Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa
File:                     A90DA1C0C71611EE9465BF5EC4F9AE02.roa (raw, json)
Hash identifier:          S8OAyRRDBlpW325PGxmAZWgYigEamJ2scEiQ4nUj0ew=
Subject key identifier:   84:64:59:B5:AA:5B:E6:50:E3:C7:C2:0D:8B:E0:E9:AE:D7:7C:2D:A3
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       E0
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa
Signing time:             Thu 27 Jun 2024 05:47:31 +0000
ROA not before:           Thu 27 Jun 2024 05:47:31 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     400618
IP address blocks:        2401:5a0:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E
        Validity
            Not Before: Jun 27 05:47:31 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667cfcf3-750c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:50:72:e5:f2:b7:cb:60:18:6f:f7:e6:84:
                    97:aa:75:12:0c:88:5b:df:ce:a2:76:40:b5:07:b4:
                    98:ef:ce:5b:71:f5:ed:a8:ab:c1:2d:82:35:ec:a2:
                    21:9c:db:17:70:7c:45:36:ec:3c:3a:d8:c7:40:f2:
                    88:25:ca:da:16:65:6f:a9:78:33:7d:58:4b:d1:e6:
                    19:8f:df:63:b3:5a:76:6d:fe:a2:57:d9:33:a0:3d:
                    18:93:73:3e:27:b3:ff:02:34:87:9f:71:03:1a:6a:
                    86:3e:47:c3:b5:f5:7b:10:10:8a:82:7f:26:26:d4:
                    70:02:e3:ad:60:6f:40:31:68:aa:22:ca:04:73:b4:
                    83:68:d8:90:f5:2d:a5:d5:a7:04:c9:64:52:df:d3:
                    92:f8:3a:98:25:92:a7:71:67:55:5d:ac:dd:5f:e4:
                    ef:02:1a:37:2f:54:7a:60:6e:a0:93:92:79:ff:d4:
                    16:b6:a7:e7:a5:29:53:7d:8e:37:75:84:a1:6c:f5:
                    a1:31:72:d0:fb:e3:29:0b:64:b2:b2:83:56:b3:62:
                    fd:d1:b2:8f:a0:27:f8:89:18:fc:a4:c1:04:43:f5:
                    59:d0:73:76:d8:61:d0:86:0e:27:84:be:bd:f7:ba:
                    54:86:af:b9:e0:a6:e6:b3:93:96:8d:d4:2a:b3:52:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:59:B5:AA:5B:E6:50:E3:C7:C2:0D:8B:E0:E9:AE:D7:7C:2D:A3
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/A90DA1C0C71611EE9465BF5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:7a:d7:2c:e1:9b:2f:42:6b:d9:ce:bf:c6:a1:72:f1:a3:
         c3:41:42:a5:26:e5:df:26:72:cc:7e:7f:95:f2:55:aa:f3:0b:
         73:cd:7c:3b:41:b5:47:4d:ec:c2:fb:f2:3f:ee:07:7c:cb:f4:
         e1:76:ff:75:32:8d:43:20:f6:03:36:f9:11:1e:24:bd:79:35:
         01:71:08:6c:9b:9d:79:d6:d3:09:74:8f:6c:37:b2:c3:55:00:
         f0:b0:92:de:68:76:f4:f1:ad:d2:77:97:a8:c8:89:26:e2:d8:
         24:a7:42:e6:14:6c:02:28:15:6d:6d:a7:76:3f:37:1c:79:22:
         73:c1:ba:58:46:c7:b4:45:a0:57:88:4b:d3:ff:49:f4:75:e6:
         3e:2d:26:ea:74:fa:b0:57:7a:75:87:7b:f9:5c:8e:e7:3f:43:
         bf:5c:c9:dc:cd:f1:a7:27:86:1b:ba:0c:d1:65:62:b8:d8:cc:
         11:ac:34:fa:1f:12:99:12:07:6e:e4:a8:b7:cd:ea:22:ea:75:
         eb:b8:ab:9c:fd:1f:88:07:39:4e:ac:23:16:20:2c:c9:36:d6:
         1e:29:1b:f8:a0:1b:c9:20:cc:5e:74:79:a4:61:e9:8a:b2:4a:
         dc:fd:97:e3:9b:75:0c:3c:96:ae:3c:cf:70:e2:6a:3f:fb:e2:
         0a:d9:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----