Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa (raw, json)
Hash identifier:          l6vJu/3mXA9fJbf+zzeOz+JDOXN3qfLoAy3QMT+EMTw=
Subject key identifier:   EA:F0:A1:63:75:60:75:BF:FA:83:D1:0E:50:09:AC:B2:E1:65:85:72
Certificate issuer:       /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial:       0B4CA8EF7F526A54ED65A3C37916D849541C837B
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa
Signing time:             Sun 01 Jan 2023 03:43:40 +0000
ROA not before:           Sun 01 Jan 2023 03:38:40 +0000
ROA not after:            Sun 31 Dec 2023 03:43:40 +0000
asID:                     21554
IP address blocks:        199.182.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4c:a8:ef:7f:52:6a:54:ed:65:a3:c3:79:16:d8:49:54:1c:83:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
        Validity
            Not Before: Jan  1 03:38:40 2023 GMT
            Not After : Dec 31 03:43:40 2023 GMT
        Subject: CN=EAF0A163756075BFFA83D10E5009ACB2E1658572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:65:6c:2c:15:f5:d8:a4:7b:c8:39:b8:ed:
                    1e:32:23:a8:cb:df:ba:14:7e:80:3e:f4:8a:7e:13:
                    c9:d9:97:bf:90:5a:e8:e5:21:ce:de:1f:53:e7:53:
                    3a:93:fd:9c:48:6b:14:4b:6d:5b:74:dd:79:0c:37:
                    18:32:76:b5:e7:9a:9f:ef:6f:a9:ce:b1:d9:d4:76:
                    27:f3:f5:60:22:7e:88:fa:a6:db:81:82:12:ae:7f:
                    aa:7f:23:ca:89:c1:76:98:2f:69:82:49:66:3e:bc:
                    d4:d0:a1:42:c9:f9:e1:4b:7d:34:4f:67:2a:a0:1b:
                    bd:32:b4:a3:e2:ca:60:31:58:83:dc:7a:85:dd:d5:
                    af:c2:1d:fb:7f:29:f7:be:ac:d2:56:11:73:94:02:
                    04:16:94:ad:c3:be:7c:a2:a7:8a:4d:bc:6d:4c:84:
                    b9:02:ee:24:a3:c9:21:b7:fb:f5:14:23:48:75:07:
                    5e:09:ce:10:d0:c9:07:ad:2e:dd:a5:87:19:e6:4f:
                    8d:75:ae:0f:94:ff:68:75:e0:29:1f:f7:3a:6c:e9:
                    f7:15:57:f3:f4:f6:2d:db:eb:a2:0f:11:33:6e:29:
                    c7:ec:c6:8a:25:6d:d8:f4:6b:dc:de:5f:eb:19:f9:
                    9f:44:3b:5f:46:8c:e7:33:1b:24:cc:d1:5c:3c:70:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:A1:63:75:60:75:BF:FA:83:D1:0E:50:09:AC:B2:E1:65:85:72
            X509v3 Authority Key Identifier:
                keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:1f:75:c2:82:d7:28:64:42:2e:29:3d:aa:c2:4b:bc:13:
         d6:8b:a2:c4:ff:2f:85:46:00:12:01:54:57:2f:ca:dd:57:0c:
         d6:91:f0:ba:e7:24:2d:4f:9e:78:ec:e6:b2:e7:fa:c9:bb:65:
         eb:93:a2:04:f6:9e:4b:36:97:d3:28:75:ba:bf:35:f8:8f:21:
         61:21:f6:30:8f:e2:a0:0c:09:2e:86:b0:5a:1c:f2:fd:04:44:
         9e:5f:09:1e:8e:bc:1b:c1:b8:d8:7a:9e:2f:ba:13:c1:4a:70:
         3a:ba:97:d5:3d:a9:ea:21:e9:8b:3d:81:b3:8d:67:62:27:73:
         8f:fc:80:70:57:2c:19:eb:3d:9f:b4:23:72:77:e0:06:57:e2:
         f2:41:0c:05:41:54:58:47:ea:3d:0d:b0:02:36:57:29:a2:ad:
         31:0e:89:e4:e7:8e:5f:83:57:23:dd:7c:06:f6:c7:16:4d:ef:
         18:ab:ed:e3:33:c7:ac:0e:ea:54:6e:cd:85:02:ba:cb:bb:c7:
         b0:5c:cd:05:0e:ca:8c:2e:a0:66:ce:3e:4e:af:f3:c1:05:e5:
         e5:34:13:7f:ea:e0:c2:d7:b3:10:a2:ba:ed:be:52:36:74:ed:
         6a:06:4d:50:d0:e2:62:f5:57:39:1a:6f:75:7f:3c:62:0c:cf:
         dc:24:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org