Route Origin Authorization

$ rpki-client -vvf rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e20333936393832.roa
File:                     323630323a666364333a3130363a3a2f34382d3438203d3e20333936393832.roa (raw, json)
Hash identifier:          tHOdUK1auYOyEPqZoCZgO2JWNBAKcrdze3PJgsxQRnQ=
Subject key identifier:   25:B0:F3:A4:67:A3:0D:DF:46:B6:B4:BB:73:C7:EC:86:F7:2E:3B:9F
Certificate issuer:       /CN=8A15107195E63966ABA1997AD31382979C75F736
Certificate serial:       6AD3DEDCC972E3E60BE23CF19A2B2B6D5FE4C088
Authority key identifier: 8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer
Subject info access:      rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e20333936393832.roa
Signing time:             Sat 29 Jun 2024 19:20:13 +0000
ROA not before:           Sat 29 Jun 2024 19:15:13 +0000
ROA not after:            Sat 28 Jun 2025 19:20:13 +0000
asID:                     396982
IP address blocks:        2602:fcd3:106::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d3:de:dc:c9:72:e3:e6:0b:e2:3c:f1:9a:2b:2b:6d:5f:e4:c0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A15107195E63966ABA1997AD31382979C75F736
        Validity
            Not Before: Jun 29 19:15:13 2024 GMT
            Not After : Jun 28 19:20:13 2025 GMT
        Subject: CN=25B0F3A467A30DDF46B6B4BB73C7EC86F72E3B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:30:12:71:53:bb:a5:4d:df:25:4b:66:55:
                    c1:05:97:16:27:c4:8a:7b:f4:70:2f:2c:7d:f4:0e:
                    53:b3:5e:3d:72:6e:49:27:81:01:61:96:9e:c5:e1:
                    2c:c8:df:ad:84:c4:04:d8:ec:05:22:83:a8:41:01:
                    e2:4e:50:bc:be:f7:e4:09:5e:75:40:67:93:3e:91:
                    84:ea:3a:b6:15:ef:8a:64:b2:18:0d:72:f4:80:f3:
                    2e:10:ad:76:7e:fd:dc:d6:09:89:2b:f6:f6:63:4c:
                    1c:66:18:bb:e6:1a:c4:7c:cb:cd:ba:ae:10:f0:7a:
                    8f:50:2a:50:2b:0a:63:52:bd:f4:37:50:0c:72:c9:
                    ea:cc:f1:f8:98:47:9b:09:95:60:c6:1d:6c:93:37:
                    ee:53:00:f2:bc:27:91:bf:a0:df:9f:c9:e5:04:56:
                    af:cf:13:f4:20:52:22:52:78:53:fa:5d:4a:1f:3e:
                    da:8d:a1:86:32:d2:25:84:65:d8:83:64:5d:f7:0d:
                    e7:92:b1:1a:e1:60:52:b4:96:10:f6:6c:ff:64:a5:
                    9f:18:9e:8b:08:d4:85:9a:76:f5:74:ce:4e:31:9e:
                    25:15:39:44:90:e5:34:3a:6f:92:cf:31:2e:03:da:
                    92:a2:a5:1e:8a:70:2c:b9:84:2e:9a:af:30:ae:12:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B0:F3:A4:67:A3:0D:DF:46:B6:B4:BB:73:C7:EC:86:F7:2E:3B:9F
            X509v3 Authority Key Identifier:
                keyid:8A:15:10:71:95:E6:39:66:AB:A1:99:7A:D3:13:82:97:9C:75:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/8A15107195E63966ABA1997AD31382979C75F736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8A15107195E63966ABA1997AD31382979C75F736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.miralium.net/repo/Miralium-Research-RPKI-CA-A1/0/323630323a666364333a3130363a3a2f34382d3438203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:f9:72:f7:64:60:72:3e:db:f4:8d:35:8a:c6:7e:81:33:
         63:03:7c:56:21:45:64:b7:c2:64:f2:32:ae:c5:67:23:a4:80:
         45:e3:2f:90:c3:df:68:b2:b3:4b:56:f9:0e:04:01:42:66:ac:
         65:b1:90:be:8d:5e:19:02:2c:2c:54:56:1b:ba:6c:24:78:17:
         ab:e0:9e:6a:6a:e5:a4:8f:d1:fa:d0:3d:da:5c:5a:58:33:cc:
         a9:34:64:42:94:8f:3d:ce:5d:71:ce:69:ef:92:c0:55:19:c8:
         b4:c1:6a:cf:23:3d:8f:0e:6a:75:9a:ea:fa:08:0f:c6:32:ee:
         c3:dc:46:01:39:30:bb:d5:52:e8:e3:2f:66:5b:e7:2e:7c:f9:
         c7:66:2c:c3:65:79:2d:4a:c1:da:6e:26:c9:37:74:9d:2e:a2:
         87:e9:1b:b7:12:63:50:ed:4c:8f:41:78:8d:f8:35:58:1f:9a:
         d4:db:b1:54:79:7d:2b:a1:9e:fe:4e:dc:5e:d7:f9:bc:27:50:
         43:20:ae:fa:2a:e1:e9:38:78:32:e6:48:68:12:80:82:94:a8:
         bf:51:59:a7:0d:20:fe:da:49:ae:af:3f:fb:53:7b:5f:22:d1:
         7b:9d:cd:2e:84:db:6b:c3:19:1f:a1:69:2c:cb:64:1b:ff:5b:
         e5:e4:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----