Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/84C8A37CB87111E98008C65DC4F9AE02.roa
File:                     84C8A37CB87111E98008C65DC4F9AE02.roa (raw, json)
Hash identifier:          0VFf+CGo6GvUkDNdxztHp37QqJwjEmgCyOuSljyMqQM=
Subject key identifier:   F4:A0:AB:94:D0:7F:F6:47:0D:35:0E:F9:5F:CC:EB:9A:72:27:84:94
Certificate issuer:       /CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Certificate serial:       1056
Authority key identifier: CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/84C8A37CB87111E98008C65DC4F9AE02.roa
Signing time:             Fri 07 Jan 2022 06:16:25 +0000
ROA not before:           Fri 07 Jan 2022 06:16:25 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     38895
IP address blocks:        175.41.192.0/18 maxlen: 24
                          2400:6700::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4182 (0x1056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
        Validity
            Not Before: Jan  7 06:16:25 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=61d7dab9-70ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2f:1c:23:bf:47:40:ab:5b:59:1a:7d:cb:ec:
                    61:19:cd:e1:e0:b3:b0:89:0d:d0:94:d1:b0:52:be:
                    98:c2:18:8a:91:6f:1f:9d:50:fd:83:6a:2a:65:0a:
                    5f:cd:e4:75:48:b1:29:ec:96:eb:0c:c5:08:c7:36:
                    da:90:46:6b:e4:8e:e2:61:a6:4d:b4:22:06:72:4f:
                    2c:85:10:25:cd:03:94:c4:e2:b5:a9:56:79:c9:13:
                    39:4c:00:dd:aa:4f:6d:77:88:45:ae:ec:e2:96:bc:
                    dd:8a:27:71:8b:43:49:bc:b8:b9:9b:67:8a:48:bf:
                    e7:4a:e2:21:74:c6:86:1b:df:bc:6d:f8:4d:a9:79:
                    2d:39:3d:23:8d:22:da:07:c6:0a:5d:8a:c2:7b:5d:
                    71:6f:c3:c2:e2:3c:bc:3f:7e:18:76:d2:cb:8a:26:
                    23:8a:3f:dd:0b:94:9a:8a:84:f3:a3:58:b5:c9:0c:
                    b4:da:2e:ba:ed:cf:ac:dc:48:0f:0f:74:bf:18:2a:
                    3f:77:0c:7d:76:f0:31:e9:c2:6b:6e:b5:35:09:f2:
                    37:f2:5c:a0:f8:a7:a2:5e:e2:c2:9c:ab:14:ef:c1:
                    1e:99:e4:41:35:3b:a8:f7:8f:20:ff:4d:50:26:ea:
                    3b:b0:77:9c:ab:b3:49:80:fa:ee:38:62:e4:7c:93:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A0:AB:94:D0:7F:F6:47:0D:35:0E:F9:5F:CC:EB:9A:72:27:84:94
            X509v3 Authority Key Identifier:
                keyid:CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/84C8A37CB87111E98008C65DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.192.0/18
                IPv6:
                  2400:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:83:76:96:df:41:fa:a8:24:bf:a8:8a:55:ce:f7:c2:ea:66:
         39:fb:df:63:93:2f:0c:1e:2c:50:d2:ef:58:98:62:61:11:84:
         cd:f7:b6:3e:42:18:7a:e1:89:24:32:ce:31:57:1f:10:ef:2a:
         3d:06:bd:84:9d:98:70:25:4a:c8:d5:cf:d4:b5:6c:1d:c0:c2:
         7a:f2:2b:24:c1:96:3f:0a:ff:8a:78:90:42:ec:5c:eb:f4:59:
         62:c6:49:c7:f8:16:95:9b:5a:0c:0f:18:f6:be:ca:46:c3:2f:
         9d:8b:a3:3b:de:d8:d0:55:5e:7a:3f:04:a6:f0:aa:43:09:bd:
         88:01:01:9f:54:16:96:c5:0a:42:13:26:cb:9d:95:2d:af:c7:
         b9:d1:29:9c:35:50:73:94:75:b4:91:ef:cb:26:6f:da:db:aa:
         0e:97:d3:14:c5:7d:69:4a:03:ab:22:ab:e1:ed:ff:d2:71:b3:
         50:97:a2:1a:4a:ef:ff:f0:d7:07:34:16:9b:d5:cc:df:32:86:
         67:d8:3d:ab:f3:21:c5:c1:17:71:93:59:14:c0:c0:a2:de:8f:
         69:2e:df:ed:8d:05:2f:72:6f:80:b7:76:e1:6e:e2:2c:d3:39:
         9c:54:24:fb:97:29:df:0b:28:fb:4d:23:d4:75:31:b0:f6:02:
         e9:35:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----