Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/626B2760275911EC8F89CE0FC4F9AE02.roa
File:                     626B2760275911EC8F89CE0FC4F9AE02.roa (raw, json)
Hash identifier:          gjCAvkxIFTrX63zgQR8jn8S0UQDYiCZ/3CQa1ien41A=
Subject key identifier:   8A:9A:88:C1:1E:DC:01:BF:1B:21:A3:DB:79:7A:00:50:A1:78:E7:2A
Certificate issuer:       /CN=A91CBF15/serialNumber=58CA41BB9146721CBA9DBCC01755FFD6C36E71FA
Certificate serial:       0414
Authority key identifier: 58:CA:41:BB:91:46:72:1C:BA:9D:BC:C0:17:55:FF:D6:C3:6E:71:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WMpBu5FGchy6nbzAF1X_1sNucfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/626B2760275911EC8F89CE0FC4F9AE02.roa
Signing time:             Tue 31 May 2022 12:55:31 +0000
ROA not before:           Tue 31 May 2022 12:55:31 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     55933
IP address blocks:        103.24.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBF15/serialNumber=58CA41BB9146721CBA9DBCC01755FFD6C36E71FA
        Validity
            Not Before: May 31 12:55:31 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62961043-658b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:4f:fb:03:5e:ae:4e:51:87:3e:1d:79:36:
                    dc:0c:2a:c9:98:cb:81:12:2d:c5:83:04:07:cd:47:
                    0a:4b:f8:6f:12:59:8d:91:6e:95:29:51:c3:8d:2f:
                    f2:d3:46:89:b3:d0:4e:c1:5e:9c:d6:de:56:18:7e:
                    5f:10:e4:b4:1f:91:d0:74:b3:94:b0:86:25:19:a8:
                    08:cf:6a:42:ea:a5:a2:8c:b4:46:9d:8d:92:1d:c7:
                    6d:ac:8d:52:74:49:d7:41:f1:42:e2:d4:3e:88:14:
                    c3:1d:d3:61:f4:91:01:5b:26:9c:8b:52:d1:10:52:
                    40:28:2f:56:94:41:c3:c7:5d:8f:f4:e9:7a:f3:48:
                    8f:27:36:f2:5d:aa:12:bc:ce:f0:77:0b:5b:26:45:
                    e9:ec:74:7f:18:84:9b:2e:cc:ca:4e:c1:51:26:b6:
                    ac:62:99:32:db:8e:af:64:90:08:0e:1e:ca:6b:01:
                    fd:fc:5d:f9:2f:00:9f:e8:a3:d9:bc:cc:f1:ce:92:
                    03:58:1c:14:e7:49:f8:fb:71:58:08:19:c0:1d:72:
                    08:4c:8f:d2:ed:d3:6f:d5:83:c3:5e:27:93:4a:a6:
                    7f:05:49:a3:35:b4:49:29:1e:fe:8e:0e:2b:e1:d6:
                    01:46:47:3c:d6:b9:72:e9:af:4a:19:26:db:28:c7:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:88:C1:1E:DC:01:BF:1B:21:A3:DB:79:7A:00:50:A1:78:E7:2A
            X509v3 Authority Key Identifier:
                keyid:58:CA:41:BB:91:46:72:1C:BA:9D:BC:C0:17:55:FF:D6:C3:6E:71:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/WMpBu5FGchy6nbzAF1X_1sNucfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WMpBu5FGchy6nbzAF1X_1sNucfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/626B2760275911EC8F89CE0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:75:05:d1:54:67:ad:cf:b9:65:29:67:c9:e8:14:e3:cb:
         1a:d8:f8:18:be:10:22:8d:74:bb:9b:57:21:da:4d:43:71:63:
         6f:01:93:72:de:a9:e1:2f:ff:d5:de:5b:9e:da:10:aa:fb:4a:
         e7:27:45:1a:9e:b8:ee:0a:a4:ae:0f:50:79:e0:3c:38:13:85:
         19:7c:53:0a:0e:a9:03:29:96:9c:66:f4:4a:7a:bb:8c:e0:ca:
         46:aa:7e:ac:0e:68:02:60:a0:4f:56:ef:83:33:0a:59:77:ab:
         d2:07:b9:53:5f:fd:96:b9:64:76:4f:aa:74:05:37:97:c0:e5:
         64:8a:d3:62:63:f6:15:50:49:e3:be:e0:64:ce:54:26:a9:70:
         28:77:87:e1:2e:2f:15:f3:c4:94:3a:3b:ac:19:04:e5:43:3f:
         4a:3b:13:64:58:e1:07:3b:c3:f9:c6:8a:95:e4:6e:b2:ba:45:
         20:de:49:4a:05:11:02:17:97:6f:6f:8b:95:91:d8:33:f8:1b:
         43:6a:ee:c3:6b:97:a4:36:7e:d0:0b:7d:f4:22:50:c1:79:e4:
         1b:71:10:36:09:24:08:bc:d0:b0:21:07:90:91:2c:d9:1f:2b:
         28:6a:dd:4f:5d:f2:11:97:91:32:d5:0c:de:43:cc:e2:3f:11:
         df:0d:39:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----