Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/7C0246AE41E411ECB11D8F15C4F9AE02.roa
File:                     7C0246AE41E411ECB11D8F15C4F9AE02.roa (raw, json)
Hash identifier:          ZzBqNcf2O97rinpRH/JLq8u9O60d3f/mEoTVFGyJabA=
Subject key identifier:   0E:64:2B:69:4F:9F:E6:06:37:C2:15:AF:4E:9D:C9:12:FC:C9:37:7A
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0346
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/7C0246AE41E411ECB11D8F15C4F9AE02.roa
Signing time:             Wed 02 Mar 2022 13:50:46 +0000
ROA not before:           Wed 02 Mar 2022 13:50:46 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     142418
IP address blocks:        2404:3d80:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Mar  2 13:50:46 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=621f7636-7095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:54:cc:c3:cc:29:aa:76:e7:3c:04:da:52:
                    72:62:07:47:44:4f:55:e5:3f:58:16:65:c1:d8:49:
                    9d:b0:99:24:2a:17:ad:b6:5f:7e:97:bc:76:a9:b6:
                    dd:2d:96:d1:79:9b:5b:19:f7:7e:30:3f:9c:29:d4:
                    b6:ae:a8:a0:98:be:77:85:1a:7a:49:d5:3f:04:94:
                    fb:9c:ba:0a:a7:30:4f:32:92:0a:6f:7a:ca:7c:66:
                    27:8a:4d:c8:1d:3a:bf:a0:72:40:4f:a0:bb:d6:04:
                    2a:2c:31:8c:62:a1:8b:23:54:d9:d1:1f:81:2f:99:
                    1e:42:bb:55:4a:52:7b:d4:fa:b9:f0:98:ec:34:7c:
                    75:a4:82:16:6d:8a:e8:28:75:fa:b2:09:c8:1a:11:
                    d1:b3:2d:a8:8a:21:7e:5f:5c:8b:3c:8b:72:6f:62:
                    05:aa:96:27:1b:70:d6:85:40:2c:2e:6b:00:f6:71:
                    76:e7:48:e0:5c:2e:60:0e:01:6c:6f:45:19:5d:0e:
                    c1:ec:a0:b4:e5:7b:15:90:c9:b4:c6:07:db:7d:e2:
                    f5:cd:e7:8a:b7:4f:af:55:f9:34:f4:f1:21:70:84:
                    bd:c5:22:0e:a9:37:22:1d:6f:73:09:b1:a0:a2:6c:
                    1d:71:50:67:4f:5e:57:5d:46:d5:16:ae:94:c4:74:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:64:2B:69:4F:9F:E6:06:37:C2:15:AF:4E:9D:C9:12:FC:C9:37:7A
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/7C0246AE41E411ECB11D8F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:19:cc:f8:d1:81:eb:05:ff:03:6c:cb:39:2e:9c:88:96:bc:
         2b:9e:e3:db:c8:2c:a9:21:35:a5:06:db:9a:f9:26:33:76:07:
         a5:f8:fe:25:cf:36:88:64:15:03:05:12:5c:d9:45:b2:0d:fd:
         51:f3:c1:d6:63:d8:05:d3:84:cb:8b:67:e1:79:d3:f7:23:1f:
         e9:ed:c2:3a:d1:e6:c6:20:a0:00:cf:2e:a9:75:4a:06:be:c1:
         93:b4:5c:7e:f0:fc:10:c1:d5:59:a2:f3:06:75:5a:de:ac:5d:
         d4:7a:93:af:aa:9f:24:40:a3:01:39:4b:e3:e2:e5:c3:1e:8c:
         46:1f:d6:6e:c1:ca:54:93:a2:b7:3e:0f:be:33:23:20:45:8a:
         d1:ea:88:74:08:c5:8c:76:5f:b3:36:04:e3:6c:99:e1:93:8f:
         31:70:4f:80:c4:2b:08:21:78:69:22:51:70:c0:73:e5:ba:9f:
         e5:5f:d4:35:c0:1d:94:a8:41:41:e8:38:38:15:31:cb:22:37:
         a9:7a:44:5e:c1:ea:52:af:49:c7:62:f0:4b:38:46:c3:84:38:
         ae:0c:61:33:92:ce:02:8f:ea:5c:8a:41:00:fd:97:94:03:79:
         d1:cf:52:3f:d4:c3:fa:33:2e:c8:de:ce:15:93:00:3c:26:69:
         7e:64:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----