Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/631E2864F34311EB9D3ABA3DC4F9AE02.roa
File:                     631E2864F34311EB9D3ABA3DC4F9AE02.roa (raw, json)
Hash identifier:          ezqEmBWrfSCUtW8lIc9EoMrWZOcXJu2jrZdEOdNGuzE=
Subject key identifier:   29:F2:5E:FA:C8:37:4D:FF:56:B7:21:41:0B:D1:03:B6:D1:D4:5E:73
Certificate issuer:       /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial:       01F3
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/631E2864F34311EB9D3ABA3DC4F9AE02.roa
Signing time:             Mon 20 Dec 2021 02:20:54 +0000
ROA not before:           Mon 20 Dec 2021 02:20:54 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     9370
IP address blocks:        133.167.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
        Validity
            Not Before: Dec 20 02:20:54 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61bfe886-ee1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:57:92:8a:7d:cf:83:21:90:07:39:44:b3:
                    79:76:90:ea:94:23:eb:25:40:b1:42:64:f9:0b:6a:
                    a1:d0:f6:33:52:54:2a:28:d5:88:6e:ae:a4:66:07:
                    23:2f:da:74:7a:dc:5e:a5:d9:b1:0b:bb:7b:5c:a2:
                    26:11:a3:86:53:89:77:53:ed:e0:bc:fc:f8:aa:4f:
                    52:62:29:8f:ad:9a:b3:74:7f:7b:44:3e:ee:c8:16:
                    cc:a4:7c:a0:f4:f8:a6:3d:3c:d9:54:51:26:74:87:
                    ae:b7:df:b0:12:3d:8c:eb:27:ab:ab:ce:7f:3a:8f:
                    1c:50:51:6f:97:c1:fa:0f:24:90:b8:8a:31:39:4f:
                    88:f6:d3:49:eb:ef:5e:1a:22:4b:98:94:b8:82:64:
                    b1:83:c6:aa:66:e4:26:11:42:d5:05:8c:3e:a7:3e:
                    6c:dc:ca:98:4b:11:6b:f5:e1:4f:09:59:0b:b2:99:
                    fc:5f:e4:31:9a:70:d3:25:53:d4:69:bd:7f:74:63:
                    9c:b9:8b:59:b3:1d:ae:e8:92:19:97:68:db:3b:ad:
                    2e:ad:cd:a3:09:15:29:1e:f8:87:0c:71:a2:15:ad:
                    b4:58:c9:75:0f:a1:3d:c8:c4:f9:9d:6f:20:88:22:
                    2e:f9:e8:01:29:31:b9:f8:3d:67:d0:af:0c:9c:3a:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F2:5E:FA:C8:37:4D:FF:56:B7:21:41:0B:D1:03:B6:D1:D4:5E:73
            X509v3 Authority Key Identifier:
                keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/631E2864F34311EB9D3ABA3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.167.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:9b:df:6d:88:11:b8:9b:a8:a2:1a:69:90:26:54:78:f6:
         82:b9:83:77:a7:24:00:d0:e8:72:30:0b:88:72:57:54:a7:7d:
         c3:8c:98:16:84:96:8f:17:df:d5:26:fe:6b:c5:d0:45:ff:f7:
         04:10:9f:9e:90:f2:cf:d1:b3:d3:8e:80:ac:2d:f5:7f:1c:b5:
         26:6f:0f:a1:db:9c:67:05:45:56:2a:f6:5e:f4:9c:4f:93:b0:
         a7:25:82:96:a9:f0:64:ae:d4:cd:5a:6a:38:db:cf:63:b5:33:
         c2:48:51:d1:37:c6:a6:94:05:a1:50:1c:51:00:8c:56:a6:9a:
         db:05:54:e7:77:62:ab:d5:f2:73:4e:e4:a6:96:4d:bd:c0:9c:
         95:79:f4:63:23:4e:16:c4:db:66:e5:9c:1e:de:fb:0c:46:fd:
         bc:ff:eb:81:94:9d:61:0e:51:68:5f:6f:36:1a:3d:5c:9c:fa:
         c8:6c:85:69:b1:1a:cd:83:87:19:71:36:2c:a5:61:e9:dd:68:
         ad:46:a1:34:6c:29:47:66:eb:38:b2:b1:4e:d8:9f:32:23:5a:
         01:c6:3d:eb:37:91:12:7a:99:8b:4e:2e:2a:1e:d6:ef:5c:0b:
         54:f5:f8:97:93:9d:ec:61:d3:82:c0:de:ae:ca:a3:d3:1c:15:
         74:8a:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org