Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/D9C4EC1A368D11EAB2C80B7CC4F9AE02.roa
File:                     D9C4EC1A368D11EAB2C80B7CC4F9AE02.roa (raw, json)
Hash identifier:          RaJfGBhpxmzAW74TV0uQuhit0a9tTKJYAYh5BXDDcJ8=
Subject key identifier:   7C:A7:57:E2:41:ED:C1:67:C8:3F:F2:49:5B:1D:3B:59:49:64:93:25
Certificate issuer:       /CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
Certificate serial:       0960
Authority key identifier: CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/D9C4EC1A368D11EAB2C80B7CC4F9AE02.roa
Signing time:             Thu 25 Feb 2021 06:44:49 +0000
ROA not before:           Thu 25 Feb 2021 06:44:49 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     140036
IP address blocks:        2404:49c0:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
        Validity
            Not Before: Feb 25 06:44:49 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=60374761-0767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:6e:d6:ee:f2:21:b5:9a:74:fc:84:e1:14:
                    4f:6d:27:a6:ad:71:08:ce:4d:23:7e:cf:12:b1:7f:
                    88:bf:3a:55:5c:45:73:3d:9a:0a:95:01:4c:37:e2:
                    90:94:4d:ef:97:2e:5e:61:a0:d2:df:80:aa:3c:d8:
                    45:c4:e6:f9:1c:da:64:09:11:cb:7e:62:e8:19:cc:
                    1f:c4:ed:6c:6a:01:23:7d:08:c9:c8:ed:c7:5a:72:
                    c7:5d:5c:0b:c7:4d:76:bd:d2:43:3c:fe:d0:44:54:
                    1c:ff:69:bc:50:0c:59:db:c0:df:cc:9a:24:82:40:
                    19:2b:59:ef:ac:b0:c6:b5:88:75:0c:9c:05:2f:fe:
                    cc:0d:c6:70:a5:c1:bb:88:e1:37:13:29:1c:5b:51:
                    4c:a5:be:74:3d:1b:c0:21:5c:6c:d4:0c:62:92:39:
                    88:4d:53:a5:80:4f:5d:03:da:78:b2:11:51:92:0f:
                    36:20:38:62:65:d2:60:9a:50:63:8f:1f:07:34:c8:
                    c9:23:f8:55:49:bc:ba:e8:42:c5:8d:17:e0:c7:87:
                    1a:63:09:88:27:ad:08:4b:ee:6d:c2:51:47:19:68:
                    e8:1a:cd:0c:7d:b4:5b:7c:c8:70:f1:1f:b0:21:f6:
                    ab:61:ec:a1:86:c7:85:14:19:45:18:19:24:3e:07:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:57:E2:41:ED:C1:67:C8:3F:F2:49:5B:1D:3B:59:49:64:93:25
            X509v3 Authority Key Identifier:
                keyid:CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/z9CDkBsToqt2tE60HzxzFShV1yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/D9C4EC1A368D11EAB2C80B7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:49c0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:58:ce:37:2b:db:75:49:87:14:d5:fe:48:97:1d:aa:03:
         72:9c:e2:d5:64:9c:14:e2:ef:19:30:4f:44:0d:b0:22:d1:a3:
         70:38:99:1b:a9:28:af:35:0d:61:b3:94:a5:e3:33:e0:c1:22:
         27:d5:9a:f1:12:a0:ef:79:32:a2:31:de:0f:2f:2e:1b:c4:e0:
         d9:5f:da:45:e9:cc:d8:5d:7a:bb:90:0c:5d:f8:c8:00:37:ad:
         cc:5b:0e:55:4e:a3:b8:4a:1c:07:77:74:40:07:a8:60:ea:ad:
         46:a9:ed:57:4c:4a:bd:4d:6e:11:81:9a:29:23:de:c9:27:8f:
         9c:d2:8e:3c:8e:2d:77:84:de:2e:b2:07:69:72:db:dc:ed:18:
         a8:63:48:0c:47:8b:73:9f:8d:f1:99:36:9b:ca:4d:a1:a8:8a:
         84:0a:30:0c:5e:90:04:54:a4:dd:76:4c:34:87:92:96:58:67:
         30:ca:d2:a0:d8:45:09:82:26:08:6b:7c:00:1f:38:ff:bc:3d:
         6c:67:bf:21:41:9b:a8:95:b7:a0:25:39:23:0d:92:7f:3d:e6:
         3b:51:a5:04:05:2f:80:96:31:f4:8e:17:95:f1:55:72:27:f7:
         b0:ec:0d:f4:93:98:f0:0a:0b:c9:dd:29:9e:47:a7:72:d8:b4:
         a3:d9:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----