Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (raw, json)
Hash identifier:          ZDaVP7GCD/XZq8+qEm1duU7HstXXa1mQp4IoKB7T6Wk=
Subject key identifier:   85:77:F2:B5:7A:6E:E7:5C:6A:52:5E:7D:26:A5:23:86:64:AC:2D:BB
Certificate issuer:       /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial:       5BA837F2A73B4753643C0BC0FD11A7CBCD603678
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
Signing time:             Sun 01 Jan 2023 03:43:39 +0000
ROA not before:           Sun 01 Jan 2023 03:38:39 +0000
ROA not after:            Sun 31 Dec 2023 03:43:39 +0000
asID:                     54110
IP address blocks:        199.182.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a8:37:f2:a7:3b:47:53:64:3c:0b:c0:fd:11:a7:cb:cd:60:36:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
        Validity
            Not Before: Jan  1 03:38:39 2023 GMT
            Not After : Dec 31 03:43:39 2023 GMT
        Subject: CN=8577F2B57A6EE75C6A525E7D26A5238664AC2DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:ba:6d:d6:ca:3d:89:f6:07:ce:7a:be:06:
                    40:ae:4d:1d:1a:f5:80:77:e8:45:ef:b3:9d:3c:3a:
                    c5:30:77:d3:f0:91:19:b7:00:22:46:6e:bf:27:f6:
                    88:b8:09:eb:50:11:52:35:e6:c6:a0:76:dd:c1:3c:
                    92:d7:de:e1:c2:3c:8c:ed:65:6d:95:96:90:3d:b5:
                    7d:a6:f6:56:fa:b5:f9:a9:58:9a:2e:fc:4b:84:49:
                    d9:7c:ae:4a:c0:94:19:5c:86:e3:b8:88:00:f3:69:
                    36:1e:1f:c0:92:32:78:d9:30:5f:9f:86:44:ff:9a:
                    6c:7d:4f:c3:b8:32:62:6b:fa:95:41:b4:2f:39:86:
                    9d:ef:68:07:10:f3:0c:35:d2:d3:44:55:0d:24:1d:
                    ac:05:ef:42:b6:79:77:59:88:09:73:c2:2b:59:e2:
                    f9:f4:b1:c5:d6:ea:0b:fa:87:c3:52:fd:87:41:2e:
                    fb:d4:c0:a4:57:40:b3:75:b5:c1:0d:dc:34:9e:ec:
                    18:2b:a5:a2:fe:24:d1:72:bd:f9:45:60:63:ab:02:
                    09:95:41:0c:08:45:af:82:e2:6c:69:cd:68:a8:d0:
                    33:ac:9f:3c:b8:04:91:e1:fe:2d:ed:c6:4e:1d:13:
                    8b:77:71:7a:ce:7b:f4:ff:5a:6b:93:07:65:47:b0:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:F2:B5:7A:6E:E7:5C:6A:52:5E:7D:26:A5:23:86:64:AC:2D:BB
            X509v3 Authority Key Identifier:
                keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:3f:10:32:00:03:16:ad:d7:8b:7e:46:9c:12:b7:1e:53:
         94:50:30:2b:82:ac:20:79:13:e5:32:02:53:d4:a2:bf:44:3d:
         f5:20:15:af:27:2a:9a:53:eb:6b:b3:37:8a:1b:b6:cc:24:15:
         94:7f:46:65:22:16:29:c5:44:b8:6f:1b:a1:14:e2:a9:f1:58:
         a6:c7:bb:62:0c:ef:21:a2:34:57:f0:91:a5:aa:f4:bc:18:db:
         e9:99:60:39:60:aa:57:3d:7a:cd:0d:e6:dd:00:12:a4:10:31:
         7a:15:1d:4d:d2:e9:72:f8:3b:10:0b:44:80:eb:6d:12:18:98:
         7b:29:6a:dc:83:b7:b7:91:9e:98:02:d0:52:85:66:fa:48:73:
         f1:e3:ab:ac:5f:3d:c9:86:93:e2:44:65:03:9d:e1:d7:a2:d6:
         0e:98:dc:e9:2a:6f:62:35:84:3e:fe:ae:a3:89:71:92:1d:92:
         89:c6:d2:80:28:72:38:30:3b:8d:18:08:82:02:db:a4:0b:0b:
         94:a5:60:05:46:4d:c8:4d:ad:c4:99:c8:75:1d:9f:58:4c:7e:
         1b:01:8a:3f:5f:3a:56:80:81:fc:c3:c7:8e:90:fd:40:13:29:
         89:f4:a3:27:e4:ab:23:3c:cb:6a:2e:8b:d7:ef:c6:b3:8e:f0:
         90:42:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org