Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D5813750FC7311EB8E369E75C4F9AE02.roa
File:                     D5813750FC7311EB8E369E75C4F9AE02.roa (raw, json)
Hash identifier:          75KIiNNqzZMoTkNRQNnspX+oeP0MkV2Kxz9+X1e5Auo=
Subject key identifier:   CF:81:9C:2B:11:95:4F:6E:31:1B:73:68:D6:03:78:34:47:11:3A:84
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0350
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D5813750FC7311EB8E369E75C4F9AE02.roa
Signing time:             Wed 02 Mar 2022 13:50:56 +0000
ROA not before:           Wed 02 Mar 2022 13:50:56 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     213122
IP address blocks:        144.48.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Mar  2 13:50:56 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=621f7640-91dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:17:e9:4d:29:0a:41:18:17:c7:98:0a:7f:
                    66:9e:ee:75:31:e8:b8:25:d0:02:bb:9b:04:9a:f9:
                    0f:14:09:28:46:3e:f3:cb:02:0e:81:db:a7:f5:fb:
                    0d:6e:d5:ce:49:07:e6:d5:74:96:66:35:b5:d2:ab:
                    39:82:19:2e:d6:38:bd:7c:e2:3a:1d:08:ac:24:35:
                    c5:b2:92:ae:49:fa:f8:b3:90:76:41:8c:78:65:a1:
                    42:a0:7b:d3:f1:14:e6:97:6e:9b:7b:b8:be:23:e1:
                    1c:05:0c:cb:44:6b:e7:70:86:64:0b:00:0f:51:f4:
                    02:26:74:bc:2c:52:d4:76:f9:e9:35:df:d4:61:c5:
                    08:0e:fc:ed:82:62:e1:9d:dd:91:b5:c9:46:81:78:
                    83:11:7f:a6:1d:23:0c:50:38:36:69:a3:46:85:58:
                    65:44:c9:b4:b5:f7:ae:d6:64:6d:16:b5:c1:c1:24:
                    1c:81:d6:46:6f:13:68:57:28:c4:b0:4b:43:ef:4b:
                    71:96:1b:51:de:a8:ee:f2:7b:23:8d:4c:f4:a8:a7:
                    83:3c:90:de:70:72:13:a5:ae:05:c3:52:1a:22:27:
                    6c:1f:49:e0:27:56:9f:6a:29:80:fd:70:be:d8:6d:
                    2f:9b:30:38:dd:bf:1a:db:86:aa:ff:4a:46:3e:36:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:9C:2B:11:95:4F:6E:31:1B:73:68:D6:03:78:34:47:11:3A:84
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D5813750FC7311EB8E369E75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:93:54:8e:65:b8:83:2e:f5:8a:fc:b3:3d:b1:bb:cf:3f:
         9f:3d:fb:7c:a6:f9:55:75:39:0c:f2:8b:b6:65:e5:5c:7c:88:
         8c:fc:48:b6:e7:82:2f:fe:a2:ed:4e:9c:64:fe:1f:bd:3f:5d:
         94:c9:ac:79:0f:44:c8:ff:51:5f:0c:47:da:9a:dc:81:a0:46:
         d2:8d:a2:a5:fc:5e:95:c2:4b:bd:1d:ac:6a:db:f6:c7:2b:38:
         b4:ef:21:70:fb:38:a5:f8:61:cf:dc:f1:e5:30:c9:38:28:fd:
         dc:25:28:17:d6:89:c4:a4:0b:7e:a5:04:8e:8b:3f:03:52:7a:
         e7:08:ae:f7:a9:96:ff:29:22:65:f3:25:12:a3:9d:43:9b:63:
         af:b1:8f:a7:64:66:7f:81:8d:02:14:b1:a0:8f:50:d5:00:a4:
         d3:c5:67:d2:8b:36:01:bf:18:0d:bc:2f:61:5b:f2:fb:01:f7:
         4e:91:b3:3d:4a:0e:d9:19:f4:0a:fc:12:d4:0c:e4:35:f0:9a:
         7d:f5:63:22:f3:05:e8:b2:68:71:fe:72:b5:3f:75:a2:3a:31:
         46:8e:65:66:69:3f:c5:11:39:d5:98:a4:47:42:38:b5:43:4e:
         32:1e:6d:fd:f3:8a:79:2c:0b:6c:d5:22:3b:f4:d3:19:0a:42:
         45:61:0a:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1OTAxMTAvBgNVBAUTKDUwMjI5REUwMzVCNzI1NzJGNEUwMDI3NDcyRUI2ODI2
RkRGRTk0QUUwHhcNMjIwMzAyMTM1MDU2WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjFmNzY0MC05MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDcX6U0pCkEYF8eYCn9mnu51Mei4JdACu5sEmvkPFAkoRj7zywIOgdun9fsN
btXOSQfm1XSWZjW10qs5ghku1ji9fOI6HQisJDXFspKuSfr4s5B2QYx4ZaFCoHvT
8RTml26be7i+I+EcBQzLRGvncIZkCwAPUfQCJnS8LFLUdvnpNd/UYcUIDvztgmLh
nd2RtclGgXiDEX+mHSMMUDg2aaNGhVhlRMm0tfeu1mRtFrXBwSQcgdZGbxNoVyjE
sEtD70txlhtR3qju8nsjjUz0qKeDPJDecHITpa4Fw1IaIidsH0ngJ1afaimA/XC+
2G0vmzA43b8a24aq/0pGPjYoCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM+BnCsR
lU9uMRtzaNYDeDRHETqEMB8GA1UdIwQYMBaAFFAineA1tyVy9OACdHLraCb9/pSu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU5MC8wMjVDRDI2MjdB
NkUxMUVCODFBRjJFM0ZDNEY5QUUwMi9VQ0tkNERXM0pYTDA0QUowY3V0b0p2My1s
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VDS2Q0RFczSlhMMDRBSjBjdXRvSnYzLWxLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTE1OTAvMDI1Q0QyNjI3QTZFMTFFQjgxQUYyRTNGQzRGOUFFMDIvRDU4MTM3NTBG
QzczMTFFQjhFMzY5RTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACQMFEwDQYJKoZIhvcNAQELBQADggEBAJlbk1SOZbiDLvWK
/LM9sbvPP589+3ym+VV1OQzyi7Zl5Vx8iIz8SLbngi/+ou1OnGT+H70/XZTJrHkP
RMj/UV8MR9qa3IGgRtKNoqX8XpXCS70drGrb9scrOLTvIXD7OKX4Yc/c8eUwyTgo
/dwlKBfWicSkC36lBI6LPwNSeucIrveplv8pImXzJRKjnUObY6+xj6dkZn+BjQIU
saCPUNUApNPFZ9KLNgG/GA28L2Fb8vsB906Rsz1KDtkZ9Ar8EtQM5DXwmn31YyLz
BeiyaHH+crU/daI6MUaOZWZpP8UROdWYpEdCOLVDTjIebf3zinksC2zVIjv00xkK
QkVhCp4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org