Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/C6F008D46A9D11E9A5F15112C4F9AE02.roa
File:                     C6F008D46A9D11E9A5F15112C4F9AE02.roa (raw, json)
Hash identifier:          96R6OD8dhBMPaRCYV0U79rVHy3n01TOlgIgJSHIJcZo=
Subject key identifier:   E8:59:B7:8F:30:48:DA:2C:04:39:09:B5:39:68:21:00:E0:0E:30:2A
Certificate issuer:       /CN=A912F292/serialNumber=B348829EDC4AF2523936BE609FB4C739085C7C2C
Certificate serial:       0DB0
Authority key identifier: B3:48:82:9E:DC:4A:F2:52:39:36:BE:60:9F:B4:C7:39:08:5C:7C:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0iCntxK8lI5Nr5gn7THOQhcfCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/C6F008D46A9D11E9A5F15112C4F9AE02.roa
Signing time:             Wed 04 Jan 2023 18:55:33 +0000
ROA not before:           Wed 04 Jan 2023 18:55:33 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     45566
IP address blocks:        2401:fa00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3504 (0xdb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F292/serialNumber=B348829EDC4AF2523936BE609FB4C739085C7C2C
        Validity
            Not Before: Jan  4 18:55:33 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63b5cba5-c556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:43:57:e3:27:b0:04:57:64:34:47:b0:3e:
                    95:5f:af:f7:0f:ae:48:35:fa:ae:4d:95:ab:c0:4d:
                    31:5c:0d:90:6c:0d:50:74:7a:ff:b4:87:a0:f0:ac:
                    95:33:0b:cd:06:d8:78:38:4d:29:96:22:61:d0:c9:
                    40:c5:61:3a:8e:ce:c3:13:c8:49:a6:25:05:0a:e0:
                    b6:b9:d7:93:c8:8b:3a:c2:1f:7a:a2:75:04:0d:94:
                    0f:31:c9:65:1f:03:00:e2:c8:65:38:88:ba:0e:ee:
                    fe:be:cd:de:2e:2b:a1:90:43:81:62:55:88:35:16:
                    79:04:81:fe:e0:7f:c3:c0:1e:06:3d:c6:c3:9f:20:
                    c1:37:53:89:73:cb:fb:84:3d:ea:b4:5d:54:8c:b9:
                    09:49:45:08:e8:ed:72:1c:10:a2:7a:b2:9f:85:b5:
                    30:cc:7d:56:90:13:40:95:6c:be:8e:54:99:f6:e2:
                    cb:b3:c4:e2:bf:e6:6f:e4:dd:03:a8:7a:51:86:d3:
                    e4:b4:06:cb:78:4f:c8:f8:bf:d7:21:7f:86:d9:fe:
                    e1:d7:ed:b3:a3:e9:a4:6b:a8:f3:c5:18:3b:15:a9:
                    ff:88:e9:25:f6:5a:e6:a2:2d:81:ea:be:0b:20:c6:
                    5c:8e:3f:24:ca:64:9b:2f:81:fe:f6:3f:b0:91:9e:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:59:B7:8F:30:48:DA:2C:04:39:09:B5:39:68:21:00:E0:0E:30:2A
            X509v3 Authority Key Identifier:
                keyid:B3:48:82:9E:DC:4A:F2:52:39:36:BE:60:9F:B4:C7:39:08:5C:7C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/s0iCntxK8lI5Nr5gn7THOQhcfCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0iCntxK8lI5Nr5gn7THOQhcfCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/C6F008D46A9D11E9A5F15112C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:fa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:be:55:32:50:1d:e2:2c:45:56:a0:98:f7:59:5b:1a:81:32:
         50:42:64:3f:9f:8e:70:ae:6b:29:42:b5:97:3c:d6:15:29:fd:
         b4:3e:92:9d:ed:1d:b2:06:48:79:00:cc:5a:a7:a7:32:33:0d:
         01:b6:91:88:6e:43:c4:36:99:48:25:55:31:9f:a7:9c:9d:4e:
         cc:28:db:fa:d6:2e:ae:b4:c6:15:f6:78:a7:95:0e:f6:44:0d:
         2f:1f:83:35:d8:56:8f:5b:b2:3e:86:c8:30:7e:20:7c:07:74:
         7f:ce:7c:e1:29:8f:b8:f4:f3:6c:67:08:7a:0c:7d:ed:16:68:
         70:da:db:20:a0:ce:b3:15:1d:1b:b9:a0:85:06:c6:f3:b1:3c:
         f9:8c:e4:08:3e:d8:e8:04:76:96:8d:d9:fb:ff:85:1c:07:75:
         15:b8:04:9e:26:32:f5:9d:99:a3:a3:5a:30:6d:df:62:7b:9f:
         eb:6f:aa:c1:23:bb:be:67:99:0d:83:b6:d3:4d:2b:60:c5:4b:
         1a:53:b1:91:cf:15:dc:00:f7:23:34:73:7d:71:72:6f:6c:5e:
         91:ef:59:a7:0b:1c:b8:12:93:64:33:ce:b0:7d:57:1b:97:24:
         3f:6c:58:18:cd:e1:25:70:4e:5e:ee:4e:fc:41:05:07:01:41:
         32:57:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----