Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/1/3139342e3134352e3233372e302f32342d3234203d3e20383334.roa
File:                     3139342e3134352e3233372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          mFeraN7/qLQSXa1Klw5XhJQn65umZqoLlTaDC81MbMU=
Subject key identifier:   C8:60:FE:E2:95:E5:8C:83:F7:2D:13:7D:5A:6C:F8:4D:41:D4:CC:04
Certificate issuer:       /CN=494fe6790825e3efd5c87d5c61110b9d47fdfc70
Certificate serial:       7E0774C9C5EA495690354EB33D3A7D04C100DBA9
Authority key identifier: 49:4F:E6:79:08:25:E3:EF:D5:C8:7D:5C:61:11:0B:9D:47:FD:FC:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU_meQgl4-_VyH1cYRELnUf9_HA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/1/3139342e3134352e3233372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 04 Sep 2023 07:48:29 +0000
ROA not before:           Mon 04 Sep 2023 07:43:29 +0000
ROA not after:            Mon 02 Sep 2024 07:48:29 +0000
asID:                     834
IP address blocks:        194.145.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:07:74:c9:c5:ea:49:56:90:35:4e:b3:3d:3a:7d:04:c1:00:db:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494fe6790825e3efd5c87d5c61110b9d47fdfc70
        Validity
            Not Before: Sep  4 07:43:29 2023 GMT
            Not After : Sep  2 07:48:29 2024 GMT
        Subject: CN=C860FEE295E58C83F72D137D5A6CF84D41D4CC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:44:81:c4:da:ee:f1:d2:85:2d:31:f9:be:
                    73:79:6c:d1:e4:46:c3:0e:74:1e:7d:5a:ce:88:e4:
                    cd:c9:d8:77:34:db:d2:30:24:35:16:0a:b4:95:ad:
                    59:66:c3:f8:ca:88:8e:96:dd:4f:40:29:f6:94:d5:
                    8a:39:51:5c:ed:5d:56:1b:c1:22:35:ef:bc:a2:f9:
                    91:67:c9:fc:94:2d:81:ce:41:98:b3:21:e4:ec:b2:
                    6b:e1:6f:97:c5:c2:c0:2e:3c:73:d9:0e:04:40:f0:
                    d7:a9:5c:82:c8:db:33:40:21:75:71:9e:39:9c:95:
                    a5:66:de:c3:49:33:00:57:38:d3:d4:e4:74:b3:32:
                    d5:8f:69:7b:8a:21:f0:99:d0:8e:1a:ee:eb:88:db:
                    57:ce:ff:d2:87:cb:cb:5d:7d:d1:11:1b:83:24:b4:
                    e0:90:33:1f:0b:08:d5:eb:3c:bb:97:aa:91:f2:05:
                    20:b1:24:86:2b:b8:90:93:fe:18:15:d3:4f:fe:2c:
                    c4:db:a4:84:7a:2e:70:5b:96:0c:77:15:36:5b:e6:
                    9e:96:f9:db:d5:ee:17:cc:c8:96:98:2a:02:25:ab:
                    af:33:e9:ae:8c:5b:da:f9:4b:2f:ba:23:03:3c:d9:
                    37:67:db:1d:32:f1:0c:e1:3d:bd:1b:a9:91:d6:12:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:60:FE:E2:95:E5:8C:83:F7:2D:13:7D:5A:6C:F8:4D:41:D4:CC:04
            X509v3 Authority Key Identifier:
                keyid:49:4F:E6:79:08:25:E3:EF:D5:C8:7D:5C:61:11:0B:9D:47:FD:FC:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/1/494FE6790825E3EFD5C87D5C61110B9D47FDFC70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU_meQgl4-_VyH1cYRELnUf9_HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/1/3139342e3134352e3233372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:92:81:8d:51:6f:3d:03:04:88:a2:14:d8:9f:a0:c3:49:
         0e:67:cb:c6:4a:7d:6a:de:95:4a:af:55:4e:aa:98:9c:1e:d6:
         5c:7f:c7:70:a4:8b:e4:1c:37:c5:07:58:4e:ce:ac:23:bb:dd:
         3c:a8:ca:ac:31:4b:15:de:55:7e:39:c9:a0:a1:c5:56:6c:d4:
         41:07:b2:a4:3a:2a:33:9a:26:54:f2:53:42:30:fb:06:c3:40:
         3a:75:ed:80:01:4c:ae:71:79:77:43:65:8f:d5:6a:16:1c:7a:
         d9:f2:c1:0d:48:c0:70:3c:c6:a9:24:7d:4f:cb:66:8a:61:35:
         5d:c6:3f:00:68:25:c5:da:76:9f:64:81:ec:f0:e7:90:68:25:
         51:3e:6d:be:87:31:0f:18:c4:5c:c1:fe:e6:f3:25:2b:6c:1f:
         1f:ab:9f:1c:24:f7:7b:c9:58:62:48:97:a5:03:49:7d:e5:a8:
         31:0e:9b:97:e8:59:56:38:ec:df:08:43:ea:68:b9:5b:be:9a:
         1d:8c:12:25:27:79:79:85:de:e4:81:26:62:1d:7c:b7:f7:63:
         ba:5e:95:30:e0:c9:d5:16:97:b8:ec:8a:7c:95:b7:a7:96:5f:
         8e:08:ee:50:c5:77:74:4f:fb:12:4c:1f:84:d7:fe:63:01:fb:
         48:61:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org