Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/JSD6su-8GmSdAloMCdElkEvt0AM.roa
File:                     JSD6su-8GmSdAloMCdElkEvt0AM.roa (raw, json)
Hash identifier:          byIajotq4oMDlZPGW2paVqqfxYBJgKLLUDwL6wPkwLA=
Subject key identifier:   25:20:FA:B2:EF:BC:1A:64:9D:02:5A:0C:09:D1:25:90:4B:ED:D0:03
Certificate issuer:       /CN=1FCAD722567791FD73A091FE891C948F1914D672
Certificate serial:       05A4
Authority key identifier: 1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/JSD6su-8GmSdAloMCdElkEvt0AM.roa
Signing time:             Wed 09 Apr 2025 06:48:44 +0000
ROA not before:           Wed 09 Apr 2025 06:48:44 +0000
ROA not after:            Thu 09 Apr 2026 06:41:32 +0000
asID:                     132019
IP address blocks:        2405:f580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FCAD722567791FD73A091FE891C948F1914D672
        Validity
            Not Before: Apr  9 06:48:44 2025 GMT
            Not After : Apr  9 06:41:32 2026 GMT
        Subject: CN=2520FAB2EFBC1A649D025A0C09D125904BEDD003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:30:f2:f3:9f:d6:49:70:cd:12:2e:81:27:
                    21:08:4a:4e:77:e5:03:cb:73:56:a1:5c:71:bc:5b:
                    3d:ef:7e:43:8c:1b:dc:a0:b8:3e:f3:9d:50:0a:29:
                    3b:79:5b:96:22:76:84:41:af:2c:55:5e:b9:b0:c1:
                    40:95:86:a6:25:95:23:90:71:10:ae:e2:a8:2e:f8:
                    84:d0:c8:6e:93:a2:b2:4b:47:1e:8f:ec:ec:fd:5a:
                    5a:f6:84:53:6c:54:b7:f8:7b:27:a3:bf:e5:6e:d9:
                    44:ed:1c:b1:9a:1a:bd:95:7d:6b:2e:5b:89:dc:7c:
                    dd:bb:19:b8:fd:87:8c:50:d9:91:aa:35:9b:f9:56:
                    cf:63:bd:0e:c8:84:63:30:70:87:92:b1:1e:ee:d4:
                    d5:6a:44:84:2e:34:ab:4d:34:9a:2f:1d:5c:1c:1f:
                    66:f4:1d:d0:60:32:54:93:e6:97:6b:e3:04:5e:39:
                    b7:80:29:89:c4:ab:5e:f7:6c:73:e2:05:f3:9f:02:
                    aa:be:12:c4:1d:84:4b:05:b3:78:8c:90:61:6a:b7:
                    c6:48:8f:e7:c3:d6:b7:69:14:71:1f:b7:53:9f:6c:
                    bb:ef:6a:21:c3:48:0e:7e:6f:71:29:f3:31:7b:a3:
                    15:20:96:ff:86:4e:03:5e:0f:b7:a2:d6:2e:7d:82:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:20:FA:B2:EF:BC:1A:64:9D:02:5A:0C:09:D1:25:90:4B:ED:D0:03
            X509v3 Authority Key Identifier:
                keyid:1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/JSD6su-8GmSdAloMCdElkEvt0AM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:7f:f3:d0:18:12:71:dd:26:b7:6d:5f:25:0d:20:e5:cd:
         c7:6c:b1:13:0a:b0:fb:6e:c0:5e:5b:7b:c0:16:80:10:2f:b3:
         58:4f:e6:c8:6c:29:1f:f0:fe:52:d3:5e:25:3a:d0:80:c4:7e:
         c0:93:91:13:f9:ce:5b:e6:60:3e:2b:95:7e:c8:c2:21:7d:0e:
         ef:4f:99:50:7f:9b:53:bd:4b:12:44:f6:20:ed:d1:71:54:72:
         30:ad:15:2b:c7:cc:91:82:e2:28:cd:23:78:ec:ff:0d:e6:d9:
         85:72:82:07:e3:5f:8b:95:12:ce:38:89:56:71:ec:5c:60:b2:
         7f:38:d1:a7:29:7f:f3:26:7a:33:98:a0:0d:94:f9:c1:b7:a3:
         9a:e8:d1:81:8e:1b:61:1d:04:d8:38:83:90:45:1a:d9:b7:85:
         6a:40:84:55:54:10:69:35:d5:83:5c:51:2b:d2:f1:1f:4f:2d:
         f2:b0:fa:58:91:ae:da:4f:66:f6:53:6b:df:ab:3c:74:aa:68:
         e9:a1:2d:c5:55:b4:c1:93:0a:7e:85:5c:62:ce:4e:f4:ea:3a:
         cf:11:6a:dc:e0:ef:2b:b7:60:06:6a:e3:13:27:b7:25:5e:60:
         00:b3:a4:ea:55:bc:14:5d:3c:93:e7:fa:14:70:2f:bb:2c:f2:
         8c:d3:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----