Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/ssYX_o0GH0Ab01u9qfMuSBKLlzE.roa
File:                     ssYX_o0GH0Ab01u9qfMuSBKLlzE.roa (raw, json)
Hash identifier:          7TPov26Bm2eaRT+n/UY1D8cqG3A9dv32n9PoDeWrFhQ=
Subject key identifier:   B2:C6:17:FE:8D:06:1F:40:1B:D3:5B:BD:A9:F3:2E:48:12:8B:97:31
Certificate issuer:       /CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
Certificate serial:       0492
Authority key identifier: 5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/ssYX_o0GH0Ab01u9qfMuSBKLlzE.roa
Signing time:             Wed 12 Jan 2022 08:36:31 +0000
ROA not before:           Wed 12 Jan 2022 08:36:31 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     38372
IP address blocks:        120.31.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
        Validity
            Not Before: Jan 12 08:36:31 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B2C617FE8D061F401BD35BBDA9F32E48128B9731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:57:98:0a:1f:0a:81:6c:8b:e0:dc:01:2f:
                    88:2a:a5:d0:1d:81:96:ac:cd:26:a0:fb:ac:52:11:
                    bb:db:d7:ff:84:e6:8b:85:15:01:d1:50:f3:16:20:
                    4f:ac:06:4f:79:ff:6a:3b:a9:31:28:98:ac:51:e0:
                    f3:6b:c5:9d:6b:5f:41:d7:78:3e:6e:f2:e8:42:7a:
                    81:99:c4:47:8d:b0:bd:8c:81:a5:8a:e0:67:9a:7e:
                    d3:89:1c:ef:a2:1c:f5:90:fe:e6:8e:4d:2b:c4:54:
                    e8:7a:4e:4b:ee:1e:4f:bd:bc:8e:29:70:55:32:b3:
                    27:ad:c9:10:de:8e:cc:2b:0f:5c:52:c9:a7:5e:15:
                    d2:a5:d8:8c:c4:2f:d0:1d:c2:b1:78:16:95:52:0a:
                    e0:b0:ae:d6:8d:16:a8:66:66:99:4d:3f:ac:c6:32:
                    0d:ef:b5:59:85:e8:e7:47:6f:67:ba:97:11:cf:4e:
                    e0:ec:71:e7:7d:8b:fa:c9:ff:8f:b6:aa:b9:8a:60:
                    5b:d4:f1:93:5d:52:90:c8:25:de:58:0d:f4:d5:30:
                    fb:88:c2:b5:e7:53:ac:c5:0e:dd:eb:7f:c3:f4:6b:
                    f1:23:22:fc:38:ee:41:42:34:ea:d6:3a:c8:f5:7e:
                    f4:d0:1d:01:d7:9d:ca:38:16:9d:80:36:68:09:b4:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:17:FE:8D:06:1F:40:1B:D3:5B:BD:A9:F3:2E:48:12:8B:97:31
            X509v3 Authority Key Identifier:
                keyid:5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/ssYX_o0GH0Ab01u9qfMuSBKLlzE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:81:34:d7:8f:30:83:9d:33:8e:dd:b6:d4:d8:7a:3c:45:b3:
         ef:39:3d:89:c9:3f:2e:72:94:f2:8a:0f:1c:25:b7:da:7e:1f:
         84:79:47:d7:98:be:c9:e7:18:85:f9:47:7d:37:97:93:94:11:
         51:9b:a5:11:aa:24:c3:25:ec:46:65:bf:68:e9:ba:8e:7d:64:
         85:c4:4e:2b:3c:89:5f:f5:dc:1d:e8:2a:58:60:64:d8:6e:36:
         0f:b4:0e:37:9f:34:8a:eb:fc:02:99:56:a8:70:8e:86:8d:ae:
         79:e8:ec:a2:21:95:e8:3b:3c:97:ae:7d:79:1d:72:ca:cb:8f:
         07:2f:19:9d:f9:d3:00:f6:48:ec:9b:96:39:de:aa:cd:e7:f3:
         45:91:f2:bb:1d:de:2b:f1:5a:54:f2:71:8f:67:2d:6e:71:c6:
         41:0d:20:f5:1e:a0:c2:11:9e:d1:f2:f1:7a:61:d6:e8:d8:65:
         fb:52:f2:02:0d:52:d8:d4:ad:61:b3:9d:41:8b:d8:2d:e8:c3:
         84:75:2c:c3:3b:83:f4:67:77:a4:bb:62:e9:28:d3:be:de:50:
         c7:1d:10:8e:2e:60:81:ef:89:ec:2f:29:11:f7:7d:0a:2a:f1:
         aa:ca:74:b3:a5:53:5e:23:b8:73:48:e1:3e:d0:ac:cf:5a:dc:
         34:af:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----