Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          Mnog03lTo/aMkFrLumF0CD7hDJ1wGTIc9J3Nlczd3cA=
Subject key identifier:   C0:BC:11:F2:61:E6:2F:CE:52:89:1C:7D:CE:D0:BA:D0:85:8B:0B:99
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       59CBF19D0BD33EEE065394EC15295025DDC53DC3
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     136792
IP address blocks:        170.10.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cb:f1:9d:0b:d3:3e:ee:06:53:94:ec:15:29:50:25:dd:c5:3d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=C0BC11F261E62FCE52891C7DCED0BAD0858B0B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:6f:6e:4b:26:20:fd:1c:ab:4c:58:38:98:
                    95:d0:51:90:7d:d4:08:d1:2d:69:ec:f6:3f:21:e7:
                    f1:3a:b3:84:84:06:3c:96:39:4b:8f:2f:f3:10:f1:
                    6c:b0:af:d3:01:cb:ca:61:52:27:53:d8:d9:98:b5:
                    2d:9d:3f:f5:18:e9:59:d8:de:27:fc:eb:87:e6:26:
                    50:d6:25:98:61:cc:c0:d0:4d:59:c9:7d:92:a2:29:
                    fd:18:2f:3d:f3:ea:d3:07:49:c8:e6:00:b0:2a:43:
                    dc:90:c7:0b:4a:93:60:63:02:00:63:b0:38:89:a3:
                    5a:70:93:fe:cf:f3:0d:82:10:43:74:31:92:31:f1:
                    bf:8a:cb:ff:e0:52:9d:e3:a8:4e:88:c0:d1:b2:2d:
                    4e:ff:ce:84:7d:4c:9f:69:75:ae:f2:27:ce:d1:ec:
                    56:fb:51:35:7b:3b:b3:cb:51:fd:de:21:57:d6:d6:
                    47:e5:19:70:99:82:25:16:08:19:f5:5f:d4:84:cb:
                    d9:6e:7c:95:43:21:d3:e0:24:5e:50:0b:96:2a:ca:
                    8a:b7:d7:04:f1:d2:a0:06:e4:68:8f:6c:5c:b9:22:
                    92:6e:4c:d4:d8:41:cc:9e:85:4e:4f:69:58:7f:e0:
                    ec:33:ef:12:7b:a5:3c:1c:17:27:f0:90:20:63:84:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:11:F2:61:E6:2F:CE:52:89:1C:7D:CE:D0:BA:D0:85:8B:0B:99
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:64:02:1d:8f:b6:c4:30:65:7f:5e:b5:19:7c:fe:56:31:
         de:a1:95:ee:ac:2f:00:e0:bf:41:80:1d:dc:3d:f7:4d:08:8a:
         b6:29:72:8e:03:3c:0a:e0:19:32:8e:ed:89:5c:91:c9:4e:5a:
         84:77:e4:02:c4:eb:28:44:1c:a6:6c:d0:bd:69:61:86:21:9f:
         f8:2b:d9:a4:f1:7d:e7:6d:06:12:0b:c8:87:b2:59:26:76:2f:
         62:04:78:a2:9d:60:4b:a6:2e:b4:f7:13:c7:8a:35:7d:d5:dc:
         8f:af:4f:f6:80:b3:fa:4f:a4:a6:b3:fa:df:d7:a5:37:21:ad:
         8b:2d:a3:e2:1b:1b:7e:8b:1a:e7:3e:7a:9b:6d:46:3b:99:6b:
         25:91:6a:0a:51:02:31:c7:0a:6f:ea:da:d1:72:82:fc:c9:82:
         a5:5e:d2:8b:cf:66:6d:6d:75:04:55:83:9d:30:64:4d:19:3f:
         e4:b6:d7:2c:39:2c:82:6e:29:11:33:65:c9:1c:4c:b5:92:f8:
         d7:d7:b7:87:0b:69:3f:43:33:64:dd:50:b4:0a:e0:2a:3a:8a:
         79:30:46:bb:24:d9:91:8f:8d:7f:26:a4:f7:05:35:04:62:3b:
         49:74:b6:54:1a:b6:f4:8f:50:b0:9f:5b:c7:7e:88:fc:03:62:
         42:a6:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----