Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9E4B1426391211E99E31F655C4F9AE02.roa
File:                     9E4B1426391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier:          Bq7BDJN67uaYa9Ht+0zuhC1N7BIHxazmLFWwDx7C09g=
Subject key identifier:   7F:AF:A9:4F:98:BF:57:1E:E5:0A:1F:3D:DC:DA:89:09:1E:06:B9:A8
Certificate issuer:       /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial:       0EC4
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9E4B1426391211E99E31F655C4F9AE02.roa
Signing time:             Sat 01 Oct 2022 18:55:23 +0000
ROA not before:           Sat 01 Oct 2022 18:55:23 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     138181
IP address blocks:        2403:5180:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
        Validity
            Not Before: Oct  1 18:55:23 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=63388d1b-458d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:26:44:3d:57:58:74:c3:bb:3d:12:1f:35:
                    e9:b0:26:50:60:3a:77:cd:e7:ed:9e:bf:88:8e:0b:
                    59:aa:01:3b:bd:2f:cf:11:e6:32:d1:16:c4:38:b9:
                    0f:46:75:e7:a8:43:04:70:12:0f:c9:ad:da:48:8a:
                    fe:a5:d2:ad:9d:3e:5d:ff:f2:55:2e:3b:cc:e9:5f:
                    3d:6e:64:fc:7f:ac:a9:4b:0f:b5:b2:b8:40:f7:5c:
                    3e:98:22:cf:29:97:d7:c1:66:6b:bc:5e:4f:b4:1a:
                    29:e0:23:7b:01:6d:94:f3:07:47:bd:b2:ed:9c:e2:
                    33:9d:42:0b:96:3e:52:86:26:92:31:e7:46:d4:5f:
                    14:99:c9:ad:df:16:1e:ed:d3:3f:25:89:ec:86:d1:
                    a7:96:32:0a:be:1d:5f:ca:25:8c:c3:48:05:ee:9b:
                    f7:10:4c:52:c8:5c:bb:d5:6f:80:ff:bf:3e:e6:9d:
                    f7:6a:45:93:7b:a5:e8:3d:c3:a8:5f:8d:f1:ae:56:
                    3c:f8:8c:b1:60:03:6b:93:a0:07:c3:87:59:e9:dd:
                    00:14:74:da:8a:2c:44:1b:19:48:ce:39:84:9f:71:
                    84:b3:24:58:7f:24:d5:9b:74:40:3e:57:52:aa:2d:
                    ea:b6:0a:6a:35:e8:a1:a3:c8:e1:5d:fa:cc:89:73:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AF:A9:4F:98:BF:57:1E:E5:0A:1F:3D:DC:DA:89:09:1E:06:B9:A8
            X509v3 Authority Key Identifier:
                keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9E4B1426391211E99E31F655C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5180:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:78:38:96:91:27:02:23:d9:49:4a:28:82:d3:42:f0:7e:1c:
         8d:7f:b9:7a:14:a7:8b:50:e0:86:84:58:ad:da:5d:44:51:b2:
         2f:6a:db:fe:9e:b5:ab:79:a0:15:a4:3d:90:2f:15:5d:a3:60:
         61:40:fd:1e:2f:ab:86:34:f7:bc:7b:6a:53:7a:30:6b:07:d2:
         cb:f2:0e:4c:6b:40:2b:7b:44:76:1d:5f:3e:8f:8a:18:63:36:
         25:67:59:88:0e:dc:07:0d:dc:c0:de:d5:f6:1e:83:63:6c:02:
         c3:89:d5:d1:46:30:08:d3:59:85:4f:5c:b0:4b:fa:af:a4:21:
         92:d0:86:65:c4:22:5d:26:9b:dc:42:c4:fd:b7:48:1d:92:32:
         e1:11:c3:c7:36:90:cf:2e:6e:dc:81:99:ea:c1:10:56:7a:10:
         27:06:90:20:50:a4:49:20:eb:30:41:4b:89:a7:5f:ba:d8:8e:
         9e:43:dc:55:14:da:12:32:0f:37:28:ee:d5:9f:55:e5:8d:04:
         9f:27:d2:8e:4b:97:29:e5:ff:a6:79:07:b3:a4:ec:3b:db:51:
         10:f6:c3:c9:c4:8b:82:57:00:b6:bb:1b:44:56:cd:9e:00:4b:
         59:96:a1:30:25:66:6b:4d:de:a9:ac:95:be:3e:86:5a:02:9c:
         39:bd:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----