Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/AB2D2A9832C611ECA639A749C4F9AE02.roa
File:                     AB2D2A9832C611ECA639A749C4F9AE02.roa (raw, json)
Hash identifier:          UYUf/+10Hs7JsrrsqzseEfz7S6ZhO1q1F35yphqIHo0=
Subject key identifier:   0B:31:67:05:F6:68:CE:60:29:23:1D:A6:59:8E:B9:17:09:9F:C7:20
Certificate issuer:       /CN=A91330C8/serialNumber=5A982F136FE678F55E904427766B1D513519A594
Certificate serial:       05E2
Authority key identifier: 5A:98:2F:13:6F:E6:78:F5:5E:90:44:27:76:6B:1D:51:35:19:A5:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpgvE2_mePVekEQndmsdUTUZpZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/AB2D2A9832C611ECA639A749C4F9AE02.roa
Signing time:             Wed 01 Mar 2023 00:30:31 +0000
ROA not before:           Wed 01 Mar 2023 00:30:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23704
IP address blocks:        2404:c80::/32 maxlen: 32
                          2404:c80:f000::/36 maxlen: 36
                          2404:c80:f000::/48 maxlen: 48
                          2404:c80:f000::/54 maxlen: 54

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91330C8/serialNumber=5A982F136FE678F55E904427766B1D513519A594
        Validity
            Not Before: Mar  1 00:30:31 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63fe9ca6-dbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:04:ae:85:b8:66:1e:7c:67:6e:85:b8:dc:
                    08:7a:ea:45:b3:c0:74:f5:f2:2f:bf:d8:28:3b:76:
                    87:6a:6e:42:b8:f0:f6:54:ff:ba:db:9c:73:7b:9d:
                    b1:25:50:55:ed:0a:58:da:fe:49:d5:04:d7:15:93:
                    e7:27:33:9b:b6:ed:4a:27:27:24:20:00:90:43:b6:
                    46:7e:fb:48:1c:24:8e:cc:7d:a0:a1:53:43:c1:22:
                    bb:f9:7b:b0:cc:2d:20:45:1e:79:19:57:06:5b:7e:
                    5a:58:f4:d2:e1:82:90:dc:8c:83:88:73:db:7a:2a:
                    9f:45:a4:21:28:8f:ce:18:74:f3:cf:76:ef:d1:22:
                    89:37:c9:5c:eb:0e:b2:57:78:cc:b0:95:5c:49:8d:
                    cd:f7:2b:fc:ed:63:c0:d8:cb:a5:8c:63:8d:de:fb:
                    fd:3a:d8:9d:39:3b:3d:c0:b5:13:a2:19:3d:c4:d5:
                    19:24:34:f6:5a:a6:c9:b0:62:b0:cb:fa:0a:9b:de:
                    f2:a5:3c:79:12:52:f4:17:33:11:71:b0:86:e6:ef:
                    fd:88:87:8f:3c:bb:d7:8d:0b:df:2f:14:1b:32:7e:
                    e6:c0:ae:ee:43:d8:0d:13:a4:7b:24:94:ee:2d:03:
                    aa:61:24:f5:93:0b:fa:75:82:bd:aa:28:0c:6b:19:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:31:67:05:F6:68:CE:60:29:23:1D:A6:59:8E:B9:17:09:9F:C7:20
            X509v3 Authority Key Identifier:
                keyid:5A:98:2F:13:6F:E6:78:F5:5E:90:44:27:76:6B:1D:51:35:19:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/WpgvE2_mePVekEQndmsdUTUZpZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpgvE2_mePVekEQndmsdUTUZpZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/AB2D2A9832C611ECA639A749C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:8f:94:b3:9a:cd:8a:e0:7d:20:84:1c:d7:86:80:9f:f0:
         8d:55:81:c3:3b:ec:6a:cc:62:78:4c:4b:2a:33:cc:c6:6a:09:
         da:90:60:9c:a6:af:81:ef:e3:3f:c8:5b:ec:46:98:ee:26:a9:
         0e:f0:5d:6b:e4:3f:53:0e:ec:fe:59:e2:36:15:6a:5e:a2:ea:
         b3:c7:f2:0b:ad:c7:35:87:f2:5f:23:0e:ef:a4:64:7c:d0:82:
         07:df:28:27:51:92:ec:16:c9:0b:50:53:0f:21:bd:97:42:a4:
         09:b0:78:8b:a5:64:b4:2d:1a:1b:36:f0:77:1c:13:63:34:b8:
         e5:eb:be:9e:46:65:49:1d:8b:9e:ff:b6:18:53:ba:2d:a4:69:
         8f:4a:55:97:09:0c:26:07:57:5a:d2:17:de:54:c2:77:8d:2d:
         d3:a8:60:7c:2d:21:b2:1d:2a:fc:8c:34:d6:33:78:d0:9a:ba:
         eb:78:48:7f:18:ef:bf:22:13:1c:43:b7:9a:2c:11:61:af:76:
         32:80:5c:59:32:6c:83:e2:66:6a:b3:6f:23:e4:60:4c:f1:4c:
         81:8f:5e:75:28:60:63:dd:4f:a3:2e:9f:12:07:55:3b:63:cb:
         59:ee:33:4a:7a:94:db:0e:d2:90:0d:c7:d2:64:d2:67:25:a7:
         13:91:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----