Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Jpl-0pcRELns7Fvtmv8iAoGF1Ic.roa
File:                     Jpl-0pcRELns7Fvtmv8iAoGF1Ic.roa (raw, json)
Hash identifier:          uQWcuz50lbgST6JAUWgrerS3jdcMXpwjVegzC+hXtsU=
Subject key identifier:   26:99:7E:D2:97:11:10:B9:EC:EC:5B:ED:9A:FF:22:02:81:85:D4:87
Certificate issuer:       /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial:       0842
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Jpl-0pcRELns7Fvtmv8iAoGF1Ic.roa
Signing time:             Wed 14 Jun 2023 03:54:04 +0000
ROA not before:           Wed 14 Jun 2023 03:54:04 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     4842
IP address blocks:        43.250.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114 (0x842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
        Validity
            Not Before: Jun 14 03:54:04 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=26997ED2971110B9ECEC5BED9AFF22028185D487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:2e:f8:61:8b:90:17:57:8e:97:4b:ef:0e:
                    fb:c6:86:52:e0:b2:bf:53:8c:13:9b:f8:b6:39:c2:
                    7c:80:ae:ad:b1:3f:08:a6:a5:d1:ab:d5:b5:4c:44:
                    f8:07:59:9f:af:28:11:ab:eb:0d:9e:af:e6:15:28:
                    57:db:7e:6e:20:17:cf:14:30:58:ee:e5:e5:6b:8f:
                    6a:b8:7a:56:85:44:0e:da:35:13:38:c0:0c:44:d5:
                    55:9f:d7:87:d8:74:5f:53:c4:00:93:fb:51:01:34:
                    5d:59:14:25:b6:e6:32:84:53:ae:0c:0b:f3:2c:65:
                    36:5f:a5:c7:32:5d:59:5a:6d:e5:10:d8:b1:8c:56:
                    12:51:3f:1c:65:63:5f:b6:2e:37:af:dc:d8:70:4f:
                    e9:77:e3:4e:89:71:f2:65:a1:d7:e4:88:e2:70:66:
                    6a:b8:b5:bb:99:89:94:2f:f4:29:6e:09:00:cd:04:
                    3a:d1:38:ba:f4:4f:f9:d6:8c:40:ec:23:05:08:8c:
                    a3:50:4e:ee:d2:53:3a:35:9c:a1:04:7e:6e:4d:7d:
                    fe:1f:b4:77:7b:c6:4d:57:6c:50:6e:79:e3:42:08:
                    5e:84:cd:6b:3c:54:82:01:a4:f8:26:35:02:16:98:
                    b7:4c:63:b3:1f:ae:13:b4:30:98:94:4b:13:73:b1:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:7E:D2:97:11:10:B9:EC:EC:5B:ED:9A:FF:22:02:81:85:D4:87
            X509v3 Authority Key Identifier:
                keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Jpl-0pcRELns7Fvtmv8iAoGF1Ic.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:b1:9f:0d:2b:d9:16:a2:65:df:92:92:e1:6f:24:fe:95:fe:
         21:31:20:ca:4e:a5:bf:d1:d1:e2:c6:af:59:82:2e:79:3f:dd:
         aa:a3:07:b9:2f:19:2f:b8:56:83:5a:f5:d1:21:89:d8:89:69:
         60:35:f5:47:23:de:17:03:ec:67:d2:b0:bd:27:db:88:d1:1c:
         ae:37:39:cd:03:db:44:69:1e:86:c6:34:2b:28:c0:f1:06:10:
         0e:70:88:8b:57:6c:cc:46:d9:41:07:db:a0:72:8b:36:8e:6d:
         27:21:1b:79:3d:7e:f8:41:5e:9e:f9:d9:c1:57:37:0c:2d:17:
         06:5d:00:6e:b3:79:36:21:e9:d8:ba:c0:be:b6:2f:9e:5a:a0:
         3a:c9:c2:be:b1:26:5f:8e:bf:ec:03:80:c9:8d:66:f6:8a:5f:
         f9:31:ee:0b:bf:4b:57:9d:ac:7f:14:d4:18:b6:30:71:87:b8:
         11:a0:e4:64:83:14:cd:a8:62:70:35:b5:86:66:93:6e:36:c2:
         8a:a5:09:78:66:25:83:29:f7:3e:9a:d7:93:85:ca:d3:78:25:
         44:27:77:bc:06:ce:79:93:fc:81:67:72:a0:7c:b4:1b:89:1b:
         97:32:67:06:07:d2:21:78:f9:ff:fd:8a:37:bb:1c:36:dd:05:
         d4:97:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org