Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/964D32A83F3F11EE9B275576C4F9AE02.roa
File:                     964D32A83F3F11EE9B275576C4F9AE02.roa (raw, json)
Hash identifier:          V1nznRS6As9dyOTK0TPhzthqXfxIcsgU7GIbiaM2wU8=
Subject key identifier:   8D:A1:DA:5F:E5:DB:87:58:7F:30:36:55:55:D7:EA:68:33:6B:3C:9A
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       2797
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/964D32A83F3F11EE9B275576C4F9AE02.roa
Signing time:             Sun 20 Aug 2023 09:54:43 +0000
ROA not before:           Sun 20 Aug 2023 09:54:43 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     201106
IP address blocks:        122.254.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10135 (0x2797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Aug 20 09:54:43 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64e1e2e3-0b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:8e:41:6b:c6:61:4f:fc:c4:35:37:98:1e:
                    c2:05:21:46:f3:84:d9:0e:f4:34:c8:2c:ac:ee:2e:
                    db:9d:a8:68:9f:d3:53:5f:87:54:1a:3d:12:be:14:
                    c4:81:e6:a3:2c:c1:00:37:b0:0e:50:ac:b0:e5:f3:
                    4c:05:4f:14:03:c5:84:80:56:ab:2c:2f:df:9c:79:
                    1f:4c:ea:b5:ce:5a:23:d2:04:73:80:43:41:89:2d:
                    d2:96:ef:c4:88:e7:41:dd:23:26:93:4a:3a:2c:ea:
                    08:04:65:d1:9b:04:50:3f:5f:88:33:bf:4f:90:1e:
                    d7:41:ae:a4:8c:66:d5:c9:3a:46:92:b4:1f:68:62:
                    97:36:fa:a9:15:6f:7b:36:d5:43:d1:04:3d:36:81:
                    4b:1d:67:35:b7:da:ee:ed:11:ed:a0:15:9f:41:fa:
                    ba:ba:eb:54:2b:e1:05:1a:d6:6c:d4:a0:71:20:bc:
                    59:e0:e0:7e:89:73:32:c0:77:4d:5e:b8:d6:21:8b:
                    10:4f:6a:52:0d:71:82:d0:a0:c6:8b:35:90:9f:9f:
                    42:36:83:18:78:c0:02:5f:9b:75:14:80:2b:fa:14:
                    7f:48:27:3e:1e:e5:58:e7:07:38:73:74:02:83:79:
                    cf:02:ae:85:ac:f4:b5:61:57:44:b5:b6:12:6a:c0:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A1:DA:5F:E5:DB:87:58:7F:30:36:55:55:D7:EA:68:33:6B:3C:9A
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/964D32A83F3F11EE9B275576C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:39:de:b5:eb:31:bf:07:fb:0e:43:75:c2:16:e2:9a:20:ba:
         fe:c3:f9:71:f3:e3:dd:63:7b:d3:72:3b:5e:20:fc:f1:b9:19:
         8d:1e:64:05:06:85:8e:21:26:dd:91:e2:98:82:12:29:82:03:
         54:37:a9:c6:31:1c:65:5f:3f:6c:1b:80:84:e4:2b:42:72:6d:
         36:0c:99:c8:93:66:be:30:42:2d:e4:06:a1:2a:02:3b:09:ef:
         b1:81:a0:52:7e:72:03:22:ff:b3:b2:15:35:81:2e:c7:97:70:
         03:ce:91:b8:f7:fa:97:86:aa:fb:40:f8:d6:41:c2:49:18:76:
         e0:cc:25:43:da:fa:d2:3c:8d:82:4f:73:da:68:30:e7:c8:c5:
         01:76:4b:8c:71:d3:06:ab:1d:34:fe:7c:6a:dc:b2:dc:70:2d:
         c2:b4:b3:ec:fe:ef:01:b9:fb:87:31:18:ff:63:3a:9e:1d:74:
         33:2a:07:d5:5a:c1:ed:c8:87:3b:42:31:e9:47:51:d0:fb:7a:
         6a:3f:50:12:0e:22:2e:ac:15:3e:81:af:f1:24:e1:1d:ef:9c:
         95:dc:99:1c:99:01:2e:78:c2:13:49:bd:fd:ec:2d:39:49:a5:
         6f:91:34:47:26:26:6d:c4:77:1d:cc:bc:f0:b5:58:6e:1a:ab:
         4d:64:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org