Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/arp8Nc_3ELerSHCRS0uGe6E8wos.roa
File:                     arp8Nc_3ELerSHCRS0uGe6E8wos.roa (raw, json)
Hash identifier:          7uEHvBBwH4/mfAdhwiJSF2AFLPFcltHzAMcPtdAtmfE=
Subject key identifier:   6A:BA:7C:35:CF:F7:10:B7:AB:48:70:91:4B:4B:86:7B:A1:3C:C2:8B
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0BF8
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/arp8Nc_3ELerSHCRS0uGe6E8wos.roa
Signing time:             Tue 27 Sep 2022 11:30:30 +0000
ROA not before:           Tue 27 Sep 2022 11:30:30 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     4134
IP address blocks:        101.49.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3064 (0xbf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Sep 27 11:30:30 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=6ABA7C35CFF710B7AB4870914B4B867BA13CC28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:52:e8:ec:59:8e:8f:d4:30:ed:62:84:12:
                    4d:bc:2f:9f:1f:ad:f1:30:fb:da:fa:6a:bd:6c:5b:
                    bb:ed:03:9d:45:71:e4:3b:4b:a7:b5:d0:7f:28:17:
                    8b:7b:3e:cc:88:92:fd:fa:b2:1d:2e:cc:31:50:fb:
                    ed:57:b7:e5:f8:f4:01:ab:37:59:05:9d:13:0b:50:
                    6f:fe:88:84:4d:91:cb:60:19:be:16:21:ab:bd:9e:
                    bb:fe:45:fd:e6:33:3a:47:58:04:da:fe:8d:df:b0:
                    96:c9:fb:e2:b2:04:c9:9c:fc:21:c6:cf:5e:0b:4a:
                    62:db:f0:1e:a6:18:5a:59:e2:d6:f3:05:86:a8:7a:
                    62:3d:5f:df:d2:73:2a:f1:2e:b6:d8:b3:9c:a4:f8:
                    e6:c7:20:c9:19:34:52:e7:c1:71:24:a3:e4:65:f6:
                    38:54:64:ca:e8:59:a2:bc:d1:c7:a2:83:5f:f0:ab:
                    02:02:bc:a0:36:7b:76:6a:07:2b:98:74:ad:c0:c0:
                    53:d4:59:0d:10:01:18:0e:c2:e6:79:ec:6b:56:6a:
                    19:57:c7:50:3f:75:50:2f:77:4d:dc:fd:91:7a:7a:
                    80:60:28:a7:ff:87:e1:f8:cb:1a:02:48:b9:75:ed:
                    37:ca:2e:65:57:4b:f8:98:1d:d5:29:e0:73:5e:3b:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BA:7C:35:CF:F7:10:B7:AB:48:70:91:4B:4B:86:7B:A1:3C:C2:8B
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/arp8Nc_3ELerSHCRS0uGe6E8wos.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:c4:ee:0a:5a:cf:6a:01:f2:aa:ba:14:3a:1f:13:1d:5b:
         e7:f1:04:a9:a7:bf:c7:89:2d:45:ad:c3:17:41:b0:a9:b7:1f:
         61:ed:ae:86:93:23:16:c7:b3:69:24:c5:dd:d6:f8:49:ed:26:
         2c:f0:3f:d4:6e:7f:12:09:97:55:6b:b2:3b:ef:fb:b6:7f:0e:
         38:c0:3a:89:88:30:84:0c:ef:65:fc:a2:b3:de:7f:68:7c:c2:
         38:6e:2a:83:b4:90:07:a4:c6:8b:6a:e2:39:fa:6b:a1:76:19:
         7a:27:aa:35:d2:f9:24:b1:cd:e7:d6:31:55:9b:94:f6:97:77:
         e1:4a:f7:1b:1f:c9:d9:88:10:5b:5b:7c:6f:23:e2:d3:48:49:
         2e:3a:fe:ba:df:5d:80:b3:87:d4:7c:6d:76:23:17:15:89:66:
         6b:29:a9:e5:37:ec:0c:ee:b2:48:6f:9d:c9:9a:55:6c:c5:d5:
         11:22:8d:70:0e:31:54:7c:b3:73:e2:22:42:61:84:df:b4:8d:
         68:3d:b6:3c:d2:75:aa:5a:3c:71:63:13:6e:36:e3:4d:ef:d4:
         f7:32:35:1d:29:36:47:29:cf:a6:50:5c:bd:3e:74:7b:f9:c9:
         f7:3a:cb:2e:56:20:d4:42:25:b9:1d:f9:ac:38:c2:70:c0:fe:
         64:7b:47:49
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4
M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yMjA5Mjcx
MTMwMzBaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDZBQkE3QzM1Q0ZGNzEw
QjdBQjQ4NzA5MTRCNEI4NjdCQTEzQ0MyOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChalLo7FmOj9Qw7WKEEk28L58frfEw+9r6ar1sW7vtA51FceQ7
S6e10H8oF4t7PsyIkv36sh0uzDFQ++1Xt+X49AGrN1kFnRMLUG/+iIRNkctgGb4W
Iau9nrv+Rf3mMzpHWATa/o3fsJbJ++KyBMmc/CHGz14LSmLb8B6mGFpZ4tbzBYao
emI9X9/ScyrxLrbYs5yk+ObHIMkZNFLnwXEko+Rl9jhUZMroWaK80ceig1/wqwIC
vKA2e3ZqByuYdK3AwFPUWQ0QARgOwuZ57GtWahlXx1A/dVAvd03c/ZF6eoBgKKf/
h+H4yxoCSLl17TfKLmVXS/iYHdUp4HNeO7czAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUarp8Nc/3ELerSHCRS0uGe6E8woswHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt
eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz
L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL2FycDhOY18zRUxlclNI
Q1JTMHVHZTZFOHdvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZlMQAwDQYJKoZIhvcNAQELBQADggEBACXLxO4KWs9qAfKquhQ6HxMdW+fxBKmn
v8eJLUWtwxdBsKm3H2HtroaTIxbHs2kkxd3W+EntJizwP9RufxIJl1Vrsjvv+7Z/
DjjAOomIMIQM72X8orPef2h8wjhuKoO0kAekxotq4jn6a6F2GXonqjXS+SSxzefW
MVWblPaXd+FK9xsfydmIEFtbfG8j4tNISS46/rrfXYCzh9R8bXYjFxWJZmspqeU3
7AzuskhvncmaVWzF1REijXAOMVR8s3PiIkJhhN+0jWg9tjzSdapaPHFjE242403v
1PcyNR0pNkcpz6ZQXL0+dHv5yfc6yy5WINRCJbkd+aw4wnDA/mR7R0k=
-----END CERTIFICATE-----