Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f36342d3634203d3e20383334.roa
File:                     323430353a393234303a3a2f36342d3634203d3e20383334.roa (raw, json)
Hash identifier:          Ao7SEiSUng+jQRQt3T+Uqyhd32xk5NBoOkheUcpVHns=
Subject key identifier:   F0:EB:56:03:73:0F:42:73:A8:57:6B:5B:95:5E:DB:FC:1A:47:E2:F3
Certificate issuer:       /CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
Certificate serial:       3991E8BDB6C3B16CA74035372E668E8BEE581813
Authority key identifier: 63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f36342d3634203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 13:31:52 +0000
ROA not before:           Mon 26 Sep 2022 13:26:52 +0000
ROA not after:            Mon 25 Sep 2023 13:31:52 +0000
asID:                     834
IP address blocks:        2405:9240::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:91:e8:bd:b6:c3:b1:6c:a7:40:35:37:2e:66:8e:8b:ee:58:18:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
        Validity
            Not Before: Sep 26 13:26:52 2022 GMT
            Not After : Sep 25 13:31:52 2023 GMT
        Subject: CN=F0EB5603730F4273A8576B5B955EDBFC1A47E2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:fa:73:ab:a3:4f:30:db:7e:05:95:35:7c:
                    94:7a:43:e3:7a:f6:d7:1f:02:1b:fc:9d:12:2c:25:
                    29:34:50:bd:a7:9b:35:b3:60:f5:f4:11:ca:0b:19:
                    2e:fe:d2:84:40:cc:5e:7c:64:4a:19:40:63:a5:b3:
                    68:34:bf:59:6a:b9:ec:41:03:28:6a:8e:14:2f:ad:
                    c6:c5:58:d5:63:b9:2f:d7:f8:16:a6:60:0d:f6:67:
                    5a:3a:08:ce:63:5d:82:64:36:bd:86:fa:2a:ad:b4:
                    fa:51:ca:5d:10:b6:d4:e5:40:38:be:f5:a7:80:50:
                    58:b6:3b:54:11:44:33:1f:ce:90:d1:63:64:d3:7a:
                    d0:aa:7a:ab:b0:43:88:ff:b4:08:6f:45:1e:13:a9:
                    c9:0c:1f:44:b9:0b:eb:2a:54:74:bc:d1:2c:ac:d6:
                    1c:1c:bd:de:f1:c1:70:24:5d:65:eb:c7:84:31:89:
                    eb:79:d6:91:e2:87:95:03:db:fe:2a:5a:c0:f7:fc:
                    48:48:ee:23:66:df:ca:04:a7:3e:ab:58:2d:ff:2f:
                    37:c1:9e:93:ea:9b:d2:b2:67:ca:39:35:b6:17:d5:
                    15:e1:11:52:27:5a:f3:3e:f6:02:4a:fd:42:80:68:
                    f3:3b:fc:eb:cb:07:f4:f6:e8:dd:69:86:14:6b:dc:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EB:56:03:73:0F:42:73:A8:57:6B:5B:95:5E:DB:FC:1A:47:E2:F3
            X509v3 Authority Key Identifier:
                keyid:63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/323430353a393234303a3a2f36342d3634203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9240::/64

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:f5:fc:8a:39:54:9b:bb:42:21:5f:80:f1:33:a7:12:9d:
         91:e0:f7:a9:88:8c:57:c0:90:5b:c0:98:47:9f:a0:b2:73:05:
         05:f2:e1:1e:c9:b6:83:07:ab:1e:fc:4e:5a:95:ea:02:d7:da:
         12:d4:7e:ee:97:ba:34:28:9d:1e:4e:c0:0a:3c:f6:f2:1d:44:
         4a:b4:15:6d:b7:84:39:1a:85:c2:55:53:fc:82:69:e3:bc:86:
         11:ae:91:9d:96:f9:53:31:2a:22:b7:27:45:e8:cf:7a:d7:8d:
         02:eb:d3:60:84:26:9e:f7:4a:21:40:7e:0f:25:b2:2e:da:5c:
         73:6a:2c:64:82:e5:60:50:d0:10:db:b0:0f:b0:ba:43:1a:86:
         9d:59:2b:78:4e:60:4f:66:69:f1:86:51:4f:ff:ba:48:51:ba:
         c1:59:11:73:c8:16:4a:a3:4f:43:75:ca:67:44:24:57:68:f6:
         65:a6:26:13:d8:37:03:fd:77:4e:1e:de:70:a9:52:cf:75:80:
         9d:09:90:ee:6d:22:e0:75:c7:ce:b7:c8:76:8c:31:c7:f6:00:
         17:91:25:28:11:74:33:6d:c7:3e:bd:8f:d8:4d:dc:42:02:c6:
         19:74:bf:1e:52:3b:54:0c:b2:d7:6b:17:e1:50:a0:4d:d8:4c:
         3b:8c:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org