Route Origin Authorization

$ rpki-client -vvf rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa
File:                     323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          H75Y8cMq+/asj+sfiuccgBc633jqoXRijqzJGei+ovQ=
Subject key identifier:   D4:77:8E:17:A6:73:C9:19:5F:56:33:1E:22:B3:D9:1B:60:E3:A7:55
Certificate issuer:       /CN=8A15107195E63966ABA1997AD31382979C75F736
Certificate serial:       7C0CCB363897D5B831ACCC816FFEE065BC288D75
Authority key identifier: 8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer
Subject info access:      rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa
Signing time:             Sat 29 Jun 2024 19:31:32 +0000
ROA not before:           Sat 29 Jun 2024 19:26:32 +0000
ROA not after:            Sat 28 Jun 2025 19:31:32 +0000
asID:                     14618
IP address blocks:        2602:fcd3:106::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0c:cb:36:38:97:d5:b8:31:ac:cc:81:6f:fe:e0:65:bc:28:8d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A15107195E63966ABA1997AD31382979C75F736
        Validity
            Not Before: Jun 29 19:26:32 2024 GMT
            Not After : Jun 28 19:31:32 2025 GMT
        Subject: CN=D4778E17A673C9195F56331E22B3D91B60E3A755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:c0:ef:1d:8a:39:81:be:87:15:57:39:b7:
                    f3:41:ed:38:a0:50:41:f2:f8:c1:41:ab:93:c1:90:
                    ba:8d:ae:b8:dc:92:80:f4:ca:61:99:78:05:da:a2:
                    b5:e8:40:23:0a:64:0b:ae:a7:fe:58:3c:28:d0:2f:
                    a4:67:4d:0d:3a:1a:c6:b9:7d:a5:5c:65:bf:9d:3c:
                    66:b9:36:66:06:b9:ab:3f:4b:f3:5f:39:8a:fe:73:
                    ce:1e:f6:08:c7:c8:49:43:8e:f4:dd:7e:b8:f5:71:
                    bd:8e:3b:51:d1:f9:28:55:b8:b3:b1:ca:2f:61:d8:
                    39:54:0b:b7:07:7a:c5:bc:13:6a:bb:53:ac:dc:61:
                    b4:bb:ef:62:ef:6b:61:c1:06:cd:4a:c3:c0:ab:a9:
                    6e:5f:69:bc:34:70:b0:e5:eb:e5:64:9d:98:b0:1e:
                    23:f1:11:b5:c5:2b:5c:1e:0e:54:36:a7:e1:14:8b:
                    01:e9:d8:de:f5:76:c1:e8:9e:df:40:91:6b:41:55:
                    92:54:a3:1a:3c:62:9f:b7:e2:f0:e8:00:9a:89:07:
                    d7:05:62:02:75:a0:45:15:a2:12:f4:2d:16:69:c3:
                    36:da:67:95:44:32:0b:a3:98:b0:33:17:f1:33:d9:
                    97:fc:b7:ce:a7:da:03:48:38:39:53:c5:7b:eb:fc:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:8E:17:A6:73:C9:19:5F:56:33:1E:22:B3:D9:1B:60:E3:A7:55
            X509v3 Authority Key Identifier:
                keyid:8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:e3:27:5b:52:51:55:36:f5:49:af:ba:73:b7:58:9f:76:7b:
         3d:66:00:eb:9c:6f:10:83:01:8d:3a:38:49:66:e0:ed:ca:df:
         2b:50:f7:5f:df:ba:0f:24:da:da:44:64:4c:8f:25:6a:f0:8e:
         02:c5:83:3d:08:13:c6:f3:7b:2b:66:af:23:ab:ef:bc:7f:6f:
         f5:a3:5f:78:00:36:d3:9d:2f:c2:1e:26:d2:f9:7f:04:49:cd:
         7c:f3:e4:72:12:85:2d:a2:f3:00:3e:94:67:25:7f:30:7f:1d:
         a1:4a:43:85:35:10:ef:27:08:46:34:b6:2a:e3:22:57:20:32:
         69:51:a4:60:74:f7:0b:1b:b6:fd:8d:1b:d1:89:f3:64:d5:50:
         3f:3a:8a:27:ea:82:e4:f9:27:76:34:88:d1:a5:0a:0a:f7:0e:
         2a:cc:43:71:29:d2:17:cc:f5:43:da:67:a8:6e:e3:df:75:23:
         e5:0d:e2:ad:25:77:cb:92:8b:48:a1:77:f6:0f:60:ca:9a:d5:
         75:3c:7d:12:64:4d:64:db:3f:0c:fa:cc:fd:af:86:c4:46:40:
         6b:52:ea:ff:81:c7:e3:07:90:3c:ae:24:dd:0b:4c:09:08:9e:
         e7:53:00:34:3d:19:9e:e0:49:e5:f8:3f:ca:72:59:df:e2:7b:
         f3:63:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----