Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          aTyikgWdvFBOhY4mCocRsWgd5iiVJLnUTq0+0qDlv8Y=
Subject key identifier:   E5:70:5F:F7:1A:2C:B3:2F:37:90:8E:E3:2E:8E:7D:92:D6:AF:BF:7A
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7BF80CF9A62699B74B5798F9C2395AEFBCA98AED
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
Signing time:             Thu 18 Jul 2024 09:18:19 +0000
ROA not before:           Thu 18 Jul 2024 09:13:19 +0000
ROA not after:            Thu 17 Jul 2025 09:18:19 +0000
asID:                     33538
IP address blocks:        2620:134:600c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f8:0c:f9:a6:26:99:b7:4b:57:98:f9:c2:39:5a:ef:bc:a9:8a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul 18 09:13:19 2024 GMT
            Not After : Jul 17 09:18:19 2025 GMT
        Subject: CN=E5705FF71A2CB32F37908EE32E8E7D92D6AFBF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:90:56:27:ab:cf:1a:cb:ec:e0:43:7a:57:
                    7b:24:2e:c7:52:5c:59:18:75:c5:0f:6d:0a:ae:65:
                    04:fe:b3:34:a6:5e:39:fc:57:e4:59:98:1c:e2:ca:
                    81:33:7e:32:3d:7e:f1:66:ef:78:05:58:99:ad:bf:
                    3c:0b:6b:32:a2:0b:2d:7f:82:48:de:55:9d:9a:9f:
                    f6:bf:fe:cf:a9:24:5f:92:ae:17:65:5b:cd:27:33:
                    e6:a7:1e:ce:f0:40:15:1f:d1:f2:85:51:ad:28:da:
                    4d:32:40:67:3c:0b:62:39:0e:c2:7c:49:1d:4f:9b:
                    6a:53:4a:3f:1c:77:12:ec:0a:5f:9a:0f:98:69:bc:
                    75:9a:64:ae:c9:88:d7:ce:0c:84:b4:22:65:17:3c:
                    cf:18:1c:4d:33:91:38:8b:ef:60:b7:2f:f5:d1:ef:
                    5d:0e:99:bb:33:c8:a2:5a:ba:38:a6:77:e0:9c:35:
                    ec:48:d9:fc:d0:77:f6:4a:70:c3:50:ec:b2:70:53:
                    23:7f:21:c9:76:45:e0:a8:e6:8b:db:0c:2a:2b:32:
                    60:f9:82:26:69:ed:7f:36:34:04:f6:37:00:79:07:
                    c1:7a:d3:1e:cc:3b:b9:9a:fa:39:69:ba:35:df:e1:
                    76:64:0c:fc:61:84:ed:16:35:f5:45:98:8c:42:51:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:5F:F7:1A:2C:B3:2F:37:90:8E:E3:2E:8E:7D:92:D6:AF:BF:7A
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:b4:c7:77:10:6f:49:8c:da:a6:03:18:5d:1a:f4:70:48:
         20:fb:38:c7:74:fc:1c:d6:f8:ea:62:5f:59:aa:71:44:86:b2:
         9b:7b:bf:d6:c5:fa:50:97:0f:21:0c:d2:6a:3d:90:85:a4:ef:
         d1:6e:1f:fa:ed:94:90:13:72:35:b8:bd:5a:02:e3:60:5e:d0:
         2d:e0:ab:d4:c7:28:52:54:c6:a9:aa:2c:15:28:d2:15:30:78:
         8d:eb:b8:4d:38:35:90:8b:3f:0f:cd:46:bd:69:f6:41:f8:8b:
         ed:76:14:65:7f:f2:19:f7:07:be:fc:d3:da:d3:32:6d:6f:73:
         30:d3:f5:3a:99:56:5f:bc:80:bd:b9:45:46:8c:d2:e7:0d:13:
         e9:71:eb:61:bf:04:cc:fa:45:0d:d9:e4:81:7c:21:a7:e8:9a:
         9d:d7:25:42:ce:93:71:7a:d5:ce:3c:0a:25:cd:23:cd:78:10:
         37:d5:ae:67:59:86:4c:71:7a:b8:31:f6:08:a9:33:5a:5d:d1:
         db:0c:72:08:91:1b:0c:17:ef:79:1c:cc:fe:83:51:1a:34:57:
         5d:eb:8c:ab:92:99:04:97:f7:96:fd:d5:b8:89:c1:cb:75:b0:
         1d:e6:a9:03:54:8f:3e:9c:0d:1a:65:a0:97:2e:9f:14:60:a1:
         61:85:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----