Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/A5A0F8AA807611EBAF13304EC4F9AE02.roa
File:                     A5A0F8AA807611EBAF13304EC4F9AE02.roa (raw, json)
Hash identifier:          PZiFf9Yl5Q+CzQQ+wLvOtmMDy4j6gRTojAoVwb3AyuU=
Subject key identifier:   9C:E3:66:6D:34:22:07:76:8C:27:BD:1A:FB:62:93:E6:D3:63:ED:DB
Certificate issuer:       /CN=A91F2807/serialNumber=1289E556D85D200CF5D6895FB5CE49C22E6C16BF
Certificate serial:       02C9
Authority key identifier: 12:89:E5:56:D8:5D:20:0C:F5:D6:89:5F:B5:CE:49:C2:2E:6C:16:BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EonlVthdIAz11olftc5Jwi5sFr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/A5A0F8AA807611EBAF13304EC4F9AE02.roa
Signing time:             Wed 02 Mar 2022 13:51:12 +0000
ROA not before:           Wed 02 Mar 2022 13:51:12 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     140919
IP address blocks:        167.179.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2807/serialNumber=1289E556D85D200CF5D6895FB5CE49C22E6C16BF
        Validity
            Not Before: Mar  2 13:51:12 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=621f7650-4a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:0a:3a:6b:8b:32:53:6f:d7:39:ef:5a:9f:
                    d8:d7:40:7c:2f:fb:b0:25:b7:27:1c:eb:d9:b2:07:
                    22:68:28:df:63:58:74:1f:76:09:72:4e:8d:cb:6e:
                    20:c9:a9:9d:74:cf:91:e6:71:dd:11:a3:7f:85:0c:
                    61:92:95:e9:a0:7e:75:5a:71:74:81:77:18:56:5e:
                    d0:06:e9:7b:5f:47:11:60:cd:c7:6f:ad:44:b6:5c:
                    99:dd:e7:3f:60:14:ad:da:dd:ca:63:ee:e4:92:63:
                    d9:bb:4e:03:d6:4e:73:d3:f8:fa:b1:ac:79:31:54:
                    cb:22:7a:70:05:aa:6f:a0:2d:8c:20:0a:86:f0:64:
                    55:ee:a0:6b:cd:a7:5b:25:9f:ad:f7:97:10:9d:6c:
                    c3:38:8f:3e:68:80:04:98:60:44:16:69:3b:bb:60:
                    a9:14:66:ab:dd:23:fb:5e:59:9d:d0:84:7d:d5:30:
                    9a:b5:85:13:78:df:0b:88:1f:f4:96:c2:1a:9f:7b:
                    a6:6c:9f:4b:57:10:e2:a9:c4:48:b1:73:16:fb:54:
                    60:9e:cc:cc:db:dc:8c:c8:90:ea:8e:cd:52:35:a1:
                    3f:ff:cf:53:18:aa:96:52:8f:c4:3d:74:9a:21:6d:
                    d0:06:39:5d:48:00:9b:2a:f7:9a:25:bb:9c:46:7c:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:66:6D:34:22:07:76:8C:27:BD:1A:FB:62:93:E6:D3:63:ED:DB
            X509v3 Authority Key Identifier:
                keyid:12:89:E5:56:D8:5D:20:0C:F5:D6:89:5F:B5:CE:49:C2:2E:6C:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/EonlVthdIAz11olftc5Jwi5sFr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EonlVthdIAz11olftc5Jwi5sFr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2807/55D6A54A807111EBA65EC281C4F9AE02/A5A0F8AA807611EBAF13304EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:e0:da:5c:5b:21:00:ca:b1:78:2a:bf:09:04:e8:12:df:
         c7:ce:87:9d:7e:7e:06:6a:28:01:dd:f3:a8:6b:1b:05:da:f0:
         23:e5:ca:88:95:a4:87:2b:37:b6:28:60:7e:64:43:46:b3:cc:
         7f:51:ae:70:df:d8:7d:9c:cb:c3:a2:52:29:58:64:1d:86:cb:
         c2:61:9c:62:0f:53:b1:b3:0b:dc:d3:ae:77:80:4f:15:dd:98:
         fc:01:21:8a:c6:8e:a2:c4:9d:69:ca:f3:9d:c5:64:90:c0:81:
         d3:4e:d3:c1:c8:1f:db:a2:c7:d8:65:27:28:1e:4c:09:28:f4:
         74:86:d4:ae:2f:82:bb:37:8f:59:3b:5a:36:5f:34:97:f5:7f:
         ed:86:a6:e7:ba:c0:87:72:63:a2:1d:a5:34:a1:b9:8b:10:98:
         20:99:59:54:12:bf:d0:07:84:91:ea:aa:a3:1f:23:2d:7d:ce:
         82:e5:92:f9:7d:11:f1:e6:4a:1c:cb:74:f3:96:19:0e:dd:35:
         56:02:08:7e:cc:25:71:dd:2a:b6:06:39:8d:e3:c8:25:cf:a9:
         db:87:f6:7c:28:aa:53:bb:3b:83:ea:fa:17:06:52:7a:79:bf:
         38:d9:b3:ed:5a:31:37:c6:ff:a4:3b:c9:ed:19:1f:02:b1:8d:
         a6:85:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----