Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/TwG-rAB5bXYWJZl9yCCtL65xL3A.roa
File:                     TwG-rAB5bXYWJZl9yCCtL65xL3A.roa (raw, json)
Hash identifier:          cWlyS6SBcTDLuAe7jXAlDiKOwepwGkKc7iwHj0kLsDM=
Subject key identifier:   4F:01:BE:AC:00:79:6D:76:16:25:99:7D:C8:20:AD:2F:AE:71:2F:70
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       60
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TwG-rAB5bXYWJZl9yCCtL65xL3A.roa
Signing time:             Fri 25 Mar 2022 13:20:09 +0000
ROA not before:           Fri 25 Mar 2022 13:20:09 +0000
ROA not after:            Fri 10 Mar 2023 09:35:39 +0000
asID:                     54600
IP address blocks:        180.223.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: Mar 25 13:20:09 2022 GMT
            Not After : Mar 10 09:35:39 2023 GMT
        Subject: CN=4F01BEAC00796D761625997DC820AD2FAE712F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:8f:11:e2:4c:bf:8d:a8:98:c3:b4:0a:f6:
                    39:1e:3a:ef:3b:ec:7a:e0:34:69:1e:e4:83:29:6d:
                    f8:9a:4b:39:1a:fb:37:9e:e9:24:f1:22:38:bc:fd:
                    6d:14:a2:49:84:a5:29:bb:bb:90:dc:05:27:ea:36:
                    23:fd:98:08:10:5f:e0:b0:21:3f:0c:a0:2d:69:b6:
                    4d:ca:00:43:76:0f:9d:31:cb:5d:57:8c:07:04:f7:
                    4e:4d:b6:50:44:31:ef:17:7c:e1:02:f6:78:84:27:
                    ba:fc:b5:11:0e:f1:19:3a:f7:c7:17:2c:8e:a0:8d:
                    26:10:e2:a1:26:dd:0f:fc:f9:d4:b8:c0:9b:9c:12:
                    72:01:11:eb:35:f0:5a:2d:56:71:a0:6a:d1:35:b5:
                    c5:4c:36:08:50:87:48:b7:92:e9:fa:39:5a:3e:7a:
                    dc:55:05:fd:a2:0c:c2:35:f8:47:6f:7f:d8:57:5c:
                    e4:4e:20:2a:42:36:5a:32:2e:40:68:a5:10:ab:39:
                    b4:c7:b6:8c:4a:de:14:f1:48:73:b7:42:61:d7:34:
                    fe:96:20:6e:10:71:45:81:b9:f3:76:97:b7:80:43:
                    53:fd:6b:a9:cd:a7:b9:15:ae:b7:bd:d0:ad:8f:19:
                    6d:78:72:56:67:8a:44:c1:ea:d2:cb:71:d4:64:24:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:BE:AC:00:79:6D:76:16:25:99:7D:C8:20:AD:2F:AE:71:2F:70
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/TwG-rAB5bXYWJZl9yCCtL65xL3A.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:c1:a0:08:20:6b:9d:9d:25:df:f4:b0:21:3e:66:26:f3:
         b9:53:99:ed:d5:56:ab:3e:6f:fb:38:ff:3d:64:2c:3b:b0:25:
         16:b6:27:ec:9d:2b:11:bb:b8:c1:04:43:b7:83:af:77:b8:e4:
         a6:12:6f:7d:ac:d3:a9:66:9a:24:79:b3:ea:44:20:97:a8:84:
         e8:2c:f6:56:4d:25:cb:49:c4:23:a9:33:c7:59:7e:b8:b0:75:
         70:6b:92:a8:71:91:5c:e2:49:b5:13:4b:38:e4:33:f7:6b:67:
         08:a8:6c:f6:22:6b:76:0b:21:35:92:1e:24:9f:f1:08:0a:2b:
         7f:7f:5a:eb:4a:87:9e:f8:4e:c7:da:f1:5b:57:c1:93:80:cb:
         2e:22:a5:91:c5:16:f4:f5:04:10:72:cf:70:69:ff:0f:27:2d:
         29:7f:65:27:22:70:53:d1:15:b3:5a:63:44:64:10:e1:0b:39:
         f5:2e:87:41:ee:ee:3c:9b:f6:ee:04:ee:92:0c:7c:ef:0a:7a:
         ef:39:a5:54:89:74:46:be:ad:08:95:ed:47:2e:1b:b3:7b:bb:
         c5:2a:8b:71:76:55:6b:22:1f:7e:d7:63:4b:40:f6:94:c1:6f:
         df:33:16:2b:5b:45:a2:6c:aa:25:7c:dc:d4:50:7f:62:af:d8:
         d5:ca:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----