Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/09C61712932B11ECA23DD427C4F9AE02.roa
File:                     09C61712932B11ECA23DD427C4F9AE02.roa (raw, json)
Hash identifier:          grebGUnyDEYF1cFYULOxKlUhGviKb7TPEQArA6yrVqk=
Subject key identifier:   D8:17:3B:3E:A0:A4:5C:E7:A1:9D:66:F8:58:B4:B4:E0:58:1A:41:E1
Certificate issuer:       /CN=A91B84CB/serialNumber=795F9167F267859F4D438B837F8394EBE283BCD8
Certificate serial:       050D
Authority key identifier: 79:5F:91:67:F2:67:85:9F:4D:43:8B:83:7F:83:94:EB:E2:83:BC:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/09C61712932B11ECA23DD427C4F9AE02.roa
Signing time:             Mon 21 Feb 2022 15:29:20 +0000
ROA not before:           Mon 21 Feb 2022 15:29:20 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     393398
IP address blocks:        103.68.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B84CB/serialNumber=795F9167F267859F4D438B837F8394EBE283BCD8
        Validity
            Not Before: Feb 21 15:29:20 2022 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=6213afd0-0329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:17:bc:6b:fa:b6:02:e0:f5:ea:c8:c1:0f:
                    25:5b:35:ff:1b:49:a7:97:2a:db:2e:d8:24:e5:48:
                    a0:98:2e:e2:f4:35:09:c5:52:2f:c8:9f:3a:2d:bb:
                    4e:72:a4:ed:17:bf:ec:3a:98:34:c8:00:b2:21:1c:
                    d2:15:a4:3a:cc:af:25:a3:79:49:78:03:ca:2d:5f:
                    64:8f:4b:6e:ed:59:ec:77:94:50:fe:76:0a:c2:d4:
                    79:43:92:65:97:62:86:0f:03:ad:a2:6c:fb:db:56:
                    38:39:99:b2:d0:94:05:db:6a:ed:65:a6:f5:82:82:
                    b6:60:db:52:57:a4:9b:41:6c:fd:64:e9:f7:91:6d:
                    18:4c:45:16:53:21:b2:3b:8d:ba:9c:44:04:ac:e0:
                    ab:80:b7:7b:b3:63:c5:38:f5:f2:af:05:a1:9a:c3:
                    f7:c3:8c:61:c8:89:08:30:f6:b4:d1:85:ee:30:0f:
                    ed:c4:97:78:04:de:3c:66:cc:32:28:cd:ae:bd:81:
                    73:4b:08:57:c2:25:f6:b1:12:18:71:49:ff:5e:10:
                    8e:f1:7f:16:3b:ab:cf:ca:ae:3d:3f:53:8d:a6:e4:
                    19:cd:c5:29:8f:36:a7:3e:7f:23:cc:f9:23:0c:8d:
                    20:90:16:84:f6:4b:4e:c8:af:36:18:5a:be:6f:b1:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:17:3B:3E:A0:A4:5C:E7:A1:9D:66:F8:58:B4:B4:E0:58:1A:41:E1
            X509v3 Authority Key Identifier:
                keyid:79:5F:91:67:F2:67:85:9F:4D:43:8B:83:7F:83:94:EB:E2:83:BC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/09C61712932B11ECA23DD427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:3d:82:42:19:39:11:5e:63:ab:75:58:11:80:0d:3e:bd:
         a4:38:99:bf:4c:4c:c9:87:aa:9b:1d:b5:c4:b0:32:e3:66:eb:
         c2:56:77:42:80:a0:09:4a:71:3a:8d:52:f2:a0:e4:95:e1:ac:
         93:d6:e8:e9:47:11:6d:09:75:d8:92:cd:05:1a:c7:dc:8c:97:
         14:10:d6:34:95:89:7e:f8:77:5c:83:46:eb:f6:53:e2:e8:e1:
         69:d2:f0:d6:84:dc:5f:36:15:c3:1b:e3:db:be:c3:0f:79:86:
         5c:cc:98:c2:a8:7a:ac:de:17:cc:d4:d1:39:00:d5:57:15:61:
         de:00:cc:16:5f:bc:6d:53:71:e6:03:97:b3:0b:0f:0f:f3:2f:
         f2:0b:cc:e7:93:fb:a8:fd:c1:e0:0c:a1:48:e8:dd:ed:6a:2b:
         32:37:27:f2:05:05:7b:6c:c9:93:0d:4a:7a:a0:30:b8:35:14:
         57:06:52:28:10:3b:c6:b0:33:ec:1e:dd:4d:42:2c:36:0b:78:
         2e:76:81:f5:44:64:66:f4:94:36:16:cd:34:d9:e2:62:3a:e9:
         94:48:7b:f6:da:53:2a:b1:af:94:f3:7b:72:c0:1a:94:8b:7d:
         a6:61:4f:d4:9b:76:a8:2b:62:65:e1:0d:e4:5b:15:0d:e8:25:
         1a:5b:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----