Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F95B12AEBF7111EE806CB182C4F9AE02.roa
File:                     F95B12AEBF7111EE806CB182C4F9AE02.roa (raw, json)
Hash identifier:          LVpmryw+uYS24nJeG/+qspxNYBu9ZoQZ5h3e0ahfWXo=
Subject key identifier:   07:13:DC:24:AF:20:71:35:EE:0B:7D:05:74:20:FE:80:69:07:FB:67
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       0137
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F95B12AEBF7111EE806CB182C4F9AE02.roa
Signing time:             Fri 23 Aug 2024 05:07:21 +0000
ROA not before:           Fri 23 Aug 2024 05:07:21 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151062
IP address blocks:        2401:3fa0:120::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD
        Validity
            Not Before: Aug 23 05:07:21 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66c81909-5757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:ce:e7:0d:bf:d2:84:23:d1:43:0c:4d:f2:
                    e7:46:8c:cd:dc:e3:09:22:26:25:b2:ef:df:f4:fc:
                    57:6e:9d:85:58:46:e0:51:48:bd:53:a9:0b:59:5a:
                    d9:0c:1d:bf:5e:3d:30:35:04:00:b3:cb:e0:4f:90:
                    d6:c0:ed:04:c3:fb:1e:aa:eb:2a:2c:fb:99:df:e5:
                    8d:92:8a:c4:f4:3e:a8:ac:2b:a1:5a:9f:32:65:d9:
                    0f:c6:f4:fa:d3:dc:41:74:42:98:8a:c5:15:e6:63:
                    e7:86:85:a4:26:6e:25:01:11:d5:49:c8:c7:ae:b7:
                    91:34:b7:38:97:65:5b:0e:ba:86:b3:bf:52:26:ca:
                    93:b1:ca:e0:f6:8f:c1:ca:7e:95:f5:ec:72:69:8c:
                    bc:82:42:af:14:e7:69:83:43:2e:a1:6f:17:07:3d:
                    de:c1:bc:43:04:dc:0a:4b:4b:44:d7:42:52:f2:11:
                    9a:e4:99:c2:c6:4d:be:96:59:be:d5:8b:3c:71:7b:
                    7c:90:cd:65:e5:56:c1:3d:81:12:09:85:0d:9d:1e:
                    2f:7d:bd:0e:72:f7:b0:bd:78:8a:49:68:3b:80:d2:
                    a2:e5:4e:fe:03:df:25:6c:94:f9:99:fe:ae:68:4b:
                    31:9d:69:5f:67:ff:8c:b6:6d:7b:df:f8:df:7b:b2:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:13:DC:24:AF:20:71:35:EE:0B:7D:05:74:20:FE:80:69:07:FB:67
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F95B12AEBF7111EE806CB182C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3fa0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:76:ec:74:3c:c3:b3:84:a6:d2:0d:46:8f:30:6c:1d:be:
         df:dc:3c:f1:cd:50:15:fd:1a:b7:27:a0:a4:28:c3:15:3a:ed:
         d1:5b:de:aa:22:6e:34:b8:a0:b0:f5:a8:72:14:47:d7:1f:63:
         6d:74:93:ca:d8:1c:3b:77:e6:92:e4:7e:f5:65:13:74:2d:56:
         de:97:28:7e:69:0f:84:34:69:ab:4b:34:1e:52:af:6a:53:3e:
         05:21:69:f9:4a:e5:cc:97:95:71:a8:1a:21:9b:32:96:0e:83:
         7a:23:09:e6:60:72:a1:9e:da:43:d1:47:9a:a6:54:0e:09:0b:
         40:07:12:9d:53:35:fc:dd:3a:fe:3e:26:7b:3a:f4:ee:3f:5c:
         18:28:cd:69:e1:05:1c:ec:58:45:9f:58:43:a2:20:08:5c:a3:
         aa:8f:3a:e2:b8:41:cf:8c:5a:9f:ed:5c:06:d0:74:8e:76:6f:
         45:2d:bb:27:4c:69:c4:46:41:f2:46:f3:ce:bd:3d:05:27:ed:
         ac:7a:d4:44:a7:c3:b7:f6:28:0d:a0:0b:c3:ff:fc:50:f0:60:
         56:3a:93:b3:f5:fe:ea:b5:9e:7f:ad:4c:a5:d9:52:da:6b:3f:
         9c:e0:b6:7c:5a:69:48:21:7f:c4:43:b0:4d:6b:03:39:08:02:
         5a:dd:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----