Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          R+KJNAoYIFtyi7BSKXlMyeFxcWFKSi0USCGZlqtBu/E=
Subject key identifier:   8A:CB:1B:4B:84:E8:29:93:DE:79:6E:80:B2:56:6C:36:10:AB:C5:5A
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7CF2AE0DA29C78F35DD97AACAE32B9B3E77220B2
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 18 Jul 2024 09:18:19 +0000
ROA not before:           Thu 18 Jul 2024 09:13:19 +0000
ROA not after:            Thu 17 Jul 2025 09:18:19 +0000
asID:                     14618
IP address blocks:        2620:134:600b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f2:ae:0d:a2:9c:78:f3:5d:d9:7a:ac:ae:32:b9:b3:e7:72:20:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul 18 09:13:19 2024 GMT
            Not After : Jul 17 09:18:19 2025 GMT
        Subject: CN=8ACB1B4B84E82993DE796E80B2566C3610ABC55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:cc:71:5c:f1:ff:7b:37:a1:41:2f:bf:f0:
                    34:5b:ab:0c:02:4b:89:f5:d7:3c:48:4d:14:3a:a1:
                    e9:0a:3f:48:39:35:e2:db:02:e9:37:94:ac:35:45:
                    50:49:af:9a:66:05:63:61:4a:46:34:78:e6:1c:4a:
                    76:fe:d5:56:ff:26:fa:35:ca:3b:bc:29:80:ee:ba:
                    3e:2d:0b:31:97:52:79:64:4a:3a:26:b1:00:41:e5:
                    70:ee:8c:a9:c5:6c:f4:6f:45:79:72:be:de:89:cb:
                    d0:82:4c:be:64:28:aa:7f:67:1e:10:57:69:c4:0e:
                    2d:cf:16:ea:d6:b6:6a:db:d0:4e:86:40:d6:81:53:
                    49:71:2f:02:5e:e7:01:ec:af:66:92:db:d2:1f:e5:
                    5f:40:24:27:48:91:a4:76:5d:3d:d3:19:10:e4:b4:
                    a8:79:38:00:e5:48:88:26:ae:b8:13:12:e6:38:cb:
                    65:4a:ca:b9:fb:90:b8:62:ec:cc:e5:23:c2:7a:76:
                    79:a9:a7:01:55:ee:10:a1:a5:29:9e:3a:9d:40:3d:
                    c6:ed:82:41:c9:47:21:39:87:a3:9c:5d:15:09:b9:
                    1b:f7:5b:24:54:a1:94:0e:80:a5:d7:18:30:28:52:
                    22:1c:b2:80:78:95:ae:d9:6c:1d:30:b7:f9:0d:39:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CB:1B:4B:84:E8:29:93:DE:79:6E:80:B2:56:6C:36:10:AB:C5:5A
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:59:54:f6:0e:d4:b6:d9:42:3c:a8:5c:7e:5a:70:8c:b1:9b:
         2b:db:7d:9b:58:17:75:c8:d0:e1:ef:d1:ef:bb:59:e7:1f:f2:
         72:2f:a8:9e:48:6b:64:3c:09:47:20:e4:b3:9c:11:44:4f:e8:
         c6:ec:33:69:59:6b:ab:8d:32:c0:88:16:24:26:bb:a0:6b:0d:
         95:f0:37:a5:35:28:82:9a:37:7e:72:99:c8:39:17:6f:22:6b:
         1a:dc:fd:ce:4f:75:e3:34:47:e6:00:74:ae:75:fe:21:ee:8e:
         32:ae:e7:aa:9d:01:e6:34:80:4e:8f:a7:78:c8:ee:d5:64:0c:
         4b:dd:79:34:29:17:fc:49:a6:2a:74:8f:86:db:bb:62:0c:2c:
         70:51:b6:5a:4d:18:0a:1a:01:3b:cc:c6:91:7d:b6:ec:87:55:
         7e:62:05:66:81:21:f5:af:8f:10:cb:f5:ea:6c:c7:d7:48:f6:
         5c:7d:d2:9f:3c:1b:5f:d8:dc:a8:3e:6c:a1:7c:a1:75:8a:7a:
         b8:be:dd:c0:3d:a9:c4:6d:ed:e5:e5:66:e4:ca:cd:d8:7f:37:
         aa:d2:cb:5c:7a:b2:cf:c6:af:57:25:b2:6e:8f:17:cd:de:fb:
         00:9d:fe:d1:a1:25:c3:97:e8:cf:97:5a:dc:2f:00:c0:67:10:
         90:99:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----