Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa
File:                     hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa (raw, json)
Hash identifier:          gSXmlZm3VPludDL5XTNZI5h/Zzl8gC1xsn8ubIpZ3ro=
Subject key identifier:   84:29:75:14:95:AE:65:16:88:FB:D2:5B:EC:3D:FF:66:51:0D:B8:C4
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       257D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa
Signing time:             Tue 07 Jun 2022 10:06:23 +0000
ROA not before:           Tue 07 Jun 2022 10:06:23 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     24426
IP address blocks:        36.0.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9597 (0x257d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Jun  7 10:06:23 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=8429751495AE651688FBD25BEC3DFF66510DB8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:99:eb:65:0b:5d:98:d6:8c:e3:b5:3b:6c:
                    e0:d2:4e:e3:38:d7:c0:6b:a1:dd:07:14:de:58:20:
                    74:9f:39:01:f7:e2:f3:2c:13:2c:5f:1d:3b:08:98:
                    80:d7:c5:c0:63:19:a7:69:4a:84:bb:3f:0c:8a:4f:
                    d0:7f:46:13:92:47:30:53:cf:82:75:97:b1:7a:b4:
                    ba:c3:9d:af:70:00:c1:e5:7e:51:97:1b:64:86:0e:
                    f9:a8:aa:72:a2:cc:61:5c:43:d8:6d:16:70:6a:b9:
                    4a:1a:a5:ca:23:0b:13:fa:4d:39:6b:17:0c:fc:f3:
                    18:36:5f:8b:e0:91:65:ce:78:23:e6:d8:7c:a3:fb:
                    bc:de:72:2e:30:bb:70:4b:42:63:8e:15:bc:1d:d5:
                    9f:9f:ef:f7:82:3c:47:60:8a:a1:d9:e2:ad:3e:69:
                    9d:42:96:67:9c:2b:7b:73:2c:ed:f6:8c:c1:24:b2:
                    eb:da:48:10:0f:3b:4a:a9:68:65:df:ff:f8:97:f8:
                    43:e5:9f:88:91:e4:62:01:a9:2d:40:cd:da:4e:9d:
                    56:d1:d6:49:f0:b4:d6:6c:83:9b:9b:13:66:19:19:
                    fa:3a:2c:04:bd:5c:cf:6c:34:07:04:04:27:28:05:
                    1a:92:cb:57:82:bc:1c:fa:bb:6d:ec:67:65:32:84:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:75:14:95:AE:65:16:88:FB:D2:5B:EC:3D:FF:66:51:0D:B8:C4
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:6a:02:e5:7a:20:97:45:f3:33:4e:6e:0f:39:73:de:2a:1f:
         a8:b3:df:17:25:df:b8:b5:5a:b5:0b:1b:c6:b2:72:bf:35:d1:
         45:45:b1:e2:e3:6d:02:ee:88:6b:cf:42:b9:cb:d2:78:39:55:
         8c:59:ff:49:6d:f6:73:8f:94:fc:d9:fe:bb:5a:e6:85:d0:c2:
         32:4c:89:69:f8:5c:11:30:cf:02:c1:48:2e:26:86:5a:be:4a:
         eb:c8:f9:01:03:d5:be:67:bc:f7:59:b7:ad:72:d3:3d:1b:11:
         60:e3:65:96:b8:d0:f5:d8:64:60:ca:5e:83:72:32:3e:09:3f:
         6a:95:6c:c0:97:51:4c:01:68:fd:23:a3:01:88:f8:f2:aa:ca:
         33:e3:4d:25:9c:d9:56:6d:26:0d:08:2b:59:35:6d:fb:af:d2:
         dc:d7:4e:4e:19:63:19:f5:fe:ae:0b:29:7b:6c:cf:c3:01:9c:
         74:53:ce:15:79:96:13:cd:de:bb:fa:70:b3:c1:84:05:f8:29:
         41:f3:19:21:c4:50:53:f0:2e:cb:14:22:c8:71:1f:79:42:f2:
         86:4f:19:c6:22:82:38:ba:27:85:90:54:22:9e:e1:fb:38:fd:
         e2:55:7e:d7:93:54:29:a7:7e:ed:11:6d:47:14:9d:3e:6f:4b:
         f4:a6:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:01 2024 by rpki-client on console-ams.rpki-client.org