Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/16C489C43F8611ECB9DA3E56C4F9AE02.roa
File:                     16C489C43F8611ECB9DA3E56C4F9AE02.roa (raw, json)
Hash identifier:          8/XHOA/gXqIu7stsxWUWucRPZ5e3CZM+10prpgyNlcg=
Subject key identifier:   1E:22:02:AD:20:36:1F:E9:E3:A6:D4:F5:C5:19:59:4C:24:98:71:96
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0349
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/16C489C43F8611ECB9DA3E56C4F9AE02.roa
Signing time:             Wed 02 Mar 2022 13:50:49 +0000
ROA not before:           Wed 02 Mar 2022 13:50:49 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     148996
IP address blocks:        2404:3d80:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Mar  2 13:50:49 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=621f7639-ffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:2d:3a:9b:55:9b:9d:80:66:7c:05:45:ea:
                    d9:bf:52:41:ea:9d:4c:6b:9f:37:13:c6:5e:3f:26:
                    05:0d:36:06:9b:ac:75:76:a5:5d:55:f5:37:34:77:
                    79:a8:8a:22:47:a0:c4:ac:7e:af:cf:81:95:e1:56:
                    2e:1e:a1:65:87:b5:71:83:a1:fa:74:c0:05:b2:7a:
                    b4:45:dd:aa:fa:3b:3d:66:6d:5c:06:97:e6:02:ab:
                    6d:7f:29:d4:6c:de:80:20:e3:b7:81:e7:b9:04:d7:
                    99:61:c0:a5:d6:3e:fc:99:2e:87:44:02:45:9c:31:
                    18:23:f7:b2:f7:00:ea:13:bf:4b:66:c6:f1:8b:81:
                    cc:1f:5f:2c:2e:02:cb:f2:f3:00:9b:73:72:26:c7:
                    bf:ba:7e:7a:6b:dd:dc:e4:b3:24:4d:5b:e7:c5:e2:
                    7f:09:5e:b5:fe:ed:ef:cb:9e:4d:6f:e6:98:4d:9f:
                    02:ca:fe:6d:5f:5c:76:14:d4:76:2b:4e:05:b0:46:
                    92:25:4e:4c:a5:05:eb:09:6f:25:d3:66:d0:8a:bc:
                    2d:3b:04:e7:82:74:3f:9c:05:b4:f8:df:18:8c:ef:
                    49:bd:13:b0:0e:78:01:76:38:c0:45:b8:47:e5:61:
                    7f:65:ed:74:94:f9:86:20:a4:7c:a4:a2:c7:46:76:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:22:02:AD:20:36:1F:E9:E3:A6:D4:F5:C5:19:59:4C:24:98:71:96
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/16C489C43F8611ECB9DA3E56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:1e:0f:fe:78:e2:68:ec:dd:55:03:1c:57:66:a8:26:0e:
         25:4d:00:cc:ac:f4:b1:d2:51:d2:f6:ad:5a:43:5c:8b:8f:64:
         5b:2d:42:58:c1:cf:e1:fc:d8:db:5c:12:28:da:11:90:6d:70:
         31:ac:5d:76:fc:e2:d0:f1:f4:af:93:7b:37:9e:8f:5b:b6:e7:
         96:50:fc:47:fd:8b:a1:55:93:c9:83:0f:50:21:20:be:15:09:
         21:b3:b4:b3:7e:4e:d8:28:df:f0:3c:2a:37:b5:1e:dc:5c:ac:
         4c:5f:5a:24:2b:0f:3e:db:65:b2:86:11:5d:56:59:2f:0d:56:
         1c:8d:3f:4d:a4:d5:76:91:3d:1a:e4:4a:a5:9d:21:a8:f6:eb:
         c5:3c:1b:73:75:f0:e2:3d:6c:b0:8a:66:fb:19:c2:2f:b8:fe:
         47:bd:0f:56:81:08:41:29:c0:f1:f2:c5:b4:cd:e4:28:5a:c6:
         35:dd:ab:e5:31:c9:a8:13:da:b6:0f:ad:2a:a1:0f:12:b6:6a:
         13:bf:6c:d0:c4:6d:a5:5f:36:a6:2d:a5:da:15:f4:6a:69:80:
         de:c6:79:39:de:31:dc:b5:f0:27:0c:7b:76:55:e5:d8:e7:77:
         86:6f:dc:ee:0e:57:02:c2:76:03:4d:44:71:c3:b4:13:cc:30:
         ce:89:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----