Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/eh_rst9RTa1sOvYaYUJZW-r6THM.roa
File:                     eh_rst9RTa1sOvYaYUJZW-r6THM.roa (raw, json)
Hash identifier:          gK7uMzR7KQqG62SxyFzZ/jmbqJRmxoHly82T9RomV1k=
Subject key identifier:   7A:1F:EB:B2:DF:51:4D:AD:6C:3A:F6:1A:61:42:59:5B:EA:FA:4C:73
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       05
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/eh_rst9RTa1sOvYaYUJZW-r6THM.roa
Signing time:             Fri 10 Sep 2021 13:46:19 +0000
ROA not before:           Fri 10 Sep 2021 13:46:19 +0000
ROA not after:            Sat 10 Sep 2022 13:34:57 +0000
asID:                     48024
IP address blocks:        2407:d7c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Sep 10 13:46:19 2021 GMT
            Not After : Sep 10 13:34:57 2022 GMT
        Subject: CN=7A1FEBB2DF514DAD6C3AF61A6142595BEAFA4C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:bd:78:81:9b:b4:ca:3d:d1:75:17:42:9a:
                    9b:d5:66:16:25:0c:48:e0:c8:bc:92:89:21:cf:d1:
                    f9:b4:56:49:61:bc:78:e2:d2:44:ea:6f:53:ac:5c:
                    04:14:eb:f5:05:3d:30:de:ee:3d:a9:45:f6:b1:df:
                    b0:1d:dc:59:e7:3a:9f:b9:71:b9:aa:e4:3c:d4:9a:
                    b9:ea:60:10:a9:36:86:75:db:e0:d0:e1:9f:6b:67:
                    32:99:38:26:6d:3c:45:be:74:5d:ee:cf:92:44:38:
                    99:66:0d:4f:7f:d3:ca:b3:bb:86:00:4d:8f:9b:00:
                    82:ef:ca:57:21:29:a1:2a:9f:f5:51:f0:73:d9:71:
                    3d:09:ed:c9:81:d8:ef:b8:e6:fe:28:66:d1:4d:ec:
                    93:1b:5a:bf:08:85:f3:41:30:14:eb:b0:ea:c2:81:
                    65:58:a6:33:7a:10:76:4a:e9:50:48:ba:da:1e:e0:
                    b2:1c:49:74:9a:1a:66:19:a6:1d:27:ee:ec:84:97:
                    b7:29:e5:1f:76:b9:f0:59:1d:60:73:e3:19:a2:63:
                    57:00:a9:16:6a:e4:62:59:43:75:05:7d:75:3c:95:
                    d3:f4:4b:28:fa:b6:8a:a4:59:4e:92:9a:47:b8:87:
                    65:99:5d:89:82:dd:75:89:06:9b:fa:40:50:95:04:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:EB:B2:DF:51:4D:AD:6C:3A:F6:1A:61:42:59:5B:EA:FA:4C:73
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/eh_rst9RTa1sOvYaYUJZW-r6THM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:b2:89:e6:d3:60:f6:36:03:f1:2a:4c:38:38:26:5e:dd:
         db:cd:9a:7a:1b:16:41:45:2d:07:ae:be:f6:4a:2a:28:79:cf:
         fd:21:b4:34:5b:d3:7f:b8:64:35:75:bf:12:d9:eb:ca:be:b8:
         68:e3:84:f3:a0:7a:9d:89:56:4d:bb:09:ec:4a:03:c0:4f:37:
         bd:62:d4:2e:ac:d8:87:01:11:a9:98:a3:33:4c:02:2e:b5:02:
         64:3a:8e:0c:07:55:30:f1:12:20:d2:33:ef:45:c5:6e:37:dd:
         1a:8e:f1:06:db:7a:e6:68:56:e9:50:6d:1d:b8:68:ea:84:c8:
         71:97:81:85:30:5a:9e:df:75:5c:50:3f:ea:25:75:f9:88:2a:
         a6:8c:ad:88:eb:04:e2:ea:28:23:0a:f8:44:29:39:be:55:44:
         bb:ca:a0:3c:e7:bd:ce:51:87:26:6e:95:93:9f:08:fd:16:9d:
         95:c6:6c:8e:ec:bb:55:e4:ad:1d:0f:62:91:dc:4e:40:db:ae:
         b8:6c:0d:0e:bc:17:5e:c1:4b:e4:a0:e9:5d:17:c7:56:cd:7c:
         f3:fe:5e:91:62:09:b9:c8:83:98:aa:72:a2:a5:7f:d7:08:b0:
         c3:1a:5b:45:62:66:44:4e:62:16:84:59:92:6f:c5:b1:78:1e:
         04:ac:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----