Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-JSRA-uacAIxYZIgn_xdZWFUeTM.roa
File:                     -JSRA-uacAIxYZIgn_xdZWFUeTM.roa (raw, json)
Hash identifier:          qi69OaejwgIwst0pDnHtOI7ckU9KwcSt2Xr7anMqg3M=
Subject key identifier:   F8:94:91:03:EB:9A:70:02:31:61:92:20:9F:FC:5D:65:61:54:79:33
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       0A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-JSRA-uacAIxYZIgn_xdZWFUeTM.roa
Signing time:             Wed 01 Jun 2022 07:07:35 +0000
ROA not before:           Wed 01 Jun 2022 07:07:35 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     139076
IP address blocks:        103.221.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:35 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=F8949103EB9A7002316192209FFC5D6561547933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:62:19:65:fa:76:cf:46:b6:dc:1a:3a:af:
                    8c:29:f0:6f:0a:2b:7a:72:82:84:e1:2a:d1:a0:5b:
                    0a:1b:ec:6b:76:ca:ee:e9:9c:3e:79:19:fb:9b:9e:
                    35:f7:56:ee:b9:11:bd:2c:b3:3f:5a:68:59:e2:80:
                    e6:09:06:59:56:af:3f:6f:a4:38:ed:96:b4:b6:9d:
                    18:8c:b0:a5:94:40:7f:1c:60:16:b2:f6:e9:d1:53:
                    bb:00:be:a8:d7:c8:d0:e8:d4:7a:b2:dc:20:85:f9:
                    9d:f0:91:a6:32:7f:23:e5:79:60:8d:41:6e:80:f2:
                    fe:04:3e:25:34:65:b9:57:bb:5b:26:cc:e6:8a:86:
                    66:ca:08:91:8e:65:69:33:aa:58:83:d2:38:49:7a:
                    0e:5d:27:81:52:c2:45:63:5a:aa:e4:03:00:1f:c7:
                    b6:bc:99:31:fe:25:26:78:77:38:45:10:fb:18:4f:
                    9d:3f:5f:57:78:b8:2f:e1:5a:82:f8:b3:97:61:72:
                    87:1e:48:c8:0e:2f:0b:fb:4a:79:33:f4:ec:23:84:
                    bc:57:2e:a6:a0:a6:3c:78:0f:17:21:76:a1:35:ab:
                    30:3c:59:ec:2a:4d:55:f1:76:79:f3:84:a2:05:80:
                    3a:38:3a:1a:9c:c6:d3:82:62:2e:2f:3b:f8:42:30:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:91:03:EB:9A:70:02:31:61:92:20:9F:FC:5D:65:61:54:79:33
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-JSRA-uacAIxYZIgn_xdZWFUeTM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:f4:bb:5e:b8:e8:46:d0:3c:4a:f2:b9:a6:3e:99:06:5a:
         71:ef:b5:b5:43:3f:d2:18:00:09:21:63:7f:e0:0f:b9:9f:f8:
         3a:5b:f4:18:79:a8:0f:0e:76:0c:e6:9a:58:e3:25:5d:02:aa:
         97:5d:98:89:87:00:92:72:c5:a9:53:2b:eb:2d:4f:31:08:c4:
         ca:09:51:c9:0f:e6:84:32:fe:95:85:d5:7b:f4:14:32:88:78:
         9d:29:ec:68:5e:f1:20:ca:51:bd:8d:c8:4a:e4:d5:28:6d:1a:
         28:8e:31:8a:7e:9f:c8:2f:eb:42:4f:67:08:fe:4c:40:06:0b:
         79:6a:66:a5:eb:61:1b:be:af:ca:7e:f6:4b:46:2e:f4:0c:0a:
         69:d2:12:19:34:31:b3:7a:7d:59:18:4d:14:e6:f9:27:74:f9:
         99:a6:0e:d9:fd:ca:40:72:38:9c:d1:c5:77:30:f0:5c:32:f9:
         49:c9:fd:21:6f:22:37:88:da:34:29:73:f9:5c:8c:92:3a:81:
         09:9e:c5:55:84:bd:a7:59:c0:45:a4:f1:42:d5:d9:ef:44:18:
         5f:88:fd:9b:99:95:38:7a:5b:e2:13:f1:d0:be:39:c3:39:c6:
         b7:cb:98:9a:55:89:53:15:5e:f8:fd:af:c4:c9:63:07:d5:09:
         c7:17:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org