Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/6337A9C2C44B11ECA77F776BC4F9AE02.roa
File:                     6337A9C2C44B11ECA77F776BC4F9AE02.roa (raw, json)
Hash identifier:          0wxKqQvbRyKtKH65dCMMCFN1vyaRh1yX9thALePIe4M=
Subject key identifier:   59:0A:74:84:A6:E9:4F:B0:0A:CB:DE:20:C3:D0:26:7F:CA:36:66:55
Certificate issuer:       /CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
Certificate serial:       37
Authority key identifier: 03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/6337A9C2C44B11ECA77F776BC4F9AE02.roa
Signing time:             Mon 25 Apr 2022 03:54:21 +0000
ROA not before:           Mon 25 Apr 2022 03:54:21 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     64021
IP address blocks:        150.129.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
        Validity
            Not Before: Apr 25 03:54:21 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62661b6d-8f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:f9:96:30:87:93:06:26:08:89:50:a3:1d:
                    f7:45:95:b6:5d:7c:d2:33:81:fd:85:a8:07:ba:82:
                    70:cb:a2:56:dc:1c:fd:67:a2:b9:75:b2:71:3d:64:
                    ca:0e:bd:b3:7e:ff:22:aa:44:a3:f2:b5:06:e5:36:
                    f3:b1:5a:b3:ff:88:ab:a3:5d:22:c0:a1:7c:93:18:
                    d6:58:80:e4:b0:8f:08:81:ce:e6:29:00:13:6a:b9:
                    40:79:a9:0b:5b:aa:a2:7c:4b:91:0c:01:5e:06:81:
                    e8:b0:71:0b:45:8d:75:61:70:23:81:fd:44:70:aa:
                    88:1f:94:a0:6a:57:c4:f0:0e:0e:af:e0:ab:87:7e:
                    98:d6:17:ef:ca:93:dc:fa:b2:ae:7a:26:5e:1b:57:
                    42:de:3f:e4:79:09:a0:70:54:e0:5c:13:f2:99:19:
                    c0:19:82:1c:94:90:3a:52:65:d7:25:68:b6:1b:80:
                    1b:43:28:cf:20:85:a7:7d:98:b7:89:51:bd:fc:96:
                    1f:b8:89:b1:88:1f:ce:a4:63:5c:71:5b:9f:4f:e8:
                    ac:15:d9:1b:10:d6:ab:9e:69:04:fe:0c:5a:f0:90:
                    48:67:40:77:69:a7:6d:30:29:fe:08:aa:9b:fa:d0:
                    08:de:74:76:c8:7f:ee:1c:ea:f0:98:ec:1b:18:dd:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0A:74:84:A6:E9:4F:B0:0A:CB:DE:20:C3:D0:26:7F:CA:36:66:55
            X509v3 Authority Key Identifier:
                keyid:03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/Awoex_wM6fofJJGblupk2TOa96s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/6337A9C2C44B11ECA77F776BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:89:ab:0a:be:1f:ab:96:ed:6d:89:98:d9:8e:09:df:12:a1:
         4a:55:aa:c5:3d:6c:bd:46:16:93:de:61:61:3d:dd:2e:4b:19:
         99:28:be:3d:35:78:55:3b:cb:c4:19:e6:4c:83:f2:e3:80:6f:
         f2:5d:12:ee:2e:e8:49:6f:1b:fc:53:04:2d:38:db:9f:06:b4:
         03:1f:89:63:88:36:62:10:b7:af:97:ad:02:ce:be:a2:3e:5b:
         9c:e4:58:88:f1:a1:99:bb:af:f6:0a:84:83:00:50:4a:c0:30:
         86:3e:62:e9:05:13:db:66:4e:78:f3:9f:ff:31:3c:39:0f:72:
         d4:05:8f:72:34:cc:7f:98:c8:9f:01:64:29:d9:fc:71:7c:d5:
         4b:30:9d:dd:ce:9f:91:83:74:ab:0c:be:b4:61:be:68:5e:84:
         75:6e:1a:77:84:05:50:06:fe:37:e4:bf:a0:ca:61:bc:cf:08:
         11:b0:10:a8:a2:80:dd:01:6f:b3:31:23:4e:ca:ea:ec:ba:33:
         75:7b:87:29:3e:90:a1:db:5c:a7:8d:17:32:9f:f3:b8:3c:a8:
         70:7a:80:93:57:3c:9c:d8:4e:27:ba:ba:c8:59:dc:55:6c:d3:
         55:a3:50:a1:b1:06:ea:a6:cd:26:9e:f4:60:23:0a:3b:7e:07:
         62:9e:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org