Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/ZCDmFK6myX0trZnMeCTL1FbqDpM.roa
File:                     ZCDmFK6myX0trZnMeCTL1FbqDpM.roa (raw, json)
Hash identifier:          cf9Oe7Uifsh9T8KRfzhhIlsyfOxUljEKYHoqkvXJxIY=
Subject key identifier:   64:20:E6:14:AE:A6:C9:7D:2D:AD:99:CC:78:24:CB:D4:56:EA:0E:93
Certificate issuer:       /CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
Certificate serial:       048E
Authority key identifier: 5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/ZCDmFK6myX0trZnMeCTL1FbqDpM.roa
Signing time:             Wed 12 Jan 2022 08:35:31 +0000
ROA not before:           Wed 12 Jan 2022 08:35:31 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     4515
IP address blocks:        120.31.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
        Validity
            Not Before: Jan 12 08:35:31 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6420E614AEA6C97D2DAD99CC7824CBD456EA0E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:75:8b:78:06:d2:16:74:7c:56:4b:e2:b0:
                    b4:fb:e5:c2:96:62:7c:13:22:9f:ae:0e:2f:75:e5:
                    68:15:5a:d3:ed:9b:a6:65:b6:6a:9b:d3:34:10:af:
                    e6:a7:a0:e3:64:57:af:29:fd:b3:2a:bf:34:a8:af:
                    b7:d3:1f:40:09:36:73:b3:a3:19:7d:24:04:ee:15:
                    88:09:d6:d9:ab:56:c7:51:71:5f:66:64:53:65:c3:
                    8f:94:2d:82:f6:95:9d:6b:db:7a:7f:c3:61:91:6a:
                    a7:bd:1f:10:ce:2d:6e:26:4d:37:66:4d:f5:7e:d9:
                    bd:9c:a1:0d:1b:ff:9a:96:82:22:7b:6d:18:0e:38:
                    d0:67:8b:19:d2:cf:3c:c2:ca:b0:04:de:cb:cf:0b:
                    a1:6c:6d:01:22:3d:92:f1:d4:3d:ff:87:4b:25:ed:
                    ce:7c:93:f0:25:9f:e5:c3:92:41:85:83:73:bd:b4:
                    2f:66:d1:20:2d:1e:31:23:f1:c1:41:80:6f:18:47:
                    df:21:ff:ed:1f:55:69:15:5d:a3:95:4e:b3:74:7e:
                    ef:3d:98:00:d0:01:b2:0e:d0:31:16:69:dc:cc:be:
                    a1:fb:f4:16:e1:42:ae:09:ab:59:77:ab:b2:35:b0:
                    c8:03:d2:94:1a:83:21:91:d1:88:f2:27:5c:be:6c:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:E6:14:AE:A6:C9:7D:2D:AD:99:CC:78:24:CB:D4:56:EA:0E:93
            X509v3 Authority Key Identifier:
                keyid:5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/ZCDmFK6myX0trZnMeCTL1FbqDpM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:50:49:9f:08:b5:f0:b9:db:40:86:e4:58:d6:55:0b:17:c7:
         b1:d0:0d:0c:e7:f3:72:8b:a4:e6:c6:f1:83:6e:d1:31:c4:74:
         d0:f0:b6:28:83:60:30:3c:1d:b1:ea:8c:aa:ff:06:7a:dc:bc:
         54:15:9d:6b:84:62:03:9b:4c:34:86:1e:19:3d:58:19:e4:f4:
         2b:27:5c:86:56:f1:66:8f:23:60:9f:c9:8b:9c:a1:13:be:5c:
         83:c1:83:5b:d9:37:fb:0c:67:3a:06:88:45:25:a2:d8:f0:14:
         0c:96:15:0f:aa:cc:59:e6:90:3d:55:66:9b:3c:42:a5:f7:21:
         63:60:ac:4b:38:75:c1:48:1d:50:49:b1:ac:d9:ec:5c:9c:47:
         ed:c9:be:57:32:47:5c:60:91:bd:53:68:2b:54:e2:87:fc:d0:
         a1:52:33:04:a6:4e:f9:8b:7d:11:45:5b:78:f2:71:28:62:b7:
         4d:42:06:08:44:bb:f8:bb:f9:94:51:11:71:0f:41:4b:80:b1:
         b5:cf:dc:52:2a:50:fc:98:fd:ab:25:1a:00:8a:1f:60:0f:d0:
         ab:29:65:f3:b2:c7:d4:72:19:2a:e8:6a:0e:85:04:11:09:c1:
         2e:4a:a2:93:76:bd:58:14:b4:17:d7:6f:b8:9b:4e:19:f7:1e:
         f1:82:f5:21
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUYx
ODc1QzIwNzVBMTUyOTc3QzNEM0IxRTFCOEJCQzQyRjMyNjRENDAeFw0yMjAxMTIw
ODM1MzFaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDY0MjBFNjE0QUVBNkM5
N0QyREFEOTlDQzc4MjRDQkQ0NTZFQTBFOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChQXWLeAbSFnR8VkvisLT75cKWYnwTIp+uDi915WgVWtPtm6Zl
tmqb0zQQr+anoONkV68p/bMqvzSor7fTH0AJNnOzoxl9JATuFYgJ1tmrVsdRcV9m
ZFNlw4+ULYL2lZ1r23p/w2GRaqe9HxDOLW4mTTdmTfV+2b2coQ0b/5qWgiJ7bRgO
ONBnixnSzzzCyrAE3svPC6FsbQEiPZLx1D3/h0sl7c58k/Aln+XDkkGFg3O9tC9m
0SAtHjEj8cFBgG8YR98h/+0fVWkVXaOVTrN0fu89mADQAbIO0DEWadzMvqH79Bbh
Qq4Jq1l3q7I1sMgD0pQagyGR0YjyJ1y+bCERAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZCDmFK6myX0trZnMeCTL1FbqDpMwHwYDVR0jBBgwFoAUXxh1wgdaFSl3w9Ox
4bi7xC8yZNQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEy
L1h4aDF3Z2RhRlNsM3c5T3g0Ymk3eEM4eVpOUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWHhoMXdnZGFGU2wzdzlPeDRiaTd4Qzh5Wk5RLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEyL1pDRG1GSzZteVgwdHJa
bk1lQ1RMMUZicURwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ4H6QwDQYJKoZIhvcNAQELBQADggEBABpQSZ8ItfC520CG5FjWVQsXx7HQDQzn
83KLpObG8YNu0THEdNDwtiiDYDA8HbHqjKr/BnrcvFQVnWuEYgObTDSGHhk9WBnk
9CsnXIZW8WaPI2CfyYucoRO+XIPBg1vZN/sMZzoGiEUlotjwFAyWFQ+qzFnmkD1V
Zps8QqX3IWNgrEs4dcFIHVBJsazZ7FycR+3JvlcyR1xgkb1TaCtU4of80KFSMwSm
TvmLfRFFW3jycShit01CBghEu/i7+ZRREXEPQUuAsbXP3FIqUPyY/aslGgCKH2AP
0KspZfOyx9RyGSroag6FBBEJwS5KopN2vVgUtBfXb7ibThn3HvGC9SE=
-----END CERTIFICATE-----