Route Origin Authorization

$ rpki-client -vvf rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e20323134353639.roa
File:                     323630323a666364333a3130363a3a2f34382d3438203d3e20323134353639.roa (raw, json)
Hash identifier:          N39udR/aBSb+Gr7hmJtLydTVeBe929AwkEctMfa6l3w=
Subject key identifier:   59:A0:81:22:82:13:3B:60:5D:74:17:74:19:E8:4F:51:4E:B5:C9:04
Certificate issuer:       /CN=8A15107195E63966ABA1997AD31382979C75F736
Certificate serial:       2972963B44FFD6E472AB6140AE56DE8DADAAD90D
Authority key identifier: 8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer
Subject info access:      rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e20323134353639.roa
Signing time:             Wed 10 Jul 2024 01:34:50 +0000
ROA not before:           Wed 10 Jul 2024 01:29:50 +0000
ROA not after:            Wed 09 Jul 2025 01:34:50 +0000
asID:                     214569
IP address blocks:        2602:fcd3:106::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:72:96:3b:44:ff:d6:e4:72:ab:61:40:ae:56:de:8d:ad:aa:d9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A15107195E63966ABA1997AD31382979C75F736
        Validity
            Not Before: Jul 10 01:29:50 2024 GMT
            Not After : Jul  9 01:34:50 2025 GMT
        Subject: CN=59A0812282133B605D74177419E84F514EB5C904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:47:df:51:5b:16:bb:98:d2:43:73:ba:aa:
                    ee:80:ce:38:0f:56:d6:6d:46:a3:bf:72:cb:e6:a8:
                    79:49:55:87:bb:d9:ba:c8:6b:31:01:63:6d:3d:d8:
                    f3:5c:93:34:55:a1:29:68:34:3e:fb:a1:dd:14:8d:
                    2c:be:8d:45:95:a7:87:b3:b7:d2:47:2d:bc:c7:06:
                    f7:e8:80:c8:2a:bf:1e:60:35:ef:a7:57:54:34:73:
                    0a:8d:ff:dd:b0:ac:4d:76:9f:15:07:3e:f7:28:9e:
                    19:2e:ed:3e:e7:c1:20:ff:2b:5b:d0:17:28:9e:af:
                    11:07:74:63:12:33:64:99:39:c5:b2:14:ce:93:42:
                    ed:ee:19:55:ad:8e:c8:55:fb:dd:b8:13:c8:ad:64:
                    2a:86:11:37:2e:d4:98:f0:ab:42:8e:75:5e:5c:09:
                    90:df:75:54:0a:e1:18:1b:21:c5:40:dc:c9:e3:e9:
                    62:a6:3f:e3:83:d8:4b:17:93:87:1c:e7:eb:fa:c3:
                    ca:da:d3:ac:26:91:33:b3:e9:c4:e1:9c:45:9d:79:
                    62:2a:bc:7c:55:1b:d3:f1:3a:be:1c:22:46:f0:29:
                    37:6e:b9:29:b5:0a:64:de:0f:a7:5a:b7:60:0b:00:
                    aa:91:2e:8c:35:ae:ee:f2:dc:73:28:34:cb:53:58:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:81:22:82:13:3B:60:5D:74:17:74:19:E8:4F:51:4E:B5:C9:04
            X509v3 Authority Key Identifier:
                keyid:8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e20323134353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:80:07:de:87:7a:8a:64:b0:fb:2d:38:83:90:82:dc:57:
