Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/FE83EDA6C22411EC8C25706EC4F9AE02.roa
File:                     FE83EDA6C22411EC8C25706EC4F9AE02.roa (raw, json)
Hash identifier:          UNqg5Y+jUcDG9Glh9IwFW+Agj36Qrd8gF1gO+BAxees=
Subject key identifier:   A3:E6:B2:66:1D:AB:C9:97:03:D7:23:02:4C:00:38:D3:66:F9:24:1D
Certificate issuer:       /CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
Certificate serial:       2F
Authority key identifier: 03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/FE83EDA6C22411EC8C25706EC4F9AE02.roa
Signing time:             Fri 22 Apr 2022 10:14:29 +0000
ROA not before:           Fri 22 Apr 2022 10:14:29 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     9331
IP address blocks:        150.129.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
        Validity
            Not Before: Apr 22 10:14:29 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=62628004-ba50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:a9:98:ae:fc:4a:45:9f:1e:5d:ec:b4:51:
                    34:f7:fe:cf:79:b9:93:67:40:2b:e0:07:0c:87:29:
                    33:67:90:34:f1:13:27:2f:63:c9:e9:37:40:e9:90:
                    83:3d:18:5b:a8:89:b5:c4:ab:25:cf:3d:3f:42:12:
                    31:62:b6:44:35:0d:a7:6a:f3:b9:63:16:9f:99:b6:
                    2a:6e:de:de:6b:73:c4:ff:07:4e:6e:a2:47:74:57:
                    80:39:4d:1e:39:b5:98:54:d7:3b:3e:1c:f8:8b:46:
                    02:52:83:c3:86:97:26:bb:7d:e3:29:d9:0e:64:33:
                    d2:15:04:57:78:75:a4:75:13:2d:a4:81:f2:55:14:
                    f7:38:56:47:91:64:85:8a:3b:a2:dc:a6:96:91:a2:
                    c5:7a:86:88:c6:6e:30:2c:fc:25:64:da:b9:7e:8f:
                    b8:de:fb:b2:c1:ce:7d:fa:3a:b7:b0:cb:30:5b:11:
                    ca:2b:57:1b:5e:45:05:e8:17:91:17:b6:b8:61:21:
                    6d:42:12:b6:89:c9:b4:69:d1:e6:a3:6d:b0:f6:64:
                    ec:0d:c6:de:73:77:2d:02:86:a4:0e:80:e1:3f:7d:
                    2a:b1:6f:48:f0:d1:df:01:7d:4f:e6:9d:77:cb:a6:
                    c1:b5:40:61:26:ee:56:cf:57:f6:39:99:05:e0:c1:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:B2:66:1D:AB:C9:97:03:D7:23:02:4C:00:38:D3:66:F9:24:1D
            X509v3 Authority Key Identifier:
                keyid:03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/Awoex_wM6fofJJGblupk2TOa96s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/FE83EDA6C22411EC8C25706EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6d:10:d8:8d:97:05:d5:19:e1:d5:f1:1a:8e:ad:b5:0b:84:
         f0:42:86:6c:0f:cd:41:68:e1:af:1b:06:d3:d6:cd:8a:e4:f8:
         34:00:b2:ed:75:51:f0:ab:f1:e6:2e:23:9c:b4:82:ad:2f:96:
         17:ee:cf:e4:ee:85:51:ca:01:31:49:71:33:fd:df:92:c3:c5:
         72:53:6c:fa:61:07:b2:6c:bf:f9:fc:bb:31:ce:a5:29:bd:58:
         a1:97:c1:d4:06:23:71:42:42:f6:03:56:88:b2:02:16:38:67:
         16:61:26:f6:87:55:25:0d:7f:49:5f:b7:95:13:61:28:05:be:
         5a:4c:72:e5:e3:bc:18:83:73:a2:b0:e7:95:4c:d7:11:83:e8:
         13:3a:f8:7c:2a:d1:24:8f:54:11:08:2f:78:85:f2:00:fe:25:
         dd:5a:25:38:d6:f1:cc:e7:4c:a7:d6:e2:f1:04:d0:d4:68:eb:
         4d:7b:be:54:e3:89:18:a3:6a:04:0d:5c:f0:2a:09:96:71:fa:
         dd:5c:4c:3d:6f:a5:d4:d8:96:3b:0f:c4:04:a6:e4:83:ce:5d:
         54:18:ff:2b:31:bb:52:8d:b8:fe:d1:b0:53:51:a3:d2:6f:3a:
         41:56:19:3b:5a:d2:1a:d3:33:54:21:3d:19:57:ba:4d:d4:6c:
         16:b4:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org