Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/SCmUT6Wjjj5e5TYTEv0DjkNq2yU.roa
File:                     SCmUT6Wjjj5e5TYTEv0DjkNq2yU.roa (raw, json)
Hash identifier:          DB63RaS+YTArmOJ9kHwyWqCXitWTd8d7Wiup8MOjpJs=
Subject key identifier:   48:29:94:4F:A5:A3:8E:3E:5E:E5:36:13:12:FD:03:8E:43:6A:DB:25
Certificate issuer:       /CN=37EE5BEF33331732156BE0B231C7D0D29B00E537
Certificate serial:       070F
Authority key identifier: 37:EE:5B:EF:33:33:17:32:15:6B:E0:B2:31:C7:D0:D2:9B:00:E5:37
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/SCmUT6Wjjj5e5TYTEv0DjkNq2yU.roa
Signing time:             Wed 15 Dec 2021 09:53:19 +0000
ROA not before:           Wed 15 Dec 2021 09:53:19 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     54994
IP address blocks:        203.130.50.0/24 maxlen: 24
                          203.130.52.0/24 maxlen: 24
                          203.130.63.0/24 maxlen: 24
                          220.243.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EE5BEF33331732156BE0B231C7D0D29B00E537
        Validity
            Not Before: Dec 15 09:53:19 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=4829944FA5A38E3E5EE5361312FD038E436ADB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:fa:25:63:98:75:5b:3a:6b:80:58:f3:6e:
                    66:21:58:8e:07:90:7c:3f:80:4e:f3:ca:10:a6:2a:
                    5c:c6:37:54:4c:b4:22:84:67:3f:e3:24:8a:62:40:
                    41:48:44:a0:72:4f:f9:a6:25:fd:d5:58:de:0f:45:
                    8c:44:86:f8:b0:44:65:d5:8d:64:eb:ad:e3:c2:29:
                    d6:28:5b:73:7b:92:93:23:5e:b6:63:4a:e3:36:9f:
                    22:1f:b6:bf:18:91:e9:92:1a:96:f4:67:6b:35:95:
                    db:fb:05:8e:15:17:8e:31:92:96:b1:37:1b:fa:fe:
                    72:00:a3:63:5c:f9:26:be:8e:e1:94:b6:d9:a2:67:
                    12:23:6f:cc:c7:ee:82:6a:b2:50:e2:f4:bc:38:bc:
                    ff:41:20:1b:32:68:02:52:13:f9:3c:3f:f3:2a:f5:
                    59:1f:93:de:ec:ed:92:16:73:93:3b:89:64:01:42:
                    9d:65:07:77:07:5a:4f:65:53:a6:33:38:87:6a:2a:
                    c5:a0:15:6b:e7:87:80:72:5c:a3:d2:72:14:01:d4:
                    a9:cb:84:a2:87:b6:9b:ea:63:fd:37:a7:7b:ad:c2:
                    06:ea:59:35:19:58:bf:9d:96:4c:6c:bd:46:a5:d7:
                    ec:fe:1a:f5:3e:12:7f:48:9e:f9:f4:98:09:8b:d4:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:94:4F:A5:A3:8E:3E:5E:E5:36:13:12:FD:03:8E:43:6A:DB:25
            X509v3 Authority Key Identifier:
                keyid:37:EE:5B:EF:33:33:17:32:15:6B:E0:B2:31:C7:D0:D2:9B:00:E5:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/N-5b7zMzFzIVa-CyMcfQ0psA5Tc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/SCmUT6Wjjj5e5TYTEv0DjkNq2yU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.50.0/24
                  203.130.52.0/24
                  203.130.63.0/24
                  220.243.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:77:2c:80:4c:7d:91:6c:11:33:38:a8:38:ca:fd:ab:ee:50:
         80:30:e8:be:6d:e1:76:2a:73:65:b0:8c:4d:11:61:48:b8:ae:
         c7:05:be:8c:0b:d5:e6:e1:95:26:73:1c:e1:c1:24:72:b0:18:
         8f:96:f1:fa:7d:f2:69:37:8e:96:64:2c:ea:cd:45:57:2f:7c:
         40:f3:b6:8b:e8:7f:89:a9:e9:f4:b3:64:ca:33:cd:73:3c:ca:
         b4:b3:29:ff:de:1d:ff:9e:0c:07:ca:4c:df:56:de:e9:22:ab:
         aa:38:dc:64:d1:21:10:99:aa:c0:2e:a8:bb:65:f6:c7:d0:a4:
         87:b8:fd:62:3c:7b:43:a4:35:9e:e2:4d:b6:20:81:0c:b1:c9:
         78:d3:97:47:9d:37:35:e9:b4:7f:24:2d:8a:06:4a:f5:5a:8b:
         81:1c:e9:7f:2b:06:41:d5:ef:0a:3d:56:b2:f5:de:a3:88:38:
         fa:0a:cc:9b:a9:68:5c:0f:44:af:9e:ff:76:ab:cf:0b:73:1f:
         4d:80:46:a4:cf:54:fb:03:82:6f:ba:e9:1f:7d:ba:37:ef:e4:
         00:60:70:17:e1:fe:0e:e1:17:6f:cc:cb:cd:03:de:e6:1a:e9:
         f1:b2:a8:c5:3b:25:58:c8:9e:f2:d2:4e:5f:77:c8:82:72:75:
         a3:70:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org