Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/it6fqUIJzOqix9uWpwkPG5DYxwM.roa
File:                     it6fqUIJzOqix9uWpwkPG5DYxwM.roa (raw, json)
Hash identifier:          yakiVm8jY+xSDOfkNUlcp3dr7nXMdu5sGiqZTZeE96Q=
Subject key identifier:   8A:DE:9F:A9:42:09:CC:EA:A2:C7:DB:96:A7:09:0F:1B:90:D8:C7:03
Certificate issuer:       /CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Certificate serial:       04
Authority key identifier: 9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/it6fqUIJzOqix9uWpwkPG5DYxwM.roa
Signing time:             Thu 27 May 2021 05:03:03 +0000
ROA not before:           Thu 27 May 2021 05:03:03 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     398704
IP address blocks:        103.98.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
        Validity
            Not Before: May 27 05:03:03 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8ADE9FA94209CCEAA2C7DB96A7090F1B90D8C703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:c0:c9:d8:27:a4:3f:98:da:13:89:2f:38:
                    9f:e3:ce:01:06:d7:eb:bc:48:76:3c:16:9a:26:30:
                    a5:1a:1b:ea:f0:35:1a:d1:37:c8:fe:f1:b4:13:46:
                    21:12:03:db:3c:86:37:b9:28:db:6e:ca:b7:3f:f1:
                    f0:03:5b:7f:ac:9a:cf:29:9c:09:ff:2e:e0:66:41:
                    b4:88:52:55:35:e3:c1:4d:0f:7c:7c:ba:cc:90:2c:
                    df:91:a4:20:ab:53:44:92:c0:12:ee:03:58:ae:aa:
                    bf:6f:f6:0f:9b:bc:b7:14:83:96:1d:c1:32:ce:89:
                    ea:5a:bd:46:68:59:82:60:3e:37:1e:4c:50:1b:c0:
                    c9:87:ab:ce:7f:9d:b8:f6:6a:99:72:59:cc:b7:18:
                    9c:c8:67:48:f2:c7:20:e1:b2:b7:50:7f:4f:5d:b8:
                    b5:46:0e:cb:9c:5f:b4:11:fb:42:9f:11:38:2b:39:
                    d0:ea:45:cf:72:4c:d0:e7:53:bb:06:f8:ae:01:2a:
                    95:f3:21:fe:c9:c1:c1:35:aa:8e:17:b4:e9:c5:df:
                    53:40:f0:27:18:bc:71:29:a1:d8:54:c8:e8:b3:8f:
                    56:85:b4:90:c2:e8:ac:8a:dc:a7:69:36:33:05:38:
                    57:dc:04:b9:09:95:02:1f:1c:7f:14:a9:00:82:38:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DE:9F:A9:42:09:CC:EA:A2:C7:DB:96:A7:09:0F:1B:90:D8:C7:03
            X509v3 Authority Key Identifier:
                keyid:9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/nmWqPjnHn1_GuKBiCEtYiCcP-RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/it6fqUIJzOqix9uWpwkPG5DYxwM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:80:c0:b9:e5:51:0d:7d:8c:54:e1:7a:11:cc:6c:4c:55:82:
         80:da:a3:ee:85:e0:e5:d8:e5:73:06:b6:de:c7:6b:e5:29:6e:
         d2:33:b4:25:82:c2:79:e5:a8:cc:ca:8c:cc:f9:63:e4:ba:f2:
         29:f1:35:80:4d:d0:94:78:cd:49:65:aa:f9:a0:94:2d:0b:85:
         e6:67:fa:91:a6:dd:f4:fa:1c:67:83:29:29:7e:93:cc:40:b9:
         de:6a:d4:36:5a:32:12:ff:09:92:8d:99:d1:f4:14:c4:e9:bc:
         a5:eb:45:cc:07:14:80:1d:63:da:c3:45:48:0b:14:3b:cc:1c:
         44:01:02:a8:8d:99:2a:ce:89:ef:84:71:51:58:29:a1:f9:a9:
         86:9e:c3:21:80:a1:8d:e3:5e:71:1a:a1:d8:77:61:eb:b5:b2:
         72:1b:c5:d0:22:f9:22:b3:ce:2b:03:5b:62:fc:ad:67:6f:7d:
         62:2e:f4:65:47:56:33:61:29:18:18:f4:8f:e5:d8:b2:31:f7:
         d5:8b:29:50:b0:84:4e:1a:46:0d:ea:b5:2b:f3:a7:82:d2:79:
         f3:b3:2c:ec:fe:0b:dc:bd:a6:9b:ac:6b:46:5d:58:77:61:3e:
         73:e0:7f:30:6e:df:cd:4d:b6:6f:5e:cd:f3:3b:4a:f3:09:7f:
         eb:63:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org