Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/B8367FBCE16911ECB2629D1AC4F9AE02.roa
File:                     B8367FBCE16911ECB2629D1AC4F9AE02.roa (raw, json)
Hash identifier:          cgJOSZUH1GlrJZgGfRNG6D9J66Ta6yn6qmNqTGPP6HY=
Subject key identifier:   5C:03:C2:7A:11:1B:5B:D5:8D:21:0E:AD:11:43:09:6A:4D:20:57:18
Certificate issuer:       /CN=A9155C3A/serialNumber=D46E50A03A799183E5E5438854B4AF4577790BE3
Certificate serial:       1997
Authority key identifier: D4:6E:50:A0:3A:79:91:83:E5:E5:43:88:54:B4:AF:45:77:79:0B:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1G5QoDp5kYPl5UOIVLSvRXd5C-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/B8367FBCE16911ECB2629D1AC4F9AE02.roa
Signing time:             Wed 01 Jun 2022 17:14:30 +0000
ROA not before:           Wed 01 Jun 2022 17:14:30 +0000
ROA not after:            Sat 01 Oct 2022 00:00:00 +0000
asID:                     13813
IP address blocks:        103.97.250.0/24 maxlen: 24
                          2400:d840:1::/48 maxlen: 48
                          2400:d840:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6551 (0x1997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155C3A/serialNumber=D46E50A03A799183E5E5438854B4AF4577790BE3
        Validity
            Not Before: Jun  1 17:14:30 2022 GMT
            Not After : Oct  1 00:00:00 2022 GMT
        Subject: CN=62979e76-bfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:ea:b5:a1:f5:c7:e5:5f:37:8b:1a:18:1d:
                    5e:bd:2f:73:97:57:ac:f0:56:44:85:ab:71:ae:3e:
                    73:ea:53:2f:f1:59:ae:af:f2:cc:ca:e0:cb:b5:f1:
                    88:54:b8:d1:2f:d8:65:9d:ca:0d:b4:d7:d8:b3:c1:
                    54:f2:d6:f5:e9:0b:64:9b:8e:6c:ac:3d:b4:c9:19:
                    13:e7:90:06:86:72:cc:2a:ac:24:69:1b:14:23:ca:
                    a3:b3:93:aa:56:60:b4:4f:36:c7:b7:48:3b:a5:36:
                    78:5f:61:52:2d:f6:5b:db:60:c3:73:0b:8d:b9:92:
                    20:0e:af:93:19:ad:64:74:ff:af:10:2e:2a:86:4f:
                    2c:69:1d:09:6a:27:15:70:7a:36:33:05:e2:10:0b:
                    72:d7:e5:69:82:b8:90:e3:13:1b:8d:91:70:be:cc:
                    d7:fc:d0:fd:d9:a9:b9:63:14:9f:e2:43:ae:79:ec:
                    a6:2b:b6:51:c6:e2:1e:80:4e:3f:13:37:d8:de:ff:
                    63:ba:75:ed:0d:29:34:a4:6b:37:a6:30:c6:be:07:
                    86:a9:b2:c4:bf:15:63:70:46:18:33:a3:52:d8:62:
                    af:09:f9:76:29:92:ad:c3:79:ed:82:ac:59:47:ed:
                    cb:18:e1:07:77:b2:4b:d2:34:41:91:6b:9e:38:eb:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:03:C2:7A:11:1B:5B:D5:8D:21:0E:AD:11:43:09:6A:4D:20:57:18
            X509v3 Authority Key Identifier:
                keyid:D4:6E:50:A0:3A:79:91:83:E5:E5:43:88:54:B4:AF:45:77:79:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/1G5QoDp5kYPl5UOIVLSvRXd5C-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1G5QoDp5kYPl5UOIVLSvRXd5C-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/B8367FBCE16911ECB2629D1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.250.0/24
                IPv6:
                  2400:d840:1::-2400:d840:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:ea:b1:10:71:ad:c7:76:12:a8:09:63:9d:d8:5e:15:cf:
         7b:f9:3f:d2:18:1f:f9:02:8b:f7:3b:78:c0:db:4f:8e:08:43:
         b5:a9:1e:71:e1:ad:6d:53:6a:d6:5f:3e:96:85:16:dd:cc:f4:
         69:37:06:01:d4:23:9c:97:43:41:d3:c9:c0:4b:bf:5b:26:6a:
         6b:48:81:e2:69:3d:9b:0e:1e:2c:31:49:6d:31:7f:13:c6:72:
         84:ed:61:28:2c:2a:51:d6:b7:93:dd:9a:b4:9c:2c:43:df:69:
         bb:6b:35:74:ea:5a:bd:0c:91:db:6b:ed:f5:de:39:4c:4b:74:
         64:b8:0d:e2:cd:ac:6f:2d:54:7c:2e:72:46:ea:71:21:79:b4:
         01:97:92:d0:9b:f9:3e:29:fd:cd:7f:dc:6b:3e:e8:b0:bd:cb:
         fb:27:44:a4:7d:ad:05:9e:c7:e0:dd:ff:8d:01:80:3b:ac:3e:
         cc:d4:5a:3e:b9:89:79:c7:09:df:10:c0:5f:1e:4e:d1:38:07:
         5a:19:2c:7e:1a:b4:4e:de:72:07:f4:67:cc:42:b7:e4:62:7c:
         b4:25:f0:1b:20:f7:89:02:c0:b6:a9:6e:20:e6:f1:8a:1f:8f:
         50:75:21:51:fe:39:de:b2:ca:4d:7c:d0:58:71:36:8f:c0:08:
         e9:8b:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----