Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/HrNYj_-m2oGNckMbqSApizPUhLM.roa
File:                     HrNYj_-m2oGNckMbqSApizPUhLM.roa (raw, json)
Hash identifier:          ruZlRTN1DHp+3WDawRX6Irc00/Fi4ZcTVLPI6AziZh8=
Subject key identifier:   1E:B3:58:8F:FF:A6:DA:81:8D:72:43:1B:A9:20:29:8B:33:D4:84:B3
Certificate issuer:       /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial:       04A7
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/HrNYj_-m2oGNckMbqSApizPUhLM.roa
Signing time:             Tue 30 Nov 2021 04:45:04 +0000
ROA not before:           Tue 30 Nov 2021 04:45:04 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     58466
IP address blocks:        2401:3480:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
        Validity
            Not Before: Nov 30 04:45:04 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1EB3588FFFA6DA818D72431BA920298B33D484B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:ce:a0:a3:d3:5a:3c:30:de:bd:70:99:33:
                    e9:28:3b:af:d9:2b:b0:4e:18:ec:3d:8a:e3:a3:40:
                    a0:33:cb:22:af:c3:7c:28:23:7c:72:29:e6:8d:99:
                    66:fb:03:1c:f1:c3:2f:fc:f1:82:09:54:32:34:9f:
                    f5:05:71:f8:ab:61:2e:0b:d8:ea:b0:45:65:6e:bc:
                    ec:83:95:4a:1d:e7:14:88:1d:f3:c5:41:8b:a2:5f:
                    b3:c0:67:22:e8:85:bf:bf:53:af:56:2a:20:05:37:
                    0e:ed:75:32:67:ee:25:07:59:e7:6d:dc:c6:f8:1b:
                    3d:8b:c8:be:38:4f:f6:4d:ee:1f:f1:41:96:b1:63:
                    55:67:d6:51:36:ba:81:aa:29:ec:d4:27:f0:44:cb:
                    6d:8f:e1:ea:5e:a9:42:93:db:d4:bb:b2:7a:cf:50:
                    c7:47:cf:60:7c:47:e8:3b:a9:57:7c:8d:4a:31:5f:
                    23:88:5c:5c:ad:b8:a9:9f:8c:19:f8:92:e0:63:de:
                    3e:c4:11:4e:21:6b:02:99:8a:32:71:0a:cf:e5:89:
                    d8:4c:16:4a:a8:41:30:dc:55:e2:86:38:1d:c5:78:
                    f4:ef:a0:d5:8e:84:64:f7:7a:11:11:bb:65:66:6a:
                    73:10:35:83:7e:d2:97:18:c5:f2:9f:c9:b7:f5:4a:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:58:8F:FF:A6:DA:81:8D:72:43:1B:A9:20:29:8B:33:D4:84:B3
            X509v3 Authority Key Identifier:
                keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/HrNYj_-m2oGNckMbqSApizPUhLM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3480:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:2e:2e:8c:36:8b:c7:c0:d3:da:88:7a:ce:2b:82:e5:8c:
         4a:ed:e7:88:30:4e:a4:59:e4:3d:a5:74:54:dc:d9:9c:48:1d:
         9a:5a:a1:d2:c1:d6:b7:a5:0c:24:bb:2f:16:12:1a:e7:ee:7d:
         07:cd:3d:45:d9:ee:59:fe:5c:bb:5c:f7:93:f5:ea:95:b6:6a:
         8c:53:02:93:06:46:c4:3e:ae:c7:75:be:e9:d4:6b:09:fe:60:
         44:b5:c1:24:9c:84:e7:19:16:2b:75:35:3a:2c:b1:ed:b2:14:
         f1:90:51:39:d9:a8:dd:57:51:c1:fa:4f:78:98:33:93:2f:ce:
         2c:62:1f:74:30:01:77:a7:0a:99:d9:c0:92:3e:42:82:e4:2a:
         33:89:c3:4a:48:46:fe:a1:a7:97:bf:5b:18:69:b2:6f:42:5f:
         ba:96:8d:15:3f:70:d8:66:18:36:e6:24:c2:6e:be:a2:b1:c8:
         da:fb:dc:ed:46:76:df:34:15:df:6d:f5:6f:09:f6:66:ef:a5:
         bc:ae:ad:76:07:d9:cf:1a:94:14:0b:8c:39:a9:1d:d0:96:c6:
         16:66:a4:26:b6:14:cc:c2:a1:db:fb:d3:35:a2:43:4b:6f:f9:
         88:dc:55:22:56:c1:90:79:01:0d:7c:d8:45:93:62:eb:94:04:
         0f:75:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----