Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a633a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a633a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          hb2445CngRt6kD8M/BKvjHHG0xOAqhSI4VYmTNwASbc=
Subject key identifier:   BE:94:11:EE:3B:03:C9:6F:E8:6B:62:6C:FC:60:61:D9:BA:52:46:3C
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       377B23A598CDED09F7D8387ACAB1E1F989AA6E
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a633a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Wed 09 Apr 2025 12:40:35 +0000
ROA not before:           Wed 09 Apr 2025 12:35:35 +0000
ROA not after:            Wed 08 Apr 2026 12:40:35 +0000
asID:                     212934
IP address blocks:        2602:fcd3:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:23:a5:98:cd:ed:09:f7:d8:38:7a:ca:b1:e1:f9:89:aa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Apr  9 12:35:35 2025 GMT
            Not After : Apr  8 12:40:35 2026 GMT
        Subject: CN=BE9411EE3B03C96FE86B626CFC6061D9BA52463C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:08:ad:30:9d:a7:ca:a9:81:32:df:71:29:
                    a1:6e:f9:23:67:4c:6b:00:cf:e6:4a:c2:1e:4c:27:
                    90:56:3e:82:a6:cd:03:41:42:67:17:ab:e6:49:35:
                    00:ff:40:b6:d6:9d:4a:39:30:98:38:c4:58:39:26:
                    9f:02:df:75:bf:66:ff:87:63:db:de:65:58:28:cd:
                    0f:a4:52:cb:7e:68:ee:ba:35:65:24:29:f8:62:98:
                    76:3a:82:5c:6c:ef:14:80:59:22:ca:5d:42:6d:de:
                    eb:4d:33:09:88:c4:74:95:d2:1f:43:87:43:ec:f0:
                    c2:f3:07:db:2a:48:60:22:cf:34:5d:85:bc:fc:82:
                    24:f9:4f:65:f1:70:01:67:5a:9e:ab:28:ca:57:d4:
                    a3:65:47:f3:31:4f:e4:9a:12:e0:39:1f:e2:da:67:
                    ba:4c:97:c2:1a:58:06:c6:8f:ac:5c:28:c6:3a:86:
                    cd:58:3a:c4:8d:e0:af:d3:1c:da:36:1f:40:13:44:
                    bd:96:bf:ae:75:6a:71:a5:6b:07:fa:58:a6:ad:bc:
                    7a:90:73:a4:c8:f0:d4:0f:4b:ca:dc:f3:b5:26:90:
                    de:1e:b6:f5:de:c1:3c:54:24:97:80:37:61:d4:9d:
                    83:8c:72:bf:28:6e:ab:56:2a:b7:9f:07:09:2f:db:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:94:11:EE:3B:03:C9:6F:E8:6B:62:6C:FC:60:61:D9:BA:52:46:3C
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a633a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:f7:5d:7e:fd:84:20:59:ff:5f:3b:ae:24:7b:f7:a6:0c:
         01:48:66:53:a4:4f:f1:cb:e6:43:c3:bd:48:97:57:f2:a1:95:
         aa:f3:16:d9:c0:f2:25:93:b1:89:83:06:b0:c5:7b:7d:b5:da:
         22:5e:55:2b:cc:48:45:7c:78:a9:eb:35:75:cf:0c:ca:4c:80:
         b8:11:bf:03:c6:61:d4:d0:26:31:db:2e:e1:eb:bf:ac:78:1a:
         93:75:67:b2:8d:63:30:6b:85:6a:fb:0e:3a:f8:e2:91:fa:c6:
         da:d1:a1:90:21:53:ed:8c:9f:f9:26:94:19:fe:98:3a:45:4d:
         7b:fb:41:3c:87:8f:e9:ae:91:2f:a3:c3:c9:89:91:5c:53:0f:
         a5:9c:3c:07:6b:0d:08:86:90:81:79:f3:f9:de:ee:0b:d7:ab:
         e2:30:38:27:94:eb:f6:9c:3c:4b:33:eb:16:fb:0d:e2:7e:bb:
         63:b1:e7:18:3a:1a:b4:b3:9a:44:0e:65:fb:dc:a9:e2:8a:a1:
         e1:31:c6:bf:4f:1d:f0:6b:2b:0e:f9:67:5c:31:2f:61:ba:0d:
         d2:da:76:3e:77:27:70:6b:6e:76:d2:4f:d2:e8:3d:f0:d7:e7:
         9d:9a:0b:91:ec:bb:2d:d0:bc:41:fa:f2:6b:fa:dd:d0:69:a7:
         6e:5f:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----