Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/2F6674345C7D11EBACD3DE55C4F9AE02.roa
File:                     2F6674345C7D11EBACD3DE55C4F9AE02.roa (raw, json)
Hash identifier:          5JAu/NU1TKQ6wdEtgSuxyJflAHKPW4XCdHQs1LN/Xig=
Subject key identifier:   D4:5C:02:BC:F2:31:57:F8:45:DB:3C:B0:45:79:A5:0C:B5:58:22:A5
Certificate issuer:       /CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
Certificate serial:       0961
Authority key identifier: CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/2F6674345C7D11EBACD3DE55C4F9AE02.roa
Signing time:             Thu 25 Feb 2021 06:44:50 +0000
ROA not before:           Thu 25 Feb 2021 06:44:50 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     17798
IP address blocks:        2404:49c0:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ED63/serialNumber=CFD083901B13A2AB76B44EB41F3C73152855D726
        Validity
            Not Before: Feb 25 06:44:50 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=60374762-82ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:a0:ed:af:ef:78:93:f4:ad:05:44:9c:46:
                    9e:a0:0d:43:95:3f:f9:36:16:6c:c3:5a:5f:06:42:
                    ce:20:48:b4:84:8c:2d:2c:10:6c:bb:e8:ac:70:42:
                    56:22:8c:7a:ef:ea:08:f0:4b:c9:39:fa:00:bc:f0:
                    80:01:4a:a5:3c:72:83:1d:af:b2:68:37:69:e1:3c:
                    54:f2:36:1c:f5:27:f4:a6:5c:d4:fd:26:64:26:00:
                    af:0e:a9:37:61:35:eb:78:8c:42:2d:bf:82:08:ec:
                    04:a2:91:08:64:e0:56:a6:22:bf:d3:84:27:34:8d:
                    89:72:e6:2c:40:24:65:a2:b0:e8:0a:b8:a3:cf:5f:
                    22:42:c9:f0:7e:54:21:e1:f7:40:6b:18:c8:34:e3:
                    df:fa:a6:04:b5:ac:71:d8:72:cd:a1:24:57:b6:54:
                    6f:ee:b1:74:fc:4d:ac:1a:00:8f:fc:bf:d7:b9:c6:
                    8c:1b:2a:10:78:88:09:7f:9b:b4:cf:b2:8b:0d:63:
                    52:22:a5:1b:80:40:b7:21:55:c9:8b:fa:cc:bd:e7:
                    0e:a4:25:80:28:fa:0c:a3:83:a4:96:55:cd:0a:12:
                    a5:d1:24:1f:a0:42:08:74:a0:63:aa:36:0f:e9:6a:
                    60:f0:73:e3:6e:9d:b3:09:ec:6d:44:29:3b:5f:9a:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5C:02:BC:F2:31:57:F8:45:DB:3C:B0:45:79:A5:0C:B5:58:22:A5
            X509v3 Authority Key Identifier:
                keyid:CF:D0:83:90:1B:13:A2:AB:76:B4:4E:B4:1F:3C:73:15:28:55:D7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/z9CDkBsToqt2tE60HzxzFShV1yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9CDkBsToqt2tE60HzxzFShV1yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ED63/CD85ACF656D611E9A91BFC27C4F9AE02/2F6674345C7D11EBACD3DE55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:49c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:36:ab:36:da:a4:31:f2:d9:ae:b0:72:d3:88:a6:0e:c6:3e:
         3e:fd:12:68:94:a5:e8:5e:3d:5a:a3:97:fc:87:a0:c9:2d:35:
         8e:39:0e:b4:1b:1f:03:49:ce:a1:76:1f:36:b9:ab:ab:2d:cb:
         06:75:71:e7:5d:df:e3:8d:cb:f6:76:c1:62:ef:32:95:5b:ce:
         4b:c7:00:98:86:86:4d:cb:3c:02:35:79:95:57:2e:40:98:48:
         50:ce:3f:32:1c:8a:e1:54:8d:7e:cf:cb:3d:c3:22:c3:9c:d1:
         72:97:08:da:e9:8d:04:5c:24:07:e3:fe:c6:d7:d2:ad:84:9d:
         88:0c:f6:89:f4:3e:bb:ac:36:5c:2b:c6:60:9e:a1:33:10:43:
         c0:01:3a:2c:71:93:0f:b0:bd:78:22:bf:76:62:67:8e:26:3b:
         dd:11:f3:77:c6:08:ef:7e:00:36:6e:f5:ca:36:b1:3c:8c:c8:
         eb:ff:34:7b:51:91:aa:df:a8:3f:12:b2:2d:5e:c9:0a:9c:e8:
         82:d8:ac:75:b2:18:f7:1a:e8:93:78:20:df:e1:fb:35:56:31:
         4d:1b:35:4e:c7:95:19:8c:93:51:6e:8c:73:b1:9d:da:0b:a7:
         88:2a:cc:8d:3d:af:5d:51:12:c0:a0:2e:65:a4:6c:1b:7c:76:
         b4:25:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----