Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/0A3B7D12704011ECBD6F2E5BC4F9AE02.roa
File:                     0A3B7D12704011ECBD6F2E5BC4F9AE02.roa (raw, json)
Hash identifier:          /JV+VyjG6zUgWZxc9pGYV3LwDcZdCtfe3sver80LbdU=
Subject key identifier:   76:84:CE:85:0F:78:9F:45:14:78:8F:63:4B:2C:DE:EE:C1:18:C8:5A
Certificate issuer:       /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial:       01F4
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/0A3B7D12704011ECBD6F2E5BC4F9AE02.roa
Signing time:             Mon 11 Apr 2022 14:53:29 +0000
ROA not before:           Mon 11 Apr 2022 14:53:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38439
IP address blocks:        2401:1740:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
        Validity
            Not Before: Apr 11 14:53:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=625440e8-4bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:da:e9:44:3e:9a:33:87:30:24:7f:61:3b:bf:
                    eb:5f:5e:c8:41:29:fd:e1:96:d7:ec:70:25:58:18:
                    ba:37:8b:8e:a8:fc:fb:d5:6c:57:40:0f:62:06:05:
                    af:60:8c:d4:43:b8:a9:60:44:7d:63:9e:18:2a:0f:
                    f9:04:0f:ba:b9:b8:fd:f2:15:de:8a:96:2a:4b:a3:
                    29:4a:a6:21:48:50:34:9d:16:ed:20:69:fb:d6:30:
                    c1:b4:5c:31:24:a9:78:d8:2d:ea:08:1d:10:8e:f3:
                    74:1f:e3:14:8f:aa:e9:da:4e:ab:0d:09:94:68:cd:
                    8c:c4:a2:f7:75:d9:35:a0:5d:80:cb:97:50:41:30:
                    57:66:bf:94:8a:de:9b:ef:4e:a1:42:e9:34:79:04:
                    e9:fc:70:3f:60:bb:5e:ef:eb:b8:74:6e:5e:b4:ab:
                    ce:eb:ea:c2:b1:45:9a:26:57:2c:f6:3c:47:91:32:
                    0d:9a:ae:4e:11:79:88:56:89:2e:8d:8b:d5:08:bc:
                    b5:4d:1b:59:be:d9:a4:59:f1:c7:8d:c6:49:1c:11:
                    03:ea:28:89:cb:d7:fe:d1:f6:69:99:5c:22:77:0d:
                    cb:ff:9d:f7:e0:3e:11:27:7c:b5:53:d3:aa:b6:b0:
                    99:20:dd:fc:f9:a8:39:59:6e:0c:aa:17:67:1a:91:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:CE:85:0F:78:9F:45:14:78:8F:63:4B:2C:DE:EE:C1:18:C8:5A
            X509v3 Authority Key Identifier:
                keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/0A3B7D12704011ECBD6F2E5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:7a:74:da:db:72:7c:c7:10:61:b5:e5:b5:66:32:47:b4:38:
         aa:67:a0:7d:d6:c4:10:ef:a1:b1:a0:c7:0f:7e:11:86:8e:9e:
         3a:ce:0d:82:b7:e9:be:21:99:61:a3:d8:ec:61:38:65:7d:b9:
         c6:eb:c2:23:28:10:45:0c:bc:08:3b:0d:19:61:fb:fe:ea:45:
         8a:4a:43:28:41:d5:93:1d:7a:47:5c:90:9e:c9:c2:e1:d0:88:
         47:90:a9:1d:11:08:d8:e2:db:a3:0f:30:e8:78:eb:14:90:89:
         7a:11:10:b4:04:8c:13:7f:07:c6:9a:f2:70:d0:4e:b1:79:cd:
         d4:dc:d8:3f:c3:fb:64:a1:2e:de:7b:8f:6e:e7:f9:7d:cf:f3:
         6f:d8:85:10:e3:a5:b7:80:cf:51:b1:ab:9e:2b:e9:65:32:1d:
         62:51:a2:08:a5:58:cf:85:f6:49:dc:b9:70:87:61:61:fb:d6:
         43:60:92:9d:4d:a0:61:4a:b4:b7:26:1b:74:9b:19:b1:35:39:
         9a:68:27:c2:1a:c3:0b:9b:18:6b:b5:4d:47:1c:d2:0d:bb:87:
         5c:90:59:99:fd:68:00:ea:73:74:35:c8:1f:b1:7d:87:b8:1a:
         c3:78:8d:f2:6f:07:a1:d7:c5:d5:b3:2d:4f:66:6c:15:f6:dc:
         10:4e:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----