Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/5B0D4A2020ED11EB99498963C4F9AE02.roa
File:                     5B0D4A2020ED11EB99498963C4F9AE02.roa (raw, json)
Hash identifier:          TvzQmuyI2ZeDWTZ9Eln8Mj4xUoC6P5bhwzHTpk+4R+I=
Subject key identifier:   B7:7D:06:F5:F1:E5:82:CE:C6:4E:F3:CF:02:12:C5:D5:50:B6:FA:53
Certificate issuer:       /CN=A9188B9C/serialNumber=668FD6D75F5D99E2B2EEC11F4DD2A24E9C7C5254
Certificate serial:       08
Authority key identifier: 66:8F:D6:D7:5F:5D:99:E2:B2:EE:C1:1F:4D:D2:A2:4E:9C:7C:52:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zo_W119dmeKy7sEfTdKiTpx8UlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/5B0D4A2020ED11EB99498963C4F9AE02.roa
Signing time:             Sat 07 Nov 2020 11:35:37 +0000
ROA not before:           Sat 07 Nov 2020 11:35:37 +0000
ROA not after:            Wed 02 Mar 2022 00:00:00 +0000
asID:                     141391
IP address blocks:        103.158.13.0/24 maxlen: 24
                          2406:abc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188B9C/serialNumber=668FD6D75F5D99E2B2EEC11F4DD2A24E9C7C5254
        Validity
            Not Before: Nov  7 11:35:37 2020 GMT
            Not After : Mar  2 00:00:00 2022 GMT
        Subject: CN=5fa68689-3795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:cf:1e:76:1c:13:87:30:4b:d5:da:9b:be:
                    26:b2:b7:aa:4d:23:c0:37:8e:20:7a:50:8e:bf:f7:
                    21:2d:3a:66:f5:ac:fa:0c:96:d8:97:94:5b:eb:75:
                    06:61:71:36:b6:d0:22:36:bf:f6:d4:b0:00:da:e8:
                    94:bc:17:bc:2f:3a:c2:13:18:48:0d:ec:3f:0b:91:
                    44:c3:66:d1:ee:84:ff:d6:8f:53:2f:17:2b:e4:b7:
                    e2:97:84:67:c9:be:f8:e2:d9:7f:79:42:3c:c3:63:
                    bf:85:1c:4f:ea:92:ab:f7:ae:cd:5d:d5:c8:1c:9b:
                    31:20:eb:1a:ec:de:82:f3:c0:be:e3:10:32:35:f8:
                    1f:2c:5c:b0:92:42:7c:d6:ab:bd:aa:c3:23:01:56:
                    31:08:64:75:53:ac:42:0a:27:37:d0:41:1d:79:51:
                    7a:29:27:8d:6f:ea:5f:e1:cd:75:10:0d:ea:5d:99:
                    f4:c0:be:7d:4e:f2:12:6c:d5:45:01:ac:24:cc:1a:
                    58:43:f8:62:39:af:41:3c:41:9a:28:45:d6:c2:e9:
                    9d:e7:c1:5d:b8:8f:4d:5d:44:3b:39:83:00:3f:52:
                    a6:87:eb:98:ab:ee:87:d2:3a:d8:f9:49:71:08:7c:
                    00:45:96:f8:4c:93:2c:00:59:ca:f9:44:6d:04:30:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:06:F5:F1:E5:82:CE:C6:4E:F3:CF:02:12:C5:D5:50:B6:FA:53
            X509v3 Authority Key Identifier:
                keyid:66:8F:D6:D7:5F:5D:99:E2:B2:EE:C1:1F:4D:D2:A2:4E:9C:7C:52:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/Zo_W119dmeKy7sEfTdKiTpx8UlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zo_W119dmeKy7sEfTdKiTpx8UlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/5B0D4A2020ED11EB99498963C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.13.0/24
