Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/325B473EB3EE11E9A813740DC4F9AE02.roa
File:                     325B473EB3EE11E9A813740DC4F9AE02.roa (raw, json)
Hash identifier:          edIcSFe2VO5GESLWSGwVRbj7X1S3p26B6PRi251h0sg=
Subject key identifier:   5F:C6:AF:1E:CF:0D:AA:09:36:AB:D6:B4:98:07:72:B8:83:CB:28:F9
Certificate issuer:       /CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Certificate serial:       1055
Authority key identifier: CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/325B473EB3EE11E9A813740DC4F9AE02.roa
Signing time:             Fri 07 Jan 2022 06:16:25 +0000
ROA not before:           Fri 07 Jan 2022 06:16:25 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        175.41.192.0/18 maxlen: 24
                          2400:6700::/32 maxlen: 32
                          2400:6700:ff00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4181 (0x1055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
        Validity
            Not Before: Jan  7 06:16:25 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61d7dab9-a675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:a2:d4:0c:a3:e4:97:da:00:3d:f2:a6:f4:
                    3b:40:e6:9e:e6:64:97:6a:13:d4:57:3d:87:c6:d6:
                    68:b6:64:c4:8d:19:93:bd:c8:9a:a7:ae:62:09:a3:
                    a7:b3:0e:31:b2:2b:a5:9b:50:29:f0:01:2f:1e:da:
                    df:2f:86:fd:fd:87:d7:1d:7e:5a:4e:05:67:ae:93:
                    a7:08:29:84:b2:13:fb:93:78:79:c9:04:a7:8f:97:
                    5e:cd:03:3d:e2:c0:34:b8:29:39:13:bf:e1:50:c6:
                    58:b3:7d:8a:b2:7d:93:af:de:fb:01:3a:91:a8:dd:
                    3b:86:60:31:bc:31:c7:27:4b:09:21:2a:c1:c3:96:
                    e1:c1:c3:b9:2a:38:d4:ad:41:ec:65:72:93:4e:08:
                    67:e8:ff:7e:25:24:24:d3:7f:69:70:eb:2a:75:1c:
                    53:a0:fe:72:8b:32:b1:d9:20:50:26:1b:6a:6c:94:
                    37:b4:dd:3f:2c:d5:41:f7:5b:36:e2:aa:a9:2d:9c:
                    0c:31:7c:af:36:88:5c:fc:cd:cf:a3:4d:b1:64:d4:
                    a5:13:4c:e4:66:79:b1:b0:0d:48:09:3c:73:bd:a2:
                    4e:03:e5:cd:e2:77:30:2e:4a:22:4d:5a:1d:66:99:
                    29:0a:ba:c8:de:58:8e:ca:e1:95:59:5c:29:04:d7:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C6:AF:1E:CF:0D:AA:09:36:AB:D6:B4:98:07:72:B8:83:CB:28:F9
            X509v3 Authority Key Identifier:
                keyid:CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/325B473EB3EE11E9A813740DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.192.0/18
                IPv6:
                  2400:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:04:24:7d:0b:ea:3e:d3:df:f9:01:b7:02:ee:a9:32:c3:d4:
         03:c9:55:9c:5f:1e:52:64:02:a1:80:ec:8d:39:25:be:34:9c:
         91:1f:95:80:ec:7d:47:c2:81:f2:32:38:c7:96:4f:90:43:0a:
         ef:10:f6:c0:06:9f:9b:12:4a:49:ee:5c:01:69:b0:90:23:ee:
         9b:ae:57:dd:25:34:48:78:c8:6e:32:5f:39:50:93:ca:8b:f0:
         e7:92:f2:98:3f:47:5d:96:84:0a:9a:2b:63:de:c0:40:6c:f3:
         4d:e4:d8:d0:9f:1f:8e:50:95:1d:15:b7:6e:6e:1a:65:f9:4b:
         c8:47:73:6f:e5:c1:1d:04:f8:ee:9f:47:e2:9c:fa:8f:58:e4:
         8c:9c:6e:23:c3:bb:89:d9:f2:88:9b:c3:fc:73:4a:78:41:7f:
         17:3b:37:f5:71:ae:88:41:84:a8:ea:18:07:59:3b:3c:18:43:
         6d:81:82:de:f7:bc:a9:96:fa:09:01:3b:c7:cd:1a:fb:31:c4:
         b2:18:f4:f5:4c:28:d9:10:88:2f:f9:7d:e5:2c:11:00:f1:36:
         6c:94:cf:ce:e8:e0:16:e6:4a:2d:40:83:b4:0c:9f:dc:8c:45:
         19:a4:a9:45:82:5f:db:ff:bc:9c:3a:5b:9f:1b:91:22:e6:5c:
         84:e9:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org