Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/CB29C4BA377C11EA8D17BD66C4F9AE02.roa
File:                     CB29C4BA377C11EA8D17BD66C4F9AE02.roa (raw, json)
Hash identifier:          fWEp0qCXT9KPHmixI3A1JxOLVxf5NPENdiwarTF3LJ8=
Subject key identifier:   C1:2E:2A:B1:FE:5C:39:49:1F:C9:66:C1:03:0A:1C:0D:07:A5:AD:68
Certificate issuer:       /CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
Certificate serial:       095F
Authority key identifier: CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/CB29C4BA377C11EA8D17BD66C4F9AE02.roa
Signing time:             Thu 25 Feb 2021 06:44:48 +0000
ROA not before:           Thu 25 Feb 2021 06:44:48 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     139839
IP address blocks:        2404:49c0:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
        Validity
            Not Before: Feb 25 06:44:48 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=60374760-e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:d4:c8:f1:01:83:db:89:fe:67:99:09:3d:
                    e2:0d:44:83:a5:b6:1b:ef:2c:25:9d:f2:41:f8:be:
                    95:26:cc:e9:96:a1:35:66:0a:12:46:15:05:c5:4e:
                    88:fc:37:66:68:36:0b:81:33:da:14:89:76:fa:9f:
                    ec:36:f9:8d:ce:74:96:7f:da:fa:62:0b:26:5b:c4:
                    4e:10:68:5e:5f:a1:ad:99:eb:dc:eb:7d:11:41:93:
                    2b:f3:dc:29:82:91:17:8a:b0:6e:21:ee:79:a9:55:
                    6f:f8:3f:48:4f:12:66:f7:3a:7c:57:29:c4:91:29:
                    21:3f:15:ec:9a:7a:41:15:60:fe:23:5e:89:55:63:
                    2c:b6:98:f0:fe:87:30:45:43:84:50:1e:24:06:2f:
                    11:8d:a5:9d:d4:18:a7:f0:ee:3a:3d:13:be:eb:c9:
                    e2:4e:18:04:c1:18:c3:63:5f:60:8e:70:05:0a:5d:
                    54:84:14:2c:3e:01:7c:76:8f:ba:6d:e8:3b:15:89:
                    3f:3e:d2:7f:bd:42:32:eb:8b:e8:fd:93:4e:16:85:
                    53:eb:b2:f1:2d:ae:ed:ae:7c:35:e8:95:4b:23:02:
                    b1:ff:e4:e9:f3:bf:46:b8:97:d7:78:91:4d:99:de:
                    78:e2:a6:8a:d3:37:69:e2:0e:c0:3d:4c:eb:b8:1f:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2E:2A:B1:FE:5C:39:49:1F:C9:66:C1:03:0A:1C:0D:07:A5:AD:68
            X509v3 Authority Key Identifier:
                keyid:CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/z9CDkBsToqt2tE60HzxzFShV1yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/CB29C4BA377C11EA8D17BD66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:49c0:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:98:ea:52:07:a9:ca:23:c6:85:a6:b7:4f:06:37:1b:92:5e:
         2a:20:65:38:f4:fb:ea:90:2d:76:26:41:c6:f5:5a:ee:85:d8:
         bd:5b:db:45:2b:f3:e1:70:ab:11:3a:a7:46:c6:f4:7e:32:0c:
         f5:44:35:bd:21:b1:92:26:00:e5:32:77:73:b3:2b:5c:97:db:
         cc:98:59:77:99:b2:aa:cc:f4:86:2a:f0:2a:6e:d5:84:66:e8:
         58:58:60:9d:7f:29:df:3b:8f:0a:da:bb:17:71:47:b8:57:8a:
         68:d8:fb:20:4b:7e:4e:d9:3c:41:e8:86:84:e5:93:78:5f:ff:
         75:82:c2:c3:33:59:96:54:a5:b6:96:11:93:7f:18:17:7a:41:
         a0:b1:9e:ed:67:c5:75:04:97:cd:55:ce:13:c1:58:fc:48:e6:
         fe:bf:ff:88:19:5f:f1:6d:5e:5e:ee:46:59:aa:61:de:5c:1c:
         8d:95:63:bb:a1:74:09:06:60:eb:73:99:cc:ed:6b:45:51:8c:
         58:3b:4e:a3:cd:16:d0:a7:1c:6e:ff:e6:c4:92:9c:bc:13:88:
         55:64:e4:32:a1:1a:97:6d:62:ba:d5:42:5a:72:f4:22:20:70:
         c6:d5:d5:87:58:5d:fc:1f:74:0a:d2:cb:d5:a0:e7:55:09:57:
         ad:5f:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----