                IPv6:
                  2406:abc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:cd:9f:3e:37:66:d0:0f:84:8b:ef:6c:00:a3:6d:af:d6:
         55:dd:17:58:83:41:68:12:f1:7d:ef:b4:46:26:35:06:be:14:
         7c:2d:fe:79:73:eb:d3:6b:f0:dc:9e:60:71:9d:a7:23:f1:57:
         0b:92:32:73:3c:9f:ab:b9:ce:b5:91:fa:96:29:12:1a:4e:4e:
         b9:a9:3a:ef:51:50:5e:af:92:3d:0f:39:ae:3c:8a:c4:56:e9:
         25:85:51:b2:36:a5:6b:50:c0:7f:bb:aa:77:a6:d3:9a:6d:3c:
         fe:cc:80:aa:10:71:72:4e:b8:eb:cf:b0:fb:1e:a3:61:71:d5:
         2c:fd:2e:95:92:6a:06:bd:ec:67:db:c2:cb:6f:8c:4b:17:9f:
         02:fa:c7:86:88:78:27:56:5b:3c:14:52:6c:d2:09:8b:8c:1f:
         80:8f:2c:11:5f:48:9f:22:94:04:67:45:42:09:55:c7:03:b6:
         11:78:44:b9:cd:4a:77:eb:06:10:63:5d:32:47:d0:c6:17:66:
         30:e0:07:ea:5b:d5:ad:b2:c3:c4:94:d6:a1:91:ee:ec:fe:a2:
         b9:59:22:7c:41:fb:78:aa:d6:6a:90:31:47:56:8f:dd:ed:5a:
         70:a7:98:f1:ad:5b:cd:63:fb:cd:10:0d:ba:f2:15:59:fc:a2:
         c1:db:96:1d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OEI5QzExMC8GA1UEBRMoNjY4RkQ2RDc1RjVEOTlFMkIyRUVDMTFGNEREMkEyNEU5
QzdDNTI1NDAeFw0yMDExMDcxMTM1MzdaFw0yMjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTVmYTY4Njg5LTM3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCk/s8edhwThzBL1dqbviayt6pNI8A3jiB6UI6/9yEtOmb1rPoMltiXlFvrdQZh
cTa20CI2v/bUsADa6JS8F7wvOsITGEgN7D8LkUTDZtHuhP/Wj1MvFyvkt+KXhGfJ
vvji2X95QjzDY7+FHE/qkqv3rs1d1cgcmzEg6xrs3oLzwL7jEDI1+B8sXLCSQnzW
q72qwyMBVjEIZHVTrEIKJzfQQR15UXopJ41v6l/hzXUQDepdmfTAvn1O8hJs1UUB
rCTMGlhD+GI5r0E8QZooRdbC6Z3nwV24j01dRDs5gwA/UqaH65ir7ofSOtj5SXEI
fABFlvhMkywAWcr5RG0EMNVJAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUt30G9fHl
gs7GTvPPAhLF1VC2+lMwHwYDVR0jBBgwFoAUZo/W119dmeKy7sEfTdKiTpx8UlQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QjlDL0Q4NUIzODhBMjBF
MjExRUI4REY1NTc0NkM0RjlBRTAyL1pvX1cxMTlkbWVLeTdzRWZUZEtpVHB4OFVs
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWm9fVzExOWRtZUt5N3NFZlRkS2lUcHg4VWxRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEI5Qy9EODVCMzg4QTIwRTIxMUVCOERGNTU3NDZDNEY5QUUwMi81QjBENEEyMDIw
RUQxMUVCOTk0OTg5NjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAGeeDTANBAIAAjAHAwUAJAarwDANBgkqhkiG9w0BAQsFAAOC
AQEACjDNnz43ZtAPhIvvbACjba/WVd0XWINBaBLxfe+0RiY1Br4UfC3+eXPr02vw
3J5gcZ2nI/FXC5Iyczyfq7nOtZH6likSGk5Ouak671FQXq+SPQ85rjyKxFbpJYVR
sjala1DAf7uqd6bTmm08/syAqhBxck6468+w+x6jYXHVLP0ulZJqBr3sZ9vCy2+M
SxefAvrHhoh4J1ZbPBRSbNIJi4wfgI8sEV9InyKUBGdFQglVxwO2EXhEuc1Kd+sG
EGNdMkfQxhdmMOAH6lvVrbLDxJTWoZHu7P6iuVkifEH7eKrWapAxR1aP3e1acKeY
8a1bzWP7zRANuvIVWfyiwduWHQ==
-----END CERTIFICATE-----