Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B6B004188AA211EEB59A4017C4F9AE02.roa
File:                     B6B004188AA211EEB59A4017C4F9AE02.roa (raw, json)
Hash identifier:          loOS5IJ6DCU2lXHB9d4uCCb7UnHwi/pr/27C2/qvzwI=
Subject key identifier:   BF:68:84:8A:21:3A:D3:6B:23:BF:D0:B9:E2:E6:CA:65:4B:47:FE:FD
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       2811
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B6B004188AA211EEB59A4017C4F9AE02.roa
Signing time:             Fri 24 Nov 2023 08:23:15 +0000
ROA not before:           Fri 24 Nov 2023 08:23:15 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     47757
IP address blocks:        122.254.70.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10257 (0x2811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Nov 24 08:23:15 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65605d73-f8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7e:22:20:27:21:42:b6:f3:5a:a4:45:67:65:
                    eb:08:5e:3b:f1:37:4c:b1:af:44:49:61:4d:02:1b:
                    67:f5:15:fb:4e:f4:5a:15:8c:cd:19:9f:36:89:50:
                    df:5a:f2:2f:00:0d:0f:1b:14:c8:9d:9c:73:73:0c:
                    3f:a2:e2:5f:3c:f5:1a:68:05:26:02:b3:df:7e:60:
                    ff:c9:75:f9:e1:a5:f7:01:5e:7f:05:71:4d:23:a8:
                    b6:ff:f7:01:bf:3d:2a:b0:1e:d6:27:09:f4:ec:39:
                    3e:06:fb:39:44:3c:89:81:96:af:49:a3:91:0b:95:
                    1b:8d:e1:72:64:e6:44:b6:4a:5d:30:7e:be:df:5e:
                    36:a0:60:4c:3f:cc:1d:3e:8e:58:52:c8:d7:96:2a:
                    50:4b:ee:d8:a2:1e:86:6c:96:0f:75:5e:e5:70:91:
                    33:80:a6:90:91:c7:e1:ae:03:03:ae:c6:ec:1e:75:
                    a0:e9:71:40:eb:76:91:bc:85:39:d6:fb:8c:0c:0c:
                    fa:30:73:2b:f1:70:7a:59:87:dd:2f:f4:b0:83:4a:
                    88:0c:b0:1f:f3:10:84:06:a3:1b:3c:c7:84:ee:26:
                    fa:aa:95:53:c8:ca:eb:f1:a1:53:6f:74:99:ad:06:
                    3a:e8:a9:78:d0:4e:ac:ec:e4:a3:f2:f0:3c:8b:f1:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:84:8A:21:3A:D3:6B:23:BF:D0:B9:E2:E6:CA:65:4B:47:FE:FD
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B6B004188AA211EEB59A4017C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:e7:53:dd:ae:64:e9:80:73:90:2f:c3:e0:2e:f5:fd:5c:19:
         31:14:dc:4c:4b:85:56:67:f1:5c:52:25:06:cf:35:23:34:5f:
         e8:0a:fc:2b:6f:17:ee:9a:00:02:1c:37:92:4a:95:44:34:35:
         c4:af:45:14:2f:79:35:93:ed:bd:90:da:c7:32:95:d4:80:19:
         ca:42:b7:3f:18:97:04:19:2b:e7:bb:08:21:05:9a:fb:81:cc:
         f3:02:51:f4:c1:48:98:8f:64:e2:7c:1b:45:89:2b:4e:a0:bb:
         54:1c:07:59:d8:1d:86:c4:48:5d:6a:9a:db:34:ae:b4:91:d1:
         e6:6c:5a:14:51:62:f2:f0:c0:b2:1e:a0:c9:53:d4:1b:66:c8:
         67:79:ad:db:ec:d8:bb:e3:e5:01:07:ef:e0:ab:53:04:b4:a5:
         00:56:93:d9:d3:f2:39:75:e2:47:91:7d:86:a6:90:48:31:05:
         a9:27:de:60:e6:00:12:52:b7:29:64:90:5e:a5:47:44:6f:7c:
         7a:74:99:64:12:0d:c9:66:cc:b3:29:0b:31:35:17:43:0d:ba:
         3f:44:ef:0f:3d:6f:48:3b:0a:a2:59:6c:b7:55:cf:25:46:f8:
         70:d6:80:4d:e9:d0:0d:e6:12:28:90:9b:b7:01:d8:ed:01:21:
         88:59:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org