Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa
File:                     3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa (raw, json)
Hash identifier:          1m0dqxLqY890DF3wNVJh67jqkOtFHc/0JJW1nV9PWnE=
Subject key identifier:   65:E1:5F:1C:7E:E8:C7:A7:A8:6F:F0:8F:6B:A7:D3:4D:27:6C:B0:4B
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       66DB079908EFFA50794CFDFD14B6F133EEE656D9
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa
Signing time:             Sun 16 Feb 2025 11:13:30 +0000
ROA not before:           Sun 16 Feb 2025 11:08:30 +0000
ROA not after:            Sun 15 Feb 2026 11:13:30 +0000
asID:                     206216
IP address blocks:        204.10.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:db:07:99:08:ef:fa:50:79:4c:fd:fd:14:b6:f1:33:ee:e6:56:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Feb 16 11:08:30 2025 GMT
            Not After : Feb 15 11:13:30 2026 GMT
        Subject: CN=65E15F1C7EE8C7A7A86FF08F6BA7D34D276CB04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:0e:49:5f:14:2e:88:3e:16:51:9d:07:cb:
                    54:b2:0f:2f:51:b1:50:98:54:d1:b4:06:ea:3b:79:
                    b7:1d:b0:b7:30:dd:87:6e:19:36:92:0a:4c:d6:ac:
                    2d:cf:5d:44:75:3d:70:d9:73:47:0e:85:ce:37:30:
                    5a:a9:c5:20:c6:2d:24:ce:0b:73:c8:12:cb:3c:c5:
                    00:e2:50:7d:8b:f2:e7:93:f7:81:8c:4d:78:08:5d:
                    fb:c5:2f:66:80:18:ae:fe:7d:e9:bf:52:66:11:a5:
                    22:d6:b0:4d:ae:59:87:f6:0c:e3:84:c1:95:f7:b4:
                    bb:7c:0b:da:45:db:0b:11:1d:22:24:b9:de:a5:0f:
                    5a:2c:50:b0:d4:b9:e8:4c:50:5c:7d:ca:30:0c:27:
                    2f:ca:1f:f8:dc:4c:87:51:fe:07:a1:26:58:18:50:
                    23:2b:08:8a:51:f1:c7:28:13:06:5a:af:ef:26:5d:
                    80:94:cc:12:be:d7:dc:aa:3d:df:02:01:5c:b5:98:
                    c0:bb:a8:21:2c:c0:a4:0c:ea:39:75:48:59:fc:81:
                    ba:de:d2:2c:04:6f:22:62:c4:b7:d0:62:0d:d1:cc:
                    d0:4e:30:4d:fd:4b:8d:74:13:9b:36:e1:d7:00:04:
                    b7:9f:fb:3d:06:19:39:b5:51:7e:e7:2d:62:3c:b2:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E1:5F:1C:7E:E8:C7:A7:A8:6F:F0:8F:6B:A7:D3:4D:27:6C:B0:4B
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:66:ee:a6:9a:d6:4b:a6:eb:4b:81:1e:bb:d4:81:46:ef:
         bb:4c:0a:33:c6:1d:7c:92:e7:10:42:0d:f8:56:4c:4c:e3:00:
         50:b5:ae:c4:5f:81:d4:d5:58:c8:bc:79:0f:f1:79:d7:0e:c6:
         1f:1e:05:fe:4e:60:16:02:a7:d5:69:dc:2d:63:dd:7c:97:23:
         38:ea:e8:bd:3f:77:3f:87:88:e4:a8:fe:b5:33:53:b9:6c:aa:
         48:da:7e:81:e3:34:d6:76:57:4e:4d:37:79:d2:6a:28:32:60:
         51:c4:4a:cb:ce:68:69:2b:cb:2d:a1:42:bd:94:2c:d1:5f:cd:
         6e:a1:dd:4e:7f:25:ef:54:79:0d:60:e7:5e:8a:7b:7a:71:88:
         9c:1c:dc:29:1b:a6:14:d9:3c:b9:c9:6d:39:b0:c9:67:22:90:
         55:01:93:b3:33:0a:bf:40:d8:56:02:98:bb:87:43:62:34:52:
         ff:15:ca:51:ca:42:fc:e8:54:87:74:eb:53:c6:03:a2:96:d1:
         bd:58:11:b1:82:c4:63:d5:00:17:b9:f3:95:04:6c:42:6f:47:
         f5:b6:3f:7a:8e:ac:06:38:c0:56:6d:24:3f:e3:98:34:33:f1:
         eb:f6:ea:3f:e2:5f:c9:0f:76:a6:ad:40:26:2a:b5:50:35:7a:
         a8:33:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:25 2025 by rpki-client