Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/B8B76206651E11ED9F241567C4F9AE02.roa
File:                     B8B76206651E11ED9F241567C4F9AE02.roa (raw, json)
Hash identifier:          IBYkCwvBkdbnLi4ai9iB2k9/uqIoFndrbql6PjIrgno=
Subject key identifier:   25:C0:41:A4:87:7B:29:D4:F4:49:96:B3:EA:59:97:47:2F:78:8F:E1
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       052E
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/B8B76206651E11ED9F241567C4F9AE02.roa
Signing time:             Tue 15 Nov 2022 19:50:15 +0000
ROA not before:           Tue 15 Nov 2022 19:50:14 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     149020
IP address blocks:        27.0.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Nov 15 19:50:14 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=6373ed76-ab22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:b7:a3:0e:ad:55:c7:67:ab:6d:2f:67:24:
                    a9:2d:02:26:6e:cd:95:5a:f2:b7:2a:47:f6:14:e1:
                    11:91:1c:72:90:fd:33:62:49:70:37:90:ed:ad:b5:
                    fd:e9:f9:88:70:98:55:e5:28:b6:f0:20:45:52:e5:
                    8d:58:a9:ac:c8:8f:d6:3c:1b:97:ed:f8:59:97:ad:
                    4b:86:ab:f3:83:c4:19:52:a8:22:e1:cf:4d:e1:ed:
                    e4:f1:7f:ec:61:5b:2c:d0:41:b7:1e:23:21:7e:87:
                    92:14:ea:0e:b4:ee:ed:e4:6e:05:f4:2f:af:28:cf:
                    36:12:8c:b3:cf:a3:25:87:1c:69:f4:11:56:0d:22:
                    f7:05:55:c0:11:8c:c6:bb:e6:b4:2a:4a:3d:de:77:
                    78:75:b4:96:73:81:93:4d:65:4d:28:70:b0:d4:69:
                    3c:ab:87:95:04:e8:49:b2:68:c3:d5:4f:46:7a:00:
                    ff:8e:6a:68:e8:e5:55:9e:11:f4:5f:ad:83:6d:d8:
                    96:a5:7e:ff:95:b2:eb:4d:29:53:19:c7:5c:fd:10:
                    37:7f:eb:02:65:fd:4a:90:49:36:39:a0:3b:56:23:
                    cc:00:b4:ea:dc:dc:68:cb:63:f3:b5:f0:8d:22:50:
                    21:8a:c1:b4:fc:7a:0a:db:88:3a:d8:17:62:c3:b1:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C0:41:A4:87:7B:29:D4:F4:49:96:B3:EA:59:97:47:2F:78:8F:E1
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/B8B76206651E11ED9F241567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:e8:ae:6d:b2:f1:71:a6:b9:4a:21:28:09:ab:76:6c:c7:
         b3:48:0e:b6:8e:8b:79:48:16:52:6f:5e:1b:18:db:78:f1:bc:
         8f:c3:19:10:20:5b:45:3f:00:ca:4c:0a:a4:3b:b5:d6:c1:11:
         a9:38:5d:f0:24:2f:8f:89:4f:62:d8:01:9c:c9:c4:a6:30:73:
         35:9d:ad:d8:52:53:94:f3:0e:06:d0:68:0d:8f:a3:15:4a:43:
         0f:1d:30:06:4b:d6:dd:48:11:3f:c6:49:fa:8b:55:ab:a7:66:
         9e:1a:00:c9:86:e8:5a:2e:08:0e:71:9a:98:33:f8:e2:85:a7:
         29:0d:41:1d:bb:b1:53:47:76:2d:cd:14:4a:0a:5e:fd:01:55:
         3f:d7:30:2a:95:84:33:6d:e7:4a:b4:13:dc:f5:35:6d:0c:91:
         05:80:5b:8a:97:58:19:fd:e6:5d:31:e2:f2:9e:f7:ab:1b:17:
         b0:ee:88:75:df:bf:fc:91:40:b8:85:e4:be:7a:5d:d0:27:16:
         6f:9b:34:58:19:95:69:28:ac:25:3a:b1:58:80:2e:4c:2e:4b:
         95:88:85:20:1d:fd:ed:88:f2:c9:44:af:53:84:60:2f:84:6f:
         6f:ec:00:47:b7:da:43:1a:cd:06:3d:25:fd:5c:84:5a:c8:2e:
         6f:b4:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----