         b7:02:0f:77:72:50:30:7e:ec:38:b9:1a:8c:3a:de:4a:ef:2d:
         5f:ee:99:ab:58:4e:3b:12:82:90:60:a5:d9:44:a5:48:dc:ab:
         03:a2:f3:5d:c1:7f:d0:2e:0d:7b:ae:64:cd:aa:8f:9c:5e:ae:
         2f:32:a3:dd:51:55:8c:4f:b6:1b:bd:60:7d:2a:b2:b3:9d:e8:
         5d:19:e3:fa:3a:f3:09:99:e3:91:08:88:25:2e:6b:7a:0c:8e:
         de:54:b5:d3:1f:0f:1f:d4:cc:a0:23:db:2a:bc:80:08:b3:47:
         70:39:1d:3a:a8:e4:cb:c7:d7:68:2a:1e:63:a8:6c:99:cd:5a:
         7d:19:4d:b7:2d:24:9f:50:87:54:59:9e:e4:9d:c9:6f:b3:35:
         07:0a:a3:ef:32:53:8f:2b:72:91:87:0e:9b:0d:95:1f:1e:42:
         a8:8a:98:b3:8c:d1:e4:cb:da:7b:dd:23:d1:38:ea:7c:1d:2d:
         50:ab:19:3d:f0:0f:62:d9:1d:6b:60:3a:51:e6:88:c3:00:48:
         3d:83:71:58:75:04:2c:9b:d4:6c:0d:29:c0:89:2e:90:f7:c9:
         3c:83:6b:44:ae:46:ad:8d:3f:60:4d:d4:17:c2:07:e2:69:d8:
         17:d2:b2:f0
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUKXKWO0T/1uRyq2FArlbeja2q2Q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExNTEwNzE5NUU2Mzk2NkFCQTE5OTdBRDMxMzgyOTc5
Qzc1RjczNjAeFw0yNDA3MTAwMTI5NTBaFw0yNTA3MDkwMTM0NTBaMDMxMTAvBgNV
BAMTKDU5QTA4MTIyODIxMzNCNjA1RDc0MTc3NDE5RTg0RjUxNEVCNUM5MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYkffUVsWu5jSQ3O6qu6AzjgP
VtZtRqO/csvmqHlJVYe72brIazEBY2092PNckzRVoSloND77od0UjSy+jUWVp4ez
t9JHLbzHBvfogMgqvx5gNe+nV1Q0cwqN/92wrE12nxUHPvconhku7T7nwSD/K1vQ
FyierxEHdGMSM2SZOcWyFM6TQu3uGVWtjshV+924E8itZCqGETcu1Jjwq0KOdV5c
CZDfdVQK4RgbIcVA3Mnj6WKmP+OD2EsXk4cc5+v6w8ra06wmkTOz6cThnEWdeWIq
vHxVG9PxOr4cIkbwKTduuSm1CmTeD6dat2ALAKqRLow1ru7y3HMoNMtTWGNrAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUWaCBIoITO2BddBd0GehPUU61yQQwHwYDVR0j
BBgwFoAUihUQcZXmOWaroZl60xOCl5x19zYwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud
HwR0MHIwcKBuoGyGanJzeW5jOi8vcnBraS5taXJhbGl1bS5uZXQvcmVwby9NaXJh
bGl1bS1SZXNlYXJjaC1SUEtJLUNBLUExLzAvOEExNTEwNzE5NUU2Mzk2NkFCQTE5
OTdBRDMxMzgyOTc5Qzc1RjczNi5jcmwwgYkGCCsGAQUFBwEBBH0wezB5BggrBgEF
BQcwAoZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVzLmNhL3JlcG8v
QWNjdXJpcy1UZWNobm9sb2dpZXMvMC84QTE1MTA3MTk1RTYzOTY2QUJBMTk5N0FE
MzEzODI5NzlDNzVGNzM2LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUF
BzALhoGAcnN5bmM6Ly9ycGtpLm1pcmFsaXVtLm5ldC9yZXBvL01pcmFsaXVtLVJl
c2VhcmNoLVJQS0ktQ0EtQTEvMC8zMjM2MzAzMjNhNjY2MzY0MzMzYTMxMzAzNjNh
M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM1MzYzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC
/NMBBjANBgkqhkiG9w0BAQsFAAOCAQEAbwuAB96HeopksPstOIOQgtxXtwIPd3JQ
MH7sOLkajDreSu8tX+6Zq1hOOxKCkGCl2USlSNyrA6LzXcF/0C4Ne65kzaqPnF6u
LzKj3VFVjE+2G71gfSqys53oXRnj+jrzCZnjkQiIJS5regyO3lS10x8PH9TMoCPb
KryACLNHcDkdOqjky8fXaCoeY6hsmc1afRlNty0kn1CHVFme5J3Jb7M1Bwqj7zJT
jytykYcOmw2VHx5CqIqYs4zR5Mvae90j0TjqfB0tUKsZPfAPYtkda2A6UeaIwwBI
PYNxWHUELJvUbA0pwIkukPfJPINrRK5GrY0/YE3UF8IH4mnYF9Ky8A==
-----END CERTIFICATE-----