Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/36E558F6EEC711EBA5AA602EC4F9AE02.roa
File:                     36E558F6EEC711EBA5AA602EC4F9AE02.roa (raw, json)
Hash identifier:          WW7O4cjs0QCGUM0Z5KkkrC8k8jeovs5JKA9Ne3aCfjk=
Subject key identifier:   4A:0C:CD:5A:FA:21:8A:46:3C:18:9F:7A:6F:CC:29:09:50:AE:60:D9
Certificate issuer:       /CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
Certificate serial:       04
Authority key identifier: 4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/36E558F6EEC711EBA5AA602EC4F9AE02.roa
Signing time:             Tue 27 Jul 2021 10:41:35 +0000
ROA not before:           Tue 27 Jul 2021 10:41:35 +0000
ROA not after:            Thu 31 Mar 2022 00:00:00 +0000
asID:                     59357
IP address blocks:        103.254.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
        Validity
            Not Before: Jul 27 10:41:35 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=60ffe2df-c230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:fa:16:bf:bd:4e:07:57:b1:38:13:ad:79:
                    31:bd:d2:e4:58:d7:81:f6:e4:90:c5:5d:74:5d:05:
                    8a:7a:45:ed:14:b1:2a:ed:ee:e4:92:c6:6f:d8:d4:
                    0b:72:cb:5e:7b:85:e2:21:36:50:25:e7:3c:fa:2b:
                    5f:dc:12:a6:38:3e:63:43:18:e2:d0:18:03:02:a2:
                    b6:ef:5c:92:a3:d4:84:8f:5c:b4:df:a5:84:6b:79:
                    ed:58:f5:d4:75:81:92:87:f0:8e:86:55:29:4a:54:
                    49:77:19:bb:72:50:7b:09:bb:5c:a2:2e:99:62:36:
                    30:b8:62:e2:16:3f:42:6f:5a:60:0a:1c:05:96:66:
                    e7:5a:85:32:5b:04:e8:f9:b9:a7:8d:51:35:81:0e:
                    9e:14:a7:ca:67:16:99:db:ee:8a:7d:ad:d8:fd:b0:
                    bf:0f:9b:f0:21:3d:0e:91:1b:7d:d0:77:67:11:12:
                    d1:b9:62:a7:b7:46:10:f2:0f:a9:59:e6:2c:f1:e5:
                    6a:c6:ef:5f:a9:84:36:bf:d5:88:c3:55:eb:a9:5a:
                    e7:b4:79:de:86:09:9d:4f:2e:74:28:26:a7:71:ef:
                    76:ff:e8:95:db:91:43:f0:40:22:16:e9:95:7f:6d:
                    5f:60:82:f0:9d:ef:77:32:25:d7:f1:12:c2:65:2b:
                    be:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:CD:5A:FA:21:8A:46:3C:18:9F:7A:6F:CC:29:09:50:AE:60:D9
            X509v3 Authority Key Identifier:
                keyid:4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/Tujoq3K9a58o2bo56sKJSC3wjis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/36E558F6EEC711EBA5AA602EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:05:57:a6:8d:21:14:ca:bc:14:45:38:d5:ef:15:1c:4d:74:
         35:cd:21:b5:5f:ff:27:05:30:1b:61:cf:04:c3:fd:ea:91:cc:
         37:d5:44:cf:09:58:f8:ab:7c:55:96:ad:ad:cd:6f:4c:c4:49:
         ee:bf:ff:ad:02:7c:18:d0:f7:73:ec:1b:4b:ff:23:6d:a4:ab:
         9e:05:d4:8b:2a:1b:51:39:c6:90:04:ee:fb:14:98:42:63:ba:
         61:21:a2:eb:91:42:a0:f6:f0:f5:37:79:90:d3:7d:36:95:ee:
         7b:49:1a:e8:79:00:e1:18:37:ec:37:9a:bc:a8:b7:ee:0a:97:
         e5:61:25:19:05:ee:6a:f3:69:5e:9b:85:32:c8:44:53:09:9d:
         4f:c8:15:b4:c9:d7:9b:00:94:b5:ff:1e:aa:c9:7f:cc:43:5d:
         eb:a3:96:92:6d:d7:9e:81:b0:81:95:c8:4d:8d:cd:6b:e2:45:
         48:68:88:c2:5f:40:83:c6:e1:59:6f:b3:56:73:13:0b:11:41:
         d3:ed:93:37:bd:ea:32:45:86:56:4b:87:8b:b2:5b:df:e0:25:
         85:4e:67:1a:4f:e3:ea:33:1d:52:c7:02:4c:11:e1:92:47:57:
         ad:38:ee:32:75:d8:94:7e:3f:31:07:87:48:c4:3f:26:91:dd:
         f7:a5:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----