Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/72976E9EB18A11EC892E2662C4F9AE02.roa
File:                     72976E9EB18A11EC892E2662C4F9AE02.roa (raw, json)
Hash identifier:          GGsjZpyKCgtzpiY3zwayOkXA9jQbt02mWll0vsEevzQ=
Subject key identifier:   B9:7C:D6:26:8F:06:B8:B6:7B:9C:99:58:59:24:72:1A:60:7B:F5:0D
Certificate issuer:       /CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
Certificate serial:       0C91
Authority key identifier: CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/72976E9EB18A11EC892E2662C4F9AE02.roa
Signing time:             Fri 01 Apr 2022 19:05:51 +0000
ROA not before:           Fri 01 Apr 2022 19:05:51 +0000
ROA not after:            Mon 01 Aug 2022 00:00:00 +0000
asID:                     139839
IP address blocks:        2404:49c0:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
        Validity
            Not Before: Apr  1 19:05:51 2022 GMT
            Not After : Aug  1 00:00:00 2022 GMT
        Subject: CN=62474d0f-d8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e6:d7:df:4f:08:dd:9f:3c:3d:c6:4a:ee:31:
                    09:e1:2e:ff:32:01:02:57:cf:ac:d4:5e:a4:13:6a:
                    74:e2:4e:28:32:ac:a8:ec:86:3a:bd:69:7d:59:ee:
                    9d:b3:23:04:df:a0:06:87:c3:af:32:30:b0:c7:2e:
                    0c:08:d3:0f:2f:de:28:66:a6:94:a1:51:68:14:49:
                    7e:2b:5c:3b:38:39:2a:44:a6:31:cb:59:47:ba:30:
                    d1:46:4d:62:9e:5c:54:0e:4e:65:da:2f:e6:e4:7b:
                    35:0f:86:2f:0f:06:09:bc:a7:d9:50:9a:ab:cd:68:
                    24:65:38:34:98:48:42:fe:2d:4d:51:df:c2:70:31:
                    c7:ce:bf:4b:b2:27:68:d1:92:87:7d:80:ca:a2:a7:
                    06:06:e2:ca:e2:89:fb:b9:a6:22:df:f1:b5:8a:98:
                    8a:66:90:bc:97:12:7c:0a:11:3c:76:cf:fa:c2:2b:
                    9c:ef:3c:ab:a7:39:7b:7b:32:0c:e0:68:5a:50:c3:
                    90:d6:e7:46:0f:8f:0e:dc:35:20:09:99:2d:b4:13:
                    43:bd:71:a9:cc:18:5c:36:7e:76:40:a1:a4:ae:c2:
                    23:e4:8d:d5:94:6d:58:9b:74:c3:d0:b3:44:4d:39:
                    6c:42:3b:f3:60:64:08:d4:3f:b0:2c:13:28:c7:10:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:D6:26:8F:06:B8:B6:7B:9C:99:58:59:24:72:1A:60:7B:F5:0D
            X509v3 Authority Key Identifier:
                keyid:CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/z9CDkBsToqt2tE60HzxzFShV1yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/72976E9EB18A11EC892E2662C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:49c0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:5f:f0:df:98:7b:9c:29:0c:84:87:9e:7b:41:a6:86:3c:
         81:19:9c:5a:53:bd:55:1b:a7:07:94:75:cc:47:f4:e4:44:11:
         4c:6a:a2:17:75:9e:7e:4d:73:ed:34:59:7f:84:79:92:88:3c:
         5a:f0:3d:56:f5:6c:20:2a:2f:50:49:18:46:ea:b5:b6:5c:0d:
         68:bb:75:d2:cf:ca:17:05:30:38:f5:95:15:59:09:41:ed:c5:
         03:35:9c:d7:08:ee:f2:7b:ce:8b:7e:6f:3d:87:b5:c7:d6:7e:
         df:9b:f2:da:25:1e:15:91:b1:13:03:73:bc:f5:25:60:c1:85:
         a1:31:d3:5d:8c:46:7a:81:57:3f:8d:bc:ee:7f:ab:24:5c:3c:
         fa:eb:43:b1:f5:ae:63:02:b2:d6:38:14:e5:85:50:b6:c4:3f:
         62:ff:0c:2c:b2:d7:88:c0:93:a8:94:e5:df:2d:35:a3:82:7d:
         13:0e:96:56:11:f5:04:86:25:f9:71:94:b6:1d:2a:86:ee:16:
         d2:4b:6a:49:fd:a9:5e:3b:ad:bf:55:f6:13:5f:de:85:bd:e8:
         52:e3:79:c3:f7:b6:72:0c:5c:1f:a4:97:17:3b:38:6e:d0:5a:
         a6:e2:ab:fd:68:cb:ef:c6:77:7b:1d:8f:aa:82:84:45:2a:44:
         23:56:a7:95
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVENjMxMTAvBgNVBAUTKENGRDA4MzkwMUIxM0EyQUI3NkI0NEVCNDFGM0M3MzE1
Mjg1NUQ3MjYwHhcNMjIwNDAxMTkwNTUxWhcNMjIwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjQ3NGQwZi1kOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ebX308I3Z88PcZK7jEJ4S7/MgECV8+s1F6kE2p04k4oMqyo7IY6vWl9We6d
syME36AGh8OvMjCwxy4MCNMPL94oZqaUoVFoFEl+K1w7ODkqRKYxy1lHujDRRk1i
nlxUDk5l2i/m5Hs1D4YvDwYJvKfZUJqrzWgkZTg0mEhC/i1NUd/CcDHHzr9Lsido
0ZKHfYDKoqcGBuLK4on7uaYi3/G1ipiKZpC8lxJ8ChE8ds/6wiuc7zyrpzl7ezIM
4GhaUMOQ1udGD48O3DUgCZkttBNDvXGpzBhcNn52QKGkrsIj5I3VlG1Ym3TD0LNE
TTlsQjvzYGQI1D+wLBMoxxAYXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLl81iaP
Bri2e5yZWFkkchpge/UNMB8GA1UdIwQYMBaAFM/Qg5AbE6KrdrROtB88cxUoVdcm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUQ2My9DRDg1QUNGNjU2
RDYxMUU5QTkxQkZDMjdDNEY5QUUwMi96OUNEa0JzVG9xdDJ0RTYwSHp4ekZTaFYx
eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3o5Q0RrQnNUb3F0MnRFNjBIenh6RlNoVjF5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUVENjMvQ0Q4NUFDRjY1NkQ2MTFFOUE5MUJGQzI3QzRGOUFFMDIvNzI5NzZFOUVC
MThBMTFFQzg5MkUyNjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkBEnAABEwDQYJKoZIhvcNAQELBQADggEBACY6X/DfmHuc
KQyEh557QaaGPIEZnFpTvVUbpweUdcxH9OREEUxqohd1nn5Nc+00WX+EeZKIPFrw
PVb1bCAqL1BJGEbqtbZcDWi7ddLPyhcFMDj1lRVZCUHtxQM1nNcI7vJ7zot+bz2H
tcfWft+b8tolHhWRsRMDc7z1JWDBhaEx012MRnqBVz+NvO5/qyRcPPrrQ7H1rmMC
stY4FOWFULbEP2L/DCyy14jAk6iU5d8tNaOCfRMOllYR9QSGJflxlLYdKobuFtJL
akn9qV47rb9V9hNf3oW96FLjecP3tnIMXB+klxc7OG7QWqbiq/1oy+/Gd3sdj6qC
hEUqRCNWp5U=
-----END CERTIFICATE-----