Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/009C5694918911EDA3426975C4F9AE02.roa
File:                     009C5694918911EDA3426975C4F9AE02.roa (raw, json)
Hash identifier:          u2frdEmvltS37Yd7SOz4Tv0f0HAv3+y7WDPxunyU2Sk=
Subject key identifier:   0C:42:45:94:72:D2:B8:25:45:BE:45:82:F1:5E:11:90:4D:9E:25:9F
Certificate issuer:       /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial:       039F
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/009C5694918911EDA3426975C4F9AE02.roa
Signing time:             Wed 11 Jan 2023 08:21:53 +0000
ROA not before:           Wed 11 Jan 2023 08:21:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7586
IP address blocks:        2401:1740::/32 maxlen: 32
                          2401:1740::/40 maxlen: 40
                          2401:1740:100::/40 maxlen: 40
                          2401:1740:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
        Validity
            Not Before: Jan 11 08:21:53 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63be71a0-fd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:6c:7c:49:bf:15:b9:cf:f6:b9:5b:da:2d:
                    fb:98:24:f3:4d:f0:d6:96:9e:87:44:8b:e1:2f:34:
                    2c:ca:a8:9e:4b:d3:54:01:e7:85:1f:ec:97:92:b2:
                    ce:94:5f:4f:17:e0:7f:b0:7f:3d:13:35:74:10:b2:
                    c2:f9:a1:09:c7:42:60:ab:aa:08:dd:a7:06:89:10:
                    8f:fd:ce:84:f3:8a:3f:c3:bf:08:e0:37:0c:06:1b:
                    1b:c0:dc:d3:09:6a:eb:cd:0c:0e:b4:81:58:b0:c0:
                    a5:7e:34:19:a0:d7:fd:47:67:c6:ad:7f:03:d1:73:
                    d7:49:e6:a5:02:0b:fb:23:7f:cd:1d:8b:b4:39:c8:
                    35:dc:b4:80:57:37:4f:07:02:52:9d:b8:2f:c1:d9:
                    22:cb:ea:d8:29:61:a9:74:71:3f:dc:cd:a4:f3:41:
                    bb:5b:d4:d0:83:ad:73:7a:c3:5e:13:e0:a1:98:21:
                    1b:f3:14:95:2f:bb:8e:05:8f:c5:17:25:13:e1:24:
                    4e:bf:5c:92:74:7b:c1:fd:3d:72:74:75:05:07:c2:
                    8f:93:68:98:2a:03:09:62:22:4c:2d:a3:72:40:c4:
                    5c:3f:84:5d:d9:1f:80:79:7b:5f:fd:70:dd:dd:6f:
                    cf:6f:70:7a:e0:56:85:38:1f:81:25:df:94:8c:bd:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:45:94:72:D2:B8:25:45:BE:45:82:F1:5E:11:90:4D:9E:25:9F
            X509v3 Authority Key Identifier:
                keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/009C5694918911EDA3426975C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:3c:cb:06:1a:52:57:32:0e:f9:96:ac:d0:d2:3e:e1:04:
         de:7a:1d:d7:9f:a9:35:ba:36:7c:1a:e6:47:3f:0f:8e:e1:14:
         cf:6d:55:39:f9:cc:31:1d:d1:bc:78:72:9a:bd:ad:1d:dd:a3:
         d2:46:a7:d8:ad:43:43:8b:7e:05:88:36:84:da:da:85:51:b0:
         6f:76:49:f2:83:1c:4c:ff:d2:cc:c3:a3:43:60:9b:8d:74:4e:
         85:bc:5f:57:9c:c5:b5:14:0b:92:e0:2d:d2:a6:21:ef:ea:99:
         91:2d:d0:b6:61:66:aa:7a:cd:5c:52:8f:03:87:90:9a:c8:c0:
         d6:e0:d3:cc:d3:90:59:98:95:9c:93:52:24:ab:56:a7:c1:26:
         72:ab:9f:dc:2e:a2:d8:1a:e2:29:fd:8c:fc:a4:79:cb:f4:0a:
         ef:ba:46:8c:d9:1a:2d:33:4b:93:20:78:57:ca:f4:89:f6:e9:
         9f:d7:4f:a7:03:89:65:61:36:97:03:7f:c3:c8:07:0c:b0:b0:
         e0:28:c9:51:19:69:ae:d0:9e:22:a4:31:82:82:6f:f1:92:77:
         37:f3:b9:5b:f9:5f:0d:7d:92:fa:7a:56:58:10:ab:db:22:00:
         5b:f2:bd:1d:b0:ed:d6:05:ac:93:ce:86:6f:32:67:64:cc:14:
         4c:02:dd:f8
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhCN0YxMTAvBgNVBAUTKDlCRTFGQjE5NDM4MzkwRTUxNzA4MThFQUZBRjAwQkIz
MjNBMDBDNDgwHhcNMjMwMTExMDgyMTUzWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2JlNzFhMC1mZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PNsfEm/FbnP9rlb2i37mCTzTfDWlp6HRIvhLzQsyqieS9NUAeeFH+yXkrLO
lF9PF+B/sH89EzV0ELLC+aEJx0Jgq6oI3acGiRCP/c6E84o/w78I4DcMBhsbwNzT
CWrrzQwOtIFYsMClfjQZoNf9R2fGrX8D0XPXSealAgv7I3/NHYu0Ocg13LSAVzdP
BwJSnbgvwdkiy+rYKWGpdHE/3M2k80G7W9TQg61zesNeE+ChmCEb8xSVL7uOBY/F
FyUT4SROv1ySdHvB/T1ydHUFB8KPk2iYKgMJYiJMLaNyQMRcP4Rd2R+AeXtf/XDd
3W/Pb3B64FaFOB+BJd+UjL3VjQIDAQABo4ICljCCApIwHQYDVR0OBBYEFAxCRZRy
0rglRb5FgvFeEZBNniWfMB8GA1UdIwQYMBaAFJvh+xlDg5DlFwgY6vrwC7MjoAxI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Ri82Q0RFODk5OEZG
NDExMUVCODJCMzFGNURDNEY5QUUwMi9tLUg3R1VPRGtPVVhDQmpxLXZBTHN5T2dE
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20tSDdHVU9Ea09VWENCanEtdkFMc3lPZ0RFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzhCN0YvNkNERTg5OThGRjQxMTFFQjgyQjMxRjVEQzRGOUFFMDIvMDA5QzU2OTQ5
MTg5MTFFREEzNDI2OTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkARdAMA0GCSqGSIb3DQEBCwUAA4IBAQBaZDzLBhpSVzIO
+Zas0NI+4QTeeh3Xn6k1ujZ8GuZHPw+O4RTPbVU5+cwxHdG8eHKava0d3aPSRqfY
rUNDi34FiDaE2tqFUbBvdknygxxM/9LMw6NDYJuNdE6FvF9XnMW1FAuS4C3SpiHv
6pmRLdC2YWaqes1cUo8Dh5CayMDW4NPM05BZmJWck1Ikq1anwSZyq5/cLqLYGuIp
/Yz8pHnL9ArvukaM2RotM0uTIHhXyvSJ9umf10+nA4llYTaXA3/DyAcMsLDgKMlR
GWmu0J4ipDGCgm/xknc387lb+V8NfZL6elZYEKvbIgBb8r0dsO3WBayTzoZvMmdk
zBRMAt34
-----END CERTIFICATE-----