Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/615B509E9D8A11E9ADA31235C4F9AE02.roa
File:                     615B509E9D8A11E9ADA31235C4F9AE02.roa (raw, json)
Hash identifier:          G+v+o29JoPrVT7PmjtYzcBfeJMq+oaVGZUwQwwf4yZc=
Subject key identifier:   78:42:83:C2:FD:53:BF:F3:68:D0:58:1A:9C:CC:DD:0F:5C:2C:42:32
Certificate issuer:       /CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
Certificate serial:       094B
Authority key identifier: 08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/615B509E9D8A11E9ADA31235C4F9AE02.roa
Signing time:             Fri 27 Aug 2021 07:35:41 +0000
ROA not before:           Fri 27 Aug 2021 07:35:41 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     135383
IP address blocks:        103.140.169.0/24 maxlen: 24
                          103.141.76.0/24 maxlen: 24
                          2001:df0:ee80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379 (0x94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
        Validity
            Not Before: Aug 27 07:35:41 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=612895cd-6c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:14:39:a7:c9:33:29:15:bd:c5:0b:b2:e5:
                    aa:08:d7:47:76:63:fa:8c:81:eb:f7:5d:d1:c4:09:
                    a3:a3:3f:62:48:a1:91:d5:b2:d2:e3:79:09:fe:a3:
                    b1:de:0e:a5:dc:71:8c:e2:d2:6b:40:c6:01:9a:bf:
                    27:80:c1:81:4e:43:1b:ec:08:80:b3:eb:d5:57:1e:
                    c0:d8:5b:5d:f9:2b:fa:a8:0b:f0:da:93:d2:c8:67:
                    f3:13:8f:90:09:00:07:3d:44:53:08:02:72:ac:5c:
                    99:14:6e:e4:39:15:09:e2:56:cb:fa:33:23:bf:73:
                    b9:c4:48:5e:f3:c0:fd:c2:08:2e:e3:51:9a:4d:6c:
                    cd:7a:64:50:63:e1:78:7e:35:03:62:66:75:04:e8:
                    b2:86:60:d7:2f:bb:a9:c5:1d:b5:6b:32:32:4c:0f:
                    66:ce:97:0c:c1:00:bc:8f:f1:b4:84:3a:68:de:7a:
                    cc:34:b5:7a:04:b8:de:96:c9:63:87:31:ef:68:49:
                    4d:58:75:48:69:7e:33:67:07:91:c6:d1:41:da:39:
                    cc:ca:01:e5:6d:b1:f6:63:c9:dc:69:ed:59:25:ab:
                    23:c7:96:23:93:d8:c2:55:0d:04:46:5b:c3:e6:d4:
                    46:31:f7:61:64:6a:33:4d:77:77:56:37:43:a8:33:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:42:83:C2:FD:53:BF:F3:68:D0:58:1A:9C:CC:DD:0F:5C:2C:42:32
            X509v3 Authority Key Identifier:
                keyid:08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/615B509E9D8A11E9ADA31235C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.169.0/24
                  103.141.76.0/24
                IPv6:
                  2001:df0:ee80::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:e8:28:5e:e8:50:1d:e8:79:28:cb:0e:8e:4b:4c:fd:1f:
         35:f8:00:48:98:1f:fd:21:bf:9c:8a:95:8a:bf:6d:47:c7:03:
         a0:ef:a7:82:0c:cc:dd:91:ce:56:e3:de:19:d7:77:1b:33:4d:
         be:06:bb:95:bc:63:a7:74:dc:19:82:e5:46:d3:64:23:e9:88:
         90:1a:df:c0:0a:d6:85:44:1a:a6:a0:c8:44:c1:e9:d9:3c:2c:
         b3:da:86:f2:65:47:ad:8a:00:57:e4:92:81:d2:51:fb:d9:47:
         a1:eb:34:6f:2f:ed:9f:99:45:6e:b6:1a:ee:cd:0c:59:26:41:
         ee:49:e2:a8:8c:cc:6c:d0:4d:0e:f8:45:a4:00:94:b1:5c:c7:
         c6:cc:ca:f3:75:6a:66:af:b0:71:18:62:ad:43:98:5b:a9:8a:
         4e:88:1b:fd:5d:05:f4:a2:29:42:4a:e4:87:bb:e8:38:05:fb:
         5d:38:72:9b:b5:2f:a2:9e:a3:27:93:64:00:ce:85:28:eb:ae:
         43:7e:82:c1:00:e3:0d:cc:f1:4a:6f:a3:a3:1e:1e:97:2a:43:
         06:38:3e:f8:c3:c0:e2:ba:82:46:b3:3a:b9:0f:33:c0:ff:43:
         b3:82:41:39:5d:13:b5:d1:94:0f:0b:e5:01:87:36:86:73:6b:
         de:fb:05:96
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFMUMxMTAvBgNVBAUTKDA4MTI4MkJERjdBMDkxOUJDNkE0MjgwOTc2NjIxNUY2
RDRCRDdEOEYwHhcNMjEwODI3MDczNTQxWhcNMjIxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTI4OTVjZC02YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoOQUOafJMykVvcULsuWqCNdHdmP6jIHr913RxAmjoz9iSKGR1bLS43kJ/qOx
3g6l3HGM4tJrQMYBmr8ngMGBTkMb7AiAs+vVVx7A2Ftd+Sv6qAvw2pPSyGfzE4+Q
CQAHPURTCAJyrFyZFG7kORUJ4lbL+jMjv3O5xEhe88D9wggu41GaTWzNemRQY+F4
fjUDYmZ1BOiyhmDXL7upxR21azIyTA9mzpcMwQC8j/G0hDpo3nrMNLV6BLjelslj
hzHvaElNWHVIaX4zZweRxtFB2jnMygHlbbH2Y8ncae1ZJasjx5Yjk9jCVQ0ERlvD
5tRGMfdhZGozTXd3VjdDqDOgGQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHhCg8L9
U7/zaNBYGpzM3Q9cLEIyMB8GA1UdIwQYMBaAFAgSgr33oJGbxqQoCXZiFfbUvX2P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UxQy80MzNCQTZGMjlE
NzgxMUU5OTYyMDA4N0NDNEY5QUUwMi9DQktDdmZlZ2tadkdwQ2dKZG1JVjl0Uzlm
WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NCS0N2ZmVna1p2R3BDZ0pkbUlWOXRTOWZZOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNFMUMvNDMzQkE2RjI5RDc4MTFFOTk2MjAwODdDQzRGOUFFMDIvNjE1QjUwOUU5
RDhBMTFFOUFEQTMxMjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABnjKkDBABnjUwwDwQCAAIwCQMHACABDfDugDANBgkqhkiG
9w0BAQsFAAOCAQEAiXvoKF7oUB3oeSjLDo5LTP0fNfgASJgf/SG/nIqVir9tR8cD
oO+nggzM3ZHOVuPeGdd3GzNNvga7lbxjp3TcGYLlRtNkI+mIkBrfwArWhUQapqDI
RMHp2Twss9qG8mVHrYoAV+SSgdJR+9lHoes0by/tn5lFbrYa7s0MWSZB7kniqIzM
bNBNDvhFpACUsVzHxszK83VqZq+wcRhirUOYW6mKTogb/V0F9KIpQkrkh7voOAX7
XThym7Uvop6jJ5NkAM6FKOuuQ36CwQDjDczxSm+jox4elypDBjg++MPA4rqCRrM6
uQ8zwP9Ds4JBOV0TtdGUDwvlAYc2hnNr3vsFlg==
-----END CERTIFICATE-----