Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/FE43FEDC4F0711EEBF3B5818C4F9AE02.roa
File:                     FE43FEDC4F0711EEBF3B5818C4F9AE02.roa (raw, json)
Hash identifier:          osYhDyxDqCcaiXdDN2YVAgR4zeKWuhu+3nl9fvUxxdM=
Subject key identifier:   8D:37:FA:B2:5F:DB:CF:9D:99:8F:65:94:95:56:D1:49:F4:FE:B3:29
Certificate issuer:       /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial:       27CA
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/FE43FEDC4F0711EEBF3B5818C4F9AE02.roa
Signing time:             Sat 09 Sep 2023 11:57:04 +0000
ROA not before:           Sat 09 Sep 2023 11:57:04 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     32558
IP address blocks:        122.254.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10186 (0x27ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
        Validity
            Not Before: Sep  9 11:57:04 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64fc5d90-696c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:d9:cd:59:44:c5:4c:fe:e4:7c:40:76:0b:
                    b4:b1:b3:26:7b:9a:61:4d:58:aa:5e:ab:42:ce:68:
                    14:01:ab:d0:fc:23:c7:f5:f5:f1:45:29:73:37:d1:
                    48:75:fd:5f:da:09:34:ee:40:de:04:c1:76:8d:21:
                    8f:8a:73:80:fb:cd:28:78:ff:01:fd:7d:d2:6e:14:
                    11:59:1f:4d:c8:45:bb:bf:76:7f:c3:a6:0d:9e:92:
                    5e:17:1d:fb:41:a8:5f:7e:b6:77:49:72:67:c1:ed:
                    b0:42:68:31:e5:3a:b6:bc:af:49:59:87:9f:57:18:
                    ae:91:fc:e6:7d:b5:bc:32:cb:6c:e0:8c:87:c6:91:
                    27:68:7f:de:a7:e0:37:cd:b8:4a:55:bb:a4:85:5e:
                    98:2e:3a:a5:7a:04:62:d1:2c:42:bd:00:c8:5e:c6:
                    14:82:a1:31:a5:ed:37:3b:3e:f9:29:47:33:16:95:
                    cd:27:f9:40:21:2e:0f:74:c6:ac:00:4a:75:15:cd:
                    5e:bc:d5:7b:04:24:dc:90:4d:5d:a7:f4:5f:3e:ff:
                    97:b7:9f:5b:59:40:85:cc:04:af:33:7e:dc:e7:11:
                    a4:19:9f:f8:a2:cb:23:d0:59:db:b2:d9:8b:c1:04:
                    0a:96:c7:26:10:c6:bc:b3:fe:c5:d0:84:20:26:38:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:FA:B2:5F:DB:CF:9D:99:8F:65:94:95:56:D1:49:F4:FE:B3:29
            X509v3 Authority Key Identifier:
                keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/FE43FEDC4F0711EEBF3B5818C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:77:d2:f6:f5:40:a3:85:e0:ef:e6:8f:d6:62:36:80:a0:0f:
         5c:65:40:10:63:39:d1:4c:2b:c1:c4:df:d7:d8:4c:26:76:86:
         54:20:79:60:ea:6f:47:c0:7b:58:7c:81:52:c3:36:b0:e5:8c:
         e8:83:85:d7:16:a6:2b:90:a2:1e:fe:13:c5:6f:d7:53:72:b0:
         dc:44:ac:ec:8e:36:88:6b:bc:f5:c4:a5:10:22:86:47:f5:dd:
         c5:6c:6d:01:08:c8:3d:6e:c7:bf:fd:50:c8:bb:20:e5:53:fc:
         94:0a:33:4a:69:aa:07:d6:ca:c2:0e:a2:73:51:75:51:41:0b:
         b1:8d:3e:61:f2:43:1d:60:00:a3:d8:a2:86:9e:c1:62:4e:cb:
         55:5a:b2:ee:54:1d:93:fc:4e:2e:a8:c7:41:12:36:7e:0f:75:
         87:83:21:d7:1b:3a:e4:97:29:ab:37:6d:c7:21:68:ff:29:31:
         e9:06:f6:50:eb:9f:82:66:74:4d:9b:01:d3:b4:eb:09:53:ae:
         bb:d5:fd:4f:60:29:89:ca:44:16:03:dd:a2:5e:40:2a:0e:d9:
         19:3f:2e:40:07:4d:1a:82:37:3e:c7:09:65:55:bb:b5:2c:13:
         d5:4f:d3:a1:4a:7f:b4:45:00:c8:9e:36:73:e4:b7:e1:cb:dd:
         f4:cd:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org