Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          PKF85imY7vCqRBzLuX7tRh91UIqZ8IKjF7XOqtCdbLI=
Subject key identifier:   F0:16:02:FD:D7:34:B2:BD:15:A0:FA:6E:72:6B:BF:9D:3B:29:02:82
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0B9FDAA66F57EAEFF7399B27BC9031CD1CBCC772
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:31 +0000
ROA not before:           Fri 02 Aug 2024 11:19:31 +0000
ROA not after:            Fri 01 Aug 2025 11:24:31 +0000
asID:                     30031
IP address blocks:        2620:134:6002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:da:a6:6f:57:ea:ef:f7:39:9b:27:bc:90:31:cd:1c:bc:c7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:31 2024 GMT
            Not After : Aug  1 11:24:31 2025 GMT
        Subject: CN=F01602FDD734B2BD15A0FA6E726BBF9D3B290282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:16:cf:ff:ac:e7:6e:e4:4b:45:49:00:1f:
                    d9:cc:e5:08:41:2e:3c:ea:69:0d:03:b5:ff:29:a2:
                    89:ab:31:e4:85:1b:64:4c:86:57:87:30:2e:f8:e8:
                    53:ca:ac:d4:07:b2:a2:68:51:26:b9:4a:71:c5:ad:
                    5a:31:c5:fc:0a:6f:88:7c:35:98:63:94:c9:48:1f:
                    93:fb:64:76:f1:83:dd:de:eb:39:0d:67:78:8d:d9:
                    13:bc:56:1b:08:32:f8:99:4b:d5:d5:60:5e:e7:82:
                    49:72:bd:65:a6:dc:ff:71:ed:3c:6d:29:b3:5c:3b:
                    30:0d:85:58:eb:9f:e0:76:39:af:0a:00:64:88:37:
                    20:b2:8b:af:af:f3:98:b1:ed:39:8a:f6:67:3b:c2:
                    a8:71:95:d1:fe:0f:ca:c3:b7:f5:49:65:14:b5:fa:
                    91:64:8b:c8:c7:39:6f:32:f3:bd:3e:9c:be:d7:eb:
                    a3:2e:66:61:28:7c:23:bf:da:5b:f9:b5:56:67:f5:
                    a0:a1:5a:12:3a:86:47:cd:c5:7b:13:c8:ad:2f:bf:
                    8e:0e:bc:55:6f:0f:fd:52:dc:61:1e:53:28:bd:d2:
                    4c:76:da:31:3d:19:c7:e0:55:86:d5:05:66:75:8a:
                    1a:ce:8d:bd:f7:c8:64:08:1d:51:da:6d:e2:6c:9c:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:16:02:FD:D7:34:B2:BD:15:A0:FA:6E:72:6B:BF:9D:3B:29:02:82
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ff:21:8b:09:2e:8f:17:be:71:e9:12:2f:50:f1:7c:94:e8:
         ec:df:ac:96:84:13:18:ca:37:28:0e:a9:c5:5d:b0:47:60:79:
         3a:1a:d8:c3:31:6c:38:2e:c5:90:d5:bd:fb:44:e0:64:15:50:
         84:53:00:5a:1a:eb:b7:00:39:89:3e:f9:d7:11:e4:3f:20:4d:
         3a:c6:ba:0a:f0:87:20:1a:18:53:6d:88:06:96:29:ec:50:85:
         d3:0c:10:0d:54:9d:94:67:56:13:a3:c4:2d:b9:73:c9:75:06:
         c6:4d:b6:9f:35:a7:92:b4:d3:21:15:e1:3b:9e:4b:82:83:77:
         2a:64:78:9f:02:25:ed:60:9a:91:e1:12:3b:9a:0b:8e:40:ab:
         08:20:7a:db:a1:bf:92:1f:a4:68:f6:5d:a7:17:af:2b:75:7b:
         74:35:57:85:11:b8:23:cd:8d:67:bd:1b:c5:00:db:16:70:90:
         ce:6c:1c:d7:0b:84:79:d5:c9:d6:bd:b6:fe:c0:7f:0b:d9:78:
         7e:63:64:9c:e8:e6:7d:ee:69:cd:49:af:33:a8:d0:f2:f6:28:
         ad:79:96:43:30:09:60:0b:a7:02:6e:dc:a4:68:f4:05:8c:e6:
         83:19:9f:61:98:f9:19:dc:64:ad:4f:f7:20:bf:cd:40:a1:a9:
         06:20:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----