Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/DBA76178900F11ED8B4CB41DC4F9AE02.roa
File:                     DBA76178900F11ED8B4CB41DC4F9AE02.roa (raw, json)
Hash identifier:          MvFYCUGeLWhNCgk8TAlsrr8YxYwc2l1vOgU4QH4/cB4=
Subject key identifier:   6E:62:4C:38:4C:F5:D6:2C:94:2A:51:BD:FD:96:87:41:4D:B0:0F:66
Certificate issuer:       /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial:       0399
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/DBA76178900F11ED8B4CB41DC4F9AE02.roa
Signing time:             Mon 09 Jan 2023 11:22:10 +0000
ROA not before:           Mon 09 Jan 2023 11:22:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136600
IP address blocks:        2401:1740::/32 maxlen: 32
                          2401:1740::/40 maxlen: 40
                          2401:1740:100::/40 maxlen: 40
                          2401:1740:1000::/48 maxlen: 48
                          2401:1740:2000::/48 maxlen: 48
                          2401:1740:3000::/48 maxlen: 48
                          2401:1740:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
        Validity
            Not Before: Jan  9 11:22:10 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63bbf8e2-a182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:ce:b2:24:a2:e3:b3:8f:ae:8a:21:09:50:
                    c2:0d:01:a6:f5:d2:4a:eb:e0:fa:c1:99:f9:b0:72:
                    23:a9:ee:45:34:73:a0:d3:64:27:8f:7f:07:b0:5f:
                    f7:fd:28:eb:0e:af:1b:ce:2e:58:ec:97:bc:a0:69:
                    8a:c9:80:a1:4d:cf:ca:0f:29:ad:ec:60:4f:38:2a:
                    8e:ed:43:77:13:09:69:ba:4b:83:78:b3:9f:9b:86:
                    b0:94:fc:3b:70:10:a6:25:7c:fd:b5:34:49:20:77:
                    24:fd:dc:12:b2:8c:bc:29:e1:7f:71:3b:bf:e7:a3:
                    93:ad:00:8d:55:87:0f:a1:55:e2:50:8b:17:3f:a5:
                    1a:13:8d:aa:be:0b:36:3e:22:11:d8:ae:6f:a8:3d:
                    ce:8c:8d:0e:4b:3d:d6:16:4c:cb:f2:84:45:2e:ac:
                    5a:89:72:06:af:81:3f:d8:f1:18:f6:a5:08:23:bb:
                    c6:79:c3:e0:ad:95:f8:a4:3a:49:84:7f:d9:46:0b:
                    fe:54:b2:f3:71:99:38:b7:f6:a0:71:a3:19:2a:0b:
                    f4:91:1d:87:5c:74:d6:3d:e3:bf:62:20:4d:1d:24:
                    01:43:d2:f7:7c:af:98:90:b6:7f:19:62:9c:91:dc:
                    70:8b:5e:fd:45:56:79:5b:3e:8b:a1:51:6e:c9:fc:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:4C:38:4C:F5:D6:2C:94:2A:51:BD:FD:96:87:41:4D:B0:0F:66
            X509v3 Authority Key Identifier:
                keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/DBA76178900F11ED8B4CB41DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:56:85:97:a7:2c:0d:77:90:96:54:78:01:ea:78:d0:50:
         c2:c1:e8:87:de:e4:10:24:31:60:16:df:de:24:96:78:81:80:
         8a:8a:cd:b6:4a:02:85:aa:fe:a5:24:b0:e3:09:a4:fd:d9:4c:
         42:a7:07:79:80:c8:da:d2:b2:11:d7:0c:95:ed:32:60:79:bf:
         75:0f:d6:50:bc:ca:f3:a1:7c:fa:2b:62:2d:05:a0:c1:28:5f:
         ce:5f:26:4f:ae:cb:c7:31:5c:0a:cc:77:db:24:5c:4b:ff:94:
         18:ab:af:42:73:9a:64:59:6d:26:09:41:fa:e7:33:81:33:60:
         e2:08:fb:03:e6:75:5b:49:7b:ca:de:7f:db:06:62:ba:30:8a:
         c5:ce:f2:7e:46:ef:9b:49:d4:63:85:99:f4:3a:ff:5d:ee:6d:
         c8:42:b1:1a:53:2b:c6:18:b3:f3:2f:0a:c8:98:35:ad:9f:7e:
         c9:45:dc:46:9d:aa:86:95:41:e0:e3:09:78:dc:53:3b:bd:e2:
         47:e6:b9:78:91:58:23:37:c9:2e:3d:d3:64:a3:63:7d:14:81:
         9d:e4:ba:e4:87:70:e8:c4:82:56:7e:c1:ba:5e:31:04:ba:b0:
         4e:b3:1f:97:bc:ae:74:e1:7f:fb:6d:5c:5c:f4:8c:6a:ef:de:
         22:e2:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----