Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/89CDA6A87BA911ECA249C677C4F9AE02.roa
File:                     89CDA6A87BA911ECA249C677C4F9AE02.roa (raw, json)
Hash identifier:          wTyRH7w9Q0WNOTRCLi7BJJ32IbfGorz0KD6f2Gc0QTs=
Subject key identifier:   3A:0E:F9:85:51:BE:1B:B2:06:8F:3F:F9:B5:6C:09:0F:97:9A:9C:9C
Certificate issuer:       /CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
Certificate serial:       0247
Authority key identifier: 22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/89CDA6A87BA911ECA249C677C4F9AE02.roa
Signing time:             Sat 22 Jan 2022 17:34:23 +0000
ROA not before:           Sat 22 Jan 2022 17:34:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:00 +0000
asID:                     55550
IP address blocks:        103.102.252.0/22 maxlen: 24
                          103.219.234.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
        Validity
            Not Before: Jan 22 17:34:23 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=61ec401f-e432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:e2:ad:a0:ea:e4:6a:17:bb:8e:dc:d0:02:
                    de:fe:be:22:48:96:82:86:3d:07:94:8c:cb:da:91:
                    ff:9e:4c:e3:b3:57:38:d0:5b:49:c7:c4:42:ee:55:
                    96:aa:58:be:9d:70:2c:fc:16:19:91:fe:2f:fc:d8:
                    9a:b3:c7:e6:b9:6b:fb:07:55:cf:95:29:2f:3d:a8:
                    54:b5:d8:24:c3:22:cf:68:0e:8d:2b:cc:5b:3c:07:
                    79:27:e4:bf:bc:b6:ea:d0:ca:15:f0:a3:db:f1:09:
                    c6:e7:f4:c4:3c:94:98:1e:ad:80:24:38:41:21:ca:
                    be:f5:f6:3b:3b:e3:76:f1:b8:0d:3b:a4:57:99:d8:
                    f9:80:54:84:83:36:f3:5c:bd:6a:c9:98:62:74:26:
                    c9:cd:51:4f:6e:fb:42:f2:ad:06:c1:f5:8b:0b:98:
                    3c:08:c9:3d:c3:3b:71:f0:dc:8a:25:7c:09:f5:fb:
                    f6:4b:c5:8b:36:10:23:2a:59:71:19:4d:95:5c:2b:
                    9c:d7:18:f9:89:d3:cc:82:05:7b:4e:c8:04:7f:4e:
                    10:14:38:12:07:b8:3f:b4:63:d8:d4:72:9e:29:f0:
                    35:8c:f5:16:ff:ec:2d:e9:eb:4a:8c:58:83:9a:92:
                    8a:3d:9e:5e:ee:5c:9e:c4:a3:be:dd:48:b2:d5:d6:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0E:F9:85:51:BE:1B:B2:06:8F:3F:F9:B5:6C:09:0F:97:9A:9C:9C
            X509v3 Authority Key Identifier:
                keyid:22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/89CDA6A87BA911ECA249C677C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.252.0/22
                  103.219.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:b3:8f:96:8f:4c:fb:b2:b0:ed:08:5b:bb:a4:de:2f:3b:e0:
         66:18:95:36:df:58:5d:60:dc:6f:09:ca:87:c9:4e:08:fd:3d:
         15:a7:d2:7b:7c:4e:aa:77:51:d0:ab:10:92:c7:af:25:c6:b3:
         de:99:8d:0d:63:35:d7:da:2f:8b:3b:7d:48:1a:1f:6d:9b:14:
         d6:e7:47:e5:bb:ce:f7:d5:3f:e7:6c:49:c3:ee:02:1c:58:15:
         71:9b:07:67:52:2b:3d:05:ab:86:57:a5:b2:45:55:49:59:84:
         07:86:c1:c4:85:01:71:cf:af:8b:e7:cd:29:78:21:7b:d1:d6:
         ae:d8:ea:20:6d:45:91:04:d3:8b:ef:04:84:d0:65:19:89:47:
         36:44:da:08:6e:e4:73:9f:14:72:43:03:dc:c7:05:b1:dc:47:
         1f:ba:9a:4b:1c:f8:a9:c7:98:42:dc:c3:7a:4b:c5:f0:6a:fe:
         18:ee:cc:5c:6e:4e:15:64:4f:a9:3a:7d:2b:00:3b:62:a9:1e:
         39:df:fe:53:72:3a:06:e9:98:23:53:b6:1a:99:4e:72:26:c0:
         e7:89:1e:a7:dc:98:68:43:35:0b:21:09:9e:2c:7c:44:12:97:
         7f:31:1d:7e:bf:f7:9c:fb:77:a0:e2:93:90:8b:39:2c:d4:b3:
         90:a5:1f:c2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcwRTYxMTAvBgNVBAUTKDIyQTJGQUM0NjFGRkQ1MjM2NDVBNjgxMTZFNTVDMjJE
OEU5ODZDOTkwHhcNMjIwMTIyMTczNDIzWhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWVjNDAxZi1lNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4xziraDq5GoXu47c0ALe/r4iSJaChj0HlIzL2pH/nkzjs1c40FtJx8RC7lWW
qli+nXAs/BYZkf4v/Nias8fmuWv7B1XPlSkvPahUtdgkwyLPaA6NK8xbPAd5J+S/
vLbq0MoV8KPb8QnG5/TEPJSYHq2AJDhBIcq+9fY7O+N28bgNO6RXmdj5gFSEgzbz
XL1qyZhidCbJzVFPbvtC8q0GwfWLC5g8CMk9wztx8NyKJXwJ9fv2S8WLNhAjKllx
GU2VXCuc1xj5idPMggV7TsgEf04QFDgSB7g/tGPY1HKeKfA1jPUW/+wt6etKjFiD
mpKKPZ5e7lyexKO+3Uiy1dY62wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDoO+YVR
vhuyBo8/+bVsCQ+XmpycMB8GA1UdIwQYMBaAFCKi+sRh/9UjZFpoEW5Vwi2OmGyZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzBFNi83NTY0OEVDRUQ2
MzUxMUU4OTY2MzEzMjJDNEY5QUUwMi9JcUw2eEdIXzFTTmtXbWdSYmxYQ0xZNlli
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lxTDZ4R0hfMVNOa1dtZ1JibFhDTFk2WWJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcwRTYvNzU2NDhFQ0VENjM1MTFFODk2NjMxMzIyQzRGOUFFMDIvODlDREE2QTg3
QkE5MTFFQ0EyNDlDNjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnZvwDBAFn2+owDQYJKoZIhvcNAQELBQADggEBAM+zj5aP
TPuysO0IW7uk3i874GYYlTbfWF1g3G8JyofJTgj9PRWn0nt8Tqp3UdCrEJLHryXG
s96ZjQ1jNdfaL4s7fUgaH22bFNbnR+W7zvfVP+dsScPuAhxYFXGbB2dSKz0Fq4ZX
pbJFVUlZhAeGwcSFAXHPr4vnzSl4IXvR1q7Y6iBtRZEE04vvBITQZRmJRzZE2ghu
5HOfFHJDA9zHBbHcRx+6mksc+KnHmELcw3pLxfBq/hjuzFxuThVkT6k6fSsAO2Kp
Hjnf/lNyOgbpmCNTthqZTnImwOeJHqfcmGhDNQshCZ4sfEQSl38xHX6/95z7d6Di
k5CLOSzUs5ClH8I=
-----END CERTIFICATE-----