Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/97D88D36F05B11ECBD921381C4F9AE02.roa
File:                     97D88D36F05B11ECBD921381C4F9AE02.roa (raw, json)
Hash identifier:          oJgqJo7bxglayHt4vC0tZQknf1ZUM6Llokq8oOvMZCA=
Subject key identifier:   F7:88:57:DB:5B:6C:CD:37:AA:96:FE:C1:04:13:3B:3C:4F:4E:4F:EC
Certificate issuer:       /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial:       0372
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/97D88D36F05B11ECBD921381C4F9AE02.roa
Signing time:             Mon 20 Jun 2022 05:41:12 +0000
ROA not before:           Mon 20 Jun 2022 05:41:12 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     17958
IP address blocks:        133.226.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
        Validity
            Not Before: Jun 20 05:41:12 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=62b00878-4f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:20:5e:57:98:78:12:94:c6:be:8b:97:90:
                    32:23:61:05:da:9b:a7:87:fa:2b:f9:98:40:ae:01:
                    fd:44:48:d6:d9:ba:9d:ad:72:6f:f9:d1:48:0a:cd:
                    3a:bf:9a:e3:9f:b8:15:0f:18:06:83:b9:b8:a7:64:
                    8b:bf:3d:8b:f2:f5:c1:4a:e6:8a:bc:b2:f8:6f:3e:
                    53:3d:1f:c3:3a:f3:26:5c:62:4a:63:74:0a:17:7c:
                    9e:59:30:a1:2e:c6:a3:01:b7:e3:12:05:42:fc:31:
                    b0:0b:3d:99:c8:ca:6f:ab:61:71:21:8a:e1:4b:02:
                    b1:f3:13:e3:80:40:6a:bc:28:bf:71:6a:12:ab:15:
                    58:47:79:20:6e:af:5c:bb:e3:a2:a0:93:4b:fe:47:
                    1d:b6:27:6a:3d:6d:df:c2:bd:b5:f4:2a:42:c6:d1:
                    6d:23:7a:e0:b2:56:94:14:0f:69:d7:4a:59:5f:2c:
                    1c:cd:ef:65:4f:1e:6b:3f:4c:5e:ff:4f:9b:ba:c6:
                    39:85:93:bb:05:89:cf:d2:4e:28:e3:69:9b:83:4a:
                    e0:c0:d5:6b:26:bd:3e:06:5f:96:a9:7c:5c:78:e8:
                    3f:e8:a5:cf:52:3a:58:36:80:c3:3c:01:0f:5e:df:
                    cd:22:73:15:aa:d2:62:d8:17:7d:f6:2d:2c:2c:ff:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:57:DB:5B:6C:CD:37:AA:96:FE:C1:04:13:3B:3C:4F:4E:4F:EC
            X509v3 Authority Key Identifier:
                keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/97D88D36F05B11ECBD921381C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:ff:ce:bb:d7:0d:3a:a6:d3:57:e1:cc:77:12:e5:2b:53:
         d8:bf:dc:0f:95:36:6c:5f:38:f7:c1:97:a0:67:ee:51:00:02:
         8c:cf:81:77:6d:cc:d4:6d:d1:3e:62:1a:75:f6:77:6f:f8:e9:
         e9:a0:3c:cc:ad:d7:7b:ed:77:83:92:5f:10:e4:13:67:bd:77:
         e8:b6:2b:2d:d6:16:5b:5d:75:41:58:06:d5:39:00:8e:7a:73:
         27:dc:c9:2f:71:d3:33:b2:9b:cb:b5:43:09:c6:a2:c6:3f:4c:
         a5:62:ea:dc:53:f0:fc:f5:04:b3:91:25:25:8c:33:06:88:5f:
         39:1d:b7:10:f3:68:83:38:65:4c:dd:c9:d6:de:cd:f4:1e:ed:
         6a:42:df:11:9e:54:09:5c:9f:27:e5:72:4e:c0:5d:0b:35:79:
         59:ae:06:7d:ba:64:21:c1:82:d8:c9:9f:b3:ff:f4:29:f2:68:
         3a:06:5f:c4:df:6b:5d:82:f1:87:2a:ea:5b:d5:bc:8e:ee:e1:
         16:b4:5b:bc:9d:3f:70:28:cf:e7:fa:cf:d8:4c:7b:05:8b:ff:
         25:4a:6d:aa:30:ee:fb:01:df:59:f1:52:16:f4:af:00:64:e2:
         db:1a:5b:3c:fc:6e:bc:db:8c:5b:2a:d7:58:5b:8c:b9:53:b6:
         57:de:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----