Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2D762F5CC98E11E583B5610BC4F9AE02.roa
File:                     2D762F5CC98E11E583B5610BC4F9AE02.roa (raw, json)
Hash identifier:          +NVA2kzxB/ohyXTuPLl2R9qfHVTKklhMtvuwsFKQ9LQ=
Subject key identifier:   54:B4:BD:8B:05:20:6E:66:6D:EB:88:7F:A2:2B:A3:48:31:BD:50:58
Certificate issuer:       /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial:       3334
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2D762F5CC98E11E583B5610BC4F9AE02.roa
Signing time:             Tue 16 Aug 2022 02:30:23 +0000
ROA not before:           Tue 16 Aug 2022 02:30:23 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     65013
IP address blocks:        58.26.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13108 (0x3334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
        Validity
            Not Before: Aug 16 02:30:23 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62fb013e-eac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:64:ee:70:95:6a:04:02:94:e5:96:66:b9:
                    30:fe:e2:5a:6b:79:8c:51:cb:f3:46:9b:0f:cc:11:
                    54:40:6c:e8:3b:28:bd:4c:3a:45:ca:d4:ba:4c:ec:
                    f9:b1:d9:a2:74:7d:de:80:53:03:cf:bd:3b:9b:b1:
                    fd:73:1d:89:32:31:8e:0f:13:fd:0c:a6:85:9f:b4:
                    f4:16:70:89:0e:00:50:cc:b7:65:20:e2:35:73:c1:
                    9b:d9:dc:f1:01:c7:2e:e0:8d:f5:00:db:32:dd:61:
                    0b:d4:f5:2d:16:5e:08:80:0c:9f:18:73:4a:42:53:
                    32:6d:76:38:bc:89:1e:aa:11:b5:c7:d7:e0:5e:6a:
                    e3:c4:29:80:70:0e:b8:24:65:3e:58:63:65:41:12:
                    3c:47:09:99:6c:cd:19:a9:20:d1:d0:de:1f:ef:81:
                    7f:f8:28:c4:d1:af:40:6d:bf:f0:3e:7b:a5:43:06:
                    80:97:f6:36:2e:82:cc:e4:e1:7f:09:3c:14:8d:ad:
                    b9:22:ae:0e:c8:de:7f:c5:15:36:1c:2e:58:99:b2:
                    7a:f0:19:67:a4:36:7a:06:6a:e8:61:9c:6a:1c:90:
                    40:94:d6:b1:44:47:b7:64:38:83:b7:64:84:b2:b7:
                    e0:94:1b:81:f3:e8:10:19:14:8c:2c:bf:a7:70:2d:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B4:BD:8B:05:20:6E:66:6D:EB:88:7F:A2:2B:A3:48:31:BD:50:58
            X509v3 Authority Key Identifier:
                keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2D762F5CC98E11E583B5610BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.26.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:8e:ab:a8:c5:a8:87:f3:c7:25:85:3d:2e:76:1c:fb:1b:73:
         73:b4:5b:e4:30:df:a4:0c:36:ba:be:42:92:71:37:f5:fb:f0:
         08:27:73:bb:f1:a0:97:dc:4d:23:d4:18:9e:03:80:75:9b:62:
         b9:4e:6c:ca:58:3c:7f:9f:f2:c2:7c:af:52:34:93:38:c9:0a:
         4e:10:26:8c:0d:38:e2:e7:ac:63:cb:11:b2:63:f2:5f:39:52:
         9a:1a:a6:43:db:6c:10:00:47:67:8c:62:c7:2d:38:cf:0d:5f:
         3d:b0:ca:be:de:ee:3f:fc:a7:da:ec:0b:a2:9d:84:18:06:07:
         f3:55:b4:a4:9c:6a:e0:65:25:1d:86:a8:e3:d1:97:0d:8e:08:
         3e:98:ef:14:a6:d7:84:db:c9:fe:d5:e6:53:4b:fe:9c:ba:47:
         58:10:eb:37:75:c7:3b:f2:99:81:57:8b:ab:b0:58:82:9d:48:
         c7:cc:10:36:2d:37:96:7b:aa:37:cc:44:10:3f:61:da:c1:55:
         eb:10:bc:ef:e3:11:8a:d6:a6:a4:65:66:c1:97:74:65:97:c0:
         f1:46:b8:87:a9:f6:f3:c1:a4:37:54:b1:cd:76:7f:62:54:f5:
         4a:13:03:95:93:b4:4a:10:d3:3c:97:67:1d:da:b9:5f:73:cb:
         3f:1a:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org