Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/CEE0D6DC122F11EBB129C059C4F9AE02.roa
File:                     CEE0D6DC122F11EBB129C059C4F9AE02.roa (raw, json)
Hash identifier:          d+ZDQwTjqeiwgpw9dKUrXs2eqGaFjs3vwBbwhI5LpNc=
Subject key identifier:   45:F3:70:48:5B:56:C4:96:9D:9C:14:4C:8A:44:F3:26:D3:8E:DC:DC
Certificate issuer:       /CN=A912F292/serialNumber=B348829EDC4AF2523936BE609FB4C739085C7C2C
Certificate serial:       0DAE
Authority key identifier: B3:48:82:9E:DC:4A:F2:52:39:36:BE:60:9F:B4:C7:39:08:5C:7C:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0iCntxK8lI5Nr5gn7THOQhcfCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/CEE0D6DC122F11EBB129C059C4F9AE02.roa
Signing time:             Wed 04 Jan 2023 18:55:31 +0000
ROA not before:           Wed 04 Jan 2023 18:55:31 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     15169
IP address blocks:        2401:fa00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3502 (0xdae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F292/serialNumber=B348829EDC4AF2523936BE609FB4C739085C7C2C
        Validity
            Not Before: Jan  4 18:55:31 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63b5cba3-e03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:6b:68:c5:3d:50:92:87:2a:af:e6:c2:1e:
                    33:68:90:d7:a5:a2:a7:22:7f:d6:be:bf:40:e9:7a:
                    b3:78:f7:a0:60:e8:94:81:1f:bf:f7:40:38:83:68:
                    89:f6:48:81:f4:32:19:30:0e:32:b8:e5:b6:8c:f9:
                    4c:bf:de:6c:b5:cf:0e:89:d2:f7:56:6e:ee:0c:43:
                    88:95:cb:30:0a:3b:c0:a4:da:7f:84:95:d0:8d:98:
                    7c:10:64:c5:38:6f:72:f9:4d:45:c2:d7:21:ff:f4:
                    e8:46:51:3b:fc:2e:f7:80:23:4e:c3:10:bd:46:8b:
                    21:3a:16:c3:c9:d1:67:25:73:e3:0b:67:e9:43:cf:
                    f3:ee:a5:86:60:ee:15:3c:04:de:16:83:64:97:23:
                    82:1a:f5:53:71:6d:e6:5c:e2:c2:e9:a3:dd:59:c5:
                    26:20:39:6b:dc:ad:97:de:44:7e:89:01:d3:57:c9:
                    09:da:aa:75:e2:2c:de:6b:9a:23:75:c7:e5:59:b5:
                    c2:65:b6:e3:aa:12:81:96:47:e5:8d:ad:a4:83:a5:
                    02:c8:08:6f:6e:37:cc:ec:cf:5f:e0:d0:6a:56:f7:
                    97:50:c4:e6:ae:bc:fd:9d:cf:f9:aa:9f:72:1e:84:
                    9f:c0:fc:ec:f0:c9:81:54:bd:b5:5a:82:3d:8a:4b:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F3:70:48:5B:56:C4:96:9D:9C:14:4C:8A:44:F3:26:D3:8E:DC:DC
            X509v3 Authority Key Identifier:
                keyid:B3:48:82:9E:DC:4A:F2:52:39:36:BE:60:9F:B4:C7:39:08:5C:7C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/s0iCntxK8lI5Nr5gn7THOQhcfCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0iCntxK8lI5Nr5gn7THOQhcfCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F292/A31FE66A6A9B11E99AC5E00DC4F9AE02/CEE0D6DC122F11EBB129C059C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:fa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:52:e4:9f:cf:3b:ba:c9:4b:cd:38:af:66:a8:e3:c2:0d:
         56:86:c0:af:64:5d:3e:87:19:cd:ab:bb:5b:20:b4:3d:b5:0a:
         93:0d:3d:2f:62:b7:8f:be:18:97:d2:cc:b5:a3:7f:57:a1:d2:
         cd:5b:cd:b3:26:9f:3e:74:a3:e1:67:a7:16:4d:e4:e4:8d:7e:
         ef:c3:93:20:fa:81:cb:7e:f9:e0:9a:52:8a:0f:32:03:74:b1:
         15:73:c2:ce:2e:0d:97:da:e6:f1:0a:9a:5a:87:0d:4f:49:f4:
         41:d3:94:69:ed:f7:41:34:b3:38:2a:99:e4:bf:90:79:f0:4c:
         e5:83:37:45:64:f7:e4:93:91:61:b0:b6:ce:e7:a9:6c:10:0c:
         ff:00:44:46:c4:80:66:ec:5e:e8:c2:01:c6:15:67:64:fc:15:
         4e:d8:60:5e:98:15:2c:3e:5b:d5:07:1e:14:f6:6f:08:10:96:
         b1:5d:ec:55:47:e5:06:f5:f8:e9:36:d4:fd:9e:04:82:b7:60:
         10:91:3f:66:38:c6:cf:2c:80:c7:b5:e8:98:cc:dc:9b:ef:9b:
         2d:e8:70:60:2a:10:b7:2f:c8:d7:5b:73:d4:2b:d7:b4:27:74:
         d0:e1:5a:74:0b:f4:9c:81:43:d7:8d:e9:b8:20:ff:2a:90:e3:
         5e:73:7e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----