9YnpqNbRFxb2o4EfekD/B8MC7VTWGICUopm+wquZjt0
AtFhymSfuQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFHa3tZ/0AwxncvTIy5WtAd4g
DR+mMB8GA1UdIwQYMBaAFIuDxdoDs8wCnZUhWgEyBZeBSzjwMA4GA1UdDwEB/wQE
AwIHgDB+BgNVHR8EdzB1MHOgcaBvhm1yc3luYzovL2tyaWxsLmFjY3VyaXN0ZWNo
bm9sb2dpZXMuY2EvcmVwby9BY2N1cmlzLVRlY2hub2xvZ2llcy8wLzhCODNDNURB
MDNCM0NDMDI5RDk1MjE1QTAxMzIwNTk3ODE0QjM4RjAuY3JsMIHzBggrBgEFBQcB
AQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
M2Y1ZWU3MS0zMmJjLTQ0ZTQtYTFjZC0xMjI2ZWEzYzQ3OTcvN2FmYWYxYzFiNzdl
ZWRhMWEzYTJlYmFkYTRiNGRhYzg5YWNiZjM4YjNkZjc1ZDNjZTkuY2VyMIGeBggr
BgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8va3JpbGwuYWNjdXJp
c3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzAvMzIz
NjMwMzIzYTY2NjM2NDMzM2E2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzAz
MTMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACYC/NMACzANBgkqhkiG9w0BAQsFAAOCAQEAMZiL
w4QWTtGhCn10qowzvtJcgYKb33rDTn+pFm2O/XMlX+TvxAcKsIbdMUt1hEIfkie6
yY0SskzENgsyYUEks1KWfrI3FlSnbSxrhtB70AiYcEcfP/VItlicTFX9mxLyHko0
zzVSGHMaRRTzG2L4v65YDcQHtcJrwKvjT96U+zAEhBsCqPV7rQGQwb8pcK7DbWmY
+N6LhGiYG1q6kDJLo0iGxQRY7bXGIQcnCejfbtSD4GCMv+P9vUi96hh1OmrGMtHM
9lsyPQsJUeJJCiFSSCPfhHB8+1diOHCsjT8lVqDQJthzv0jcvue7bXz+eb5auoIu
NKXAEEMbitt2PcCxKQ==
-----END CERTIFICATE-----