Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64EDFA68E46E11EB96CA2246C4F9AE02.roa
File:                     64EDFA68E46E11EB96CA2246C4F9AE02.roa (raw, json)
Hash identifier:          8McJ78o2/lmHoGypHWY8UxEAvjePhIBn9yYfB9/wirU=
Subject key identifier:   34:C4:2B:16:F5:64:D9:AA:23:DF:5D:C9:B6:4B:0B:91:B8:2D:03:2D
Certificate issuer:       /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial:       01F2
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64EDFA68E46E11EB96CA2246C4F9AE02.roa
Signing time:             Mon 20 Dec 2021 02:20:53 +0000
ROA not before:           Mon 20 Dec 2021 02:20:53 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     9357
IP address blocks:        133.250.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
        Validity
            Not Before: Dec 20 02:20:53 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61bfe885-f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:fd:b6:de:39:96:38:a9:c0:7b:13:00:67:
                    20:24:31:e1:81:f0:20:ea:58:b3:2e:a2:28:a8:03:
                    0d:ef:96:c3:0c:15:ca:9c:3a:5b:2d:90:d9:4a:61:
                    eb:d2:c4:4c:83:e0:76:6e:44:f0:a9:e7:6b:b7:c1:
                    a2:9a:f5:06:32:d4:6e:f0:ed:bc:21:bb:20:8d:ec:
                    80:9c:96:fa:87:b9:2f:ac:a1:19:8c:ca:74:50:99:
                    3f:c9:60:dd:49:cb:df:90:f5:c9:a6:62:46:3e:89:
                    f9:d9:a6:76:f9:3e:f2:4e:ea:6e:1f:af:8d:ff:d3:
                    9c:82:6a:ec:24:ae:af:dd:df:c9:73:72:c4:20:2a:
                    30:2e:d7:07:c5:3b:2d:e2:53:95:0b:5e:06:41:99:
                    03:cc:99:c8:f1:71:3b:36:dd:c6:7a:ab:37:51:ef:
                    10:21:0f:b5:05:aa:b0:94:27:01:45:ac:8f:6a:47:
                    48:b3:78:9f:21:30:12:91:1c:ca:18:a3:3d:e9:b1:
                    e6:3e:64:7f:f3:67:68:ad:1e:2a:4c:ed:d8:de:05:
                    34:81:34:49:1b:95:a4:a2:4b:43:e0:fd:d9:4c:f5:
                    4e:53:16:83:75:0e:ff:26:ea:b6:94:88:01:86:89:
                    5b:44:9a:54:90:0d:50:d1:cb:ed:c2:02:16:82:32:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:2B:16:F5:64:D9:AA:23:DF:5D:C9:B6:4B:0B:91:B8:2D:03:2D
            X509v3 Authority Key Identifier:
                keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64EDFA68E46E11EB96CA2246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:b4:cd:9a:9d:51:ab:59:09:7d:6b:57:4a:b8:50:1f:d3:
         5e:9d:07:cf:b7:a9:66:63:c0:44:9d:53:f4:74:a4:ab:61:07:
         32:c2:9a:75:bc:44:78:6a:61:38:66:c7:9a:60:68:aa:02:d7:
         3f:97:0e:e8:ce:2e:7e:0c:c8:23:c8:1a:50:d4:36:02:36:16:
         ad:0e:9d:96:36:99:9e:18:1c:e0:09:92:b9:8c:16:59:9b:ce:
         25:82:ba:2b:f1:de:32:2d:3d:6c:1e:af:55:8a:cc:01:e9:65:
         a2:a5:9d:ec:48:82:16:1b:4d:a9:61:49:4f:e5:6a:38:22:ef:
         3f:f7:56:86:35:5c:04:5b:fc:1a:9e:db:61:f4:f1:fd:2b:38:
         26:00:10:91:92:66:26:0e:b0:7c:7b:3c:21:fb:77:a0:d0:5e:
         9a:a5:98:14:2c:5b:48:f3:0e:2e:c6:e3:95:66:33:27:09:de:
         46:b7:7e:cd:85:a9:de:ed:f5:33:b7:8b:75:73:4d:c7:03:4c:
         1b:31:36:f7:78:0f:ba:50:b5:ab:65:00:9e:a4:a4:61:b8:ad:
         91:7b:a2:70:81:5c:28:85:79:f3:71:d1:dc:76:b7:41:4f:56:
         66:76:ae:5e:b4:fd:c5:c0:fe:bc:6b:83:24:dd:d8:d4:15:89:
         9f:19:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----