Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/J_AuOfjvrf7nDFVxo0yts5YgSbA.roa
File:                     J_AuOfjvrf7nDFVxo0yts5YgSbA.roa (raw, json)
Hash identifier:          FaYPhFNgg2/oXZqspqNIdppnrZzCnDDWp37fAuYeg/g=
Subject key identifier:   27:F0:2E:39:F8:EF:AD:FE:E7:0C:55:71:A3:4C:AD:B3:96:20:49:B0
Certificate issuer:       /CN=32891C582E37674795E9690ABA407FC676ECA1E1
Certificate serial:       03
Authority key identifier: 32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/J_AuOfjvrf7nDFVxo0yts5YgSbA.roa
Signing time:             Thu 27 May 2021 05:03:14 +0000
ROA not before:           Thu 27 May 2021 05:03:14 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     24362
IP address blocks:        2400:b600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32891C582E37674795E9690ABA407FC676ECA1E1
        Validity
            Not Before: May 27 05:03:14 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=27F02E39F8EFADFEE70C5571A34CADB3962049B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:5a:f1:c6:21:db:f4:3d:7f:9c:55:d9:a9:
                    25:f1:1e:7b:a7:a9:c7:75:98:5a:b0:dc:70:96:e1:
                    96:54:59:40:37:64:9c:cf:41:4a:34:0a:49:95:38:
                    b7:ae:52:b7:eb:ce:bb:59:58:b8:0f:15:14:c9:e8:
                    00:07:4d:13:95:08:7b:f1:d4:e4:b4:ab:7a:93:68:
                    40:f3:7b:29:8b:89:a0:06:6c:af:53:7c:f1:2e:fc:
                    6b:5b:8c:12:61:c6:1f:ba:02:5d:ee:ed:33:a4:d3:
                    e0:f7:a8:38:97:8c:9b:c4:49:29:d2:6d:d1:46:8a:
                    30:4c:5c:e3:9c:0b:34:b1:79:9c:6d:7c:2a:85:1c:
                    45:24:87:84:53:63:52:8e:a3:2c:92:5d:3b:67:fe:
                    23:36:09:f4:34:f6:67:10:04:07:6b:b3:26:85:ad:
                    e4:99:2d:5b:f6:db:e5:e6:e9:f8:45:0a:ef:d3:47:
                    f7:c9:a7:b7:36:d8:2f:d6:3d:b3:ae:64:95:b0:49:
                    bb:51:58:f3:a0:0a:fb:1d:31:b7:b3:52:c0:21:44:
                    a0:d0:5f:68:5d:6c:49:e4:94:2d:3c:f3:a4:df:8f:
                    e0:16:24:c6:41:e0:4a:98:c2:82:08:52:ee:47:b5:
                    20:e4:bf:36:1e:f0:d9:34:27:71:fa:2b:86:2a:08:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F0:2E:39:F8:EF:AD:FE:E7:0C:55:71:A3:4C:AD:B3:96:20:49:B0
            X509v3 Authority Key Identifier:
                keyid:32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/J_AuOfjvrf7nDFVxo0yts5YgSbA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b600::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:ba:ea:ce:41:9b:a5:08:1f:2a:38:94:e9:f9:b0:81:0b:
         a5:71:50:13:cc:2e:fb:f1:88:86:69:3a:52:07:2d:27:0e:8a:
         3b:6b:46:08:d9:e0:40:da:ea:70:7e:7f:57:11:aa:a2:80:96:
         ce:90:b0:50:4e:45:56:e3:94:d3:ba:07:51:9a:d4:5a:39:76:
         47:ef:48:2f:24:f7:c7:c4:a6:68:7b:81:75:1d:c6:d6:f0:06:
         74:8f:ca:5a:65:39:83:31:1a:50:0d:35:86:6c:7a:02:02:e6:
         d8:56:53:4c:44:42:0a:e6:e2:97:a2:77:47:a3:8c:fb:4c:96:
         92:82:1a:8c:0e:80:17:94:4b:f7:e1:ca:6c:48:04:f8:6a:5d:
         4f:b6:a0:f4:98:c3:fa:51:13:34:56:d0:fa:f9:23:4e:e4:0d:
         88:ab:a8:2d:43:36:8f:85:83:7c:49:2c:55:b3:e6:fd:6a:df:
         30:46:a7:08:06:bc:11:b4:e0:fe:d0:b6:ae:65:de:1e:25:b7:
         6b:fa:f7:a7:e5:3a:95:c5:35:ca:24:bf:a6:de:be:9e:f2:52:
         cc:60:f7:ca:7e:fa:2b:a8:f5:e8:ad:f2:8c:27:2b:85:32:7b:
         29:97:15:ac:b6:c7:72:a3:23:e1:ef:ee:bd:f6:1f:c6:e5:29:
         02:21:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org