Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/6E04B60C99F211ECA3817184C4F9AE02.roa
File:                     6E04B60C99F211ECA3817184C4F9AE02.roa (raw, json)
Hash identifier:          NUM+TYOHRlXNZWqQMbmJl66R/1Ff1QI1Jt+eBz7ioXM=
Subject key identifier:   4F:29:5E:66:72:B2:C1:D2:82:1B:6D:BF:68:6D:A2:FB:B0:B2:73:4D
Certificate issuer:       /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial:       028C
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/6E04B60C99F211ECA3817184C4F9AE02.roa
Signing time:             Wed 02 Mar 2022 06:31:45 +0000
ROA not before:           Wed 02 Mar 2022 06:31:45 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     131929
IP address blocks:        133.247.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
        Validity
            Not Before: Mar  2 06:31:45 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=621f0f51-a68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:a6:b5:09:3d:c8:88:29:37:1f:97:ac:da:
                    fa:22:09:89:22:4c:90:3b:9a:ff:f4:ab:e3:60:62:
                    dc:31:9e:86:38:ae:b5:6a:bd:ed:a4:1b:1c:63:b8:
                    d7:cd:b7:4d:75:32:1e:f4:08:69:0d:9c:ea:a2:54:
                    30:2b:e0:48:a8:2c:db:4b:58:e0:e2:93:da:e7:8b:
                    36:7c:21:b9:87:1d:0e:bc:e6:02:e7:86:c2:65:2b:
                    41:f5:ca:d7:66:e4:3e:ed:28:9d:4c:9a:46:5e:b5:
                    4a:6a:66:ff:cb:0b:be:95:b1:7f:f0:86:55:bf:9f:
                    9a:40:6c:b9:e1:67:fa:44:44:55:e0:ea:7d:4e:53:
                    08:41:e7:b1:52:92:42:d6:7f:47:0d:50:33:65:c2:
                    85:2e:46:40:23:50:67:72:e0:25:bd:e9:6b:af:0a:
                    9b:cf:c1:c7:1f:5e:60:19:2f:56:1d:fa:92:44:d9:
                    36:b3:97:8d:aa:c0:95:47:03:71:72:24:ab:30:bb:
                    60:33:dc:a2:c3:38:10:0f:14:00:e4:a5:bd:ee:d6:
                    2d:96:e6:09:89:87:e0:82:aa:eb:d3:db:5f:89:e0:
                    13:99:d7:bb:86:0c:3f:43:39:77:55:05:13:a1:08:
                    96:6d:36:44:25:15:fe:b0:c5:de:82:2b:74:d0:90:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:5E:66:72:B2:C1:D2:82:1B:6D:BF:68:6D:A2:FB:B0:B2:73:4D
            X509v3 Authority Key Identifier:
                keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/6E04B60C99F211ECA3817184C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:1b:4b:b5:cc:42:74:4a:88:fa:89:42:44:0a:7a:be:49:
         14:f0:bd:af:24:ce:95:93:f9:39:b1:17:34:d0:07:d2:e3:bb:
         30:53:af:2f:fc:ff:5c:12:55:51:36:e3:ca:01:68:fa:20:73:
         48:8f:67:90:69:e6:28:aa:b1:3c:8b:bc:38:32:65:97:29:ad:
         4c:71:c6:4c:0e:82:50:3a:fd:4a:c3:c8:ba:77:1b:7e:58:6a:
         e0:b1:2c:f7:3e:a1:66:f3:f6:31:6e:98:e9:4b:b2:62:33:c4:
         4f:39:02:2c:63:0f:62:87:4c:49:c2:9d:02:c3:06:ed:69:23:
         e6:f4:78:26:5b:e0:0a:42:a8:6b:72:93:e0:01:1b:0d:25:fe:
         44:cc:7d:42:6d:1d:38:72:81:43:89:b9:3a:c9:cd:cd:39:32:
         18:0d:2b:18:62:ad:92:de:08:b7:7a:c1:84:3a:1a:27:18:9a:
         f6:c0:8b:c4:b8:90:68:c2:d0:12:dd:41:cd:da:30:e3:05:82:
         02:0d:e4:6f:6a:5a:87:7a:b3:1c:bc:47:3e:bc:e2:12:da:92:
         b5:f7:a7:92:ef:bf:77:bc:a5:2b:41:dd:d4:4f:58:31:39:ae:
         29:74:38:ad:04:45:4e:b0:6e:c2:b3:6a:4d:f5:56:39:63:8e:
         a7:ba:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----