Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/C7A060E4672911EDAB094B29C4F9AE02.roa
File:                     C7A060E4672911EDAB094B29C4F9AE02.roa (raw, json)
Hash identifier:          qiiKt2mlQFM+/mwG/HAX2bopUNbpsN/CGmelTuQWvxU=
Subject key identifier:   71:97:12:60:6A:16:58:59:1D:11:35:1E:E2:6F:3F:FD:27:C0:75:B0
Certificate issuer:       /CN=A9161B5D/serialNumber=2C7BAD62FAB10966FCF428DD36B7BA8F52AAA5CF
Certificate serial:       18
Authority key identifier: 2C:7B:AD:62:FA:B1:09:66:FC:F4:28:DD:36:B7:BA:8F:52:AA:A5:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHutYvqxCWb89CjdNre6j1Kqpc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/C7A060E4672911EDAB094B29C4F9AE02.roa
Signing time:             Tue 20 Dec 2022 07:04:45 +0000
ROA not before:           Tue 20 Dec 2022 07:04:45 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     150398
IP address blocks:        103.30.26.0/23 maxlen: 23
                          103.30.26.0/24 maxlen: 24
                          103.30.27.0/24 maxlen: 24
                          2400:bda0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B5D/serialNumber=2C7BAD62FAB10966FCF428DD36B7BA8F52AAA5CF
        Validity
            Not Before: Dec 20 07:04:45 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63a15e8d-e2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:21:0f:8a:30:9c:72:6e:0b:7c:42:79:81:
                    b2:cd:8f:fd:a2:9b:73:dc:cd:0d:cc:8c:bb:f4:78:
                    30:89:62:b7:5f:2a:6b:0a:61:80:98:83:3f:51:16:
                    6f:a7:bf:f0:09:0b:2b:6a:6f:9a:23:1f:f6:d4:d2:
                    b2:b1:e4:b7:2d:04:ae:8d:62:98:94:35:f6:2f:f3:
                    85:a3:db:83:20:cc:58:f1:fd:5b:cd:6c:e8:db:a3:
                    c0:bd:12:bf:48:79:06:6b:2d:28:05:00:c0:86:e4:
                    52:cc:c2:8d:de:a5:30:57:6f:7f:49:2a:46:31:a1:
                    94:84:8b:29:5b:72:dc:81:19:15:ae:b0:0f:5f:8e:
                    9d:9b:dd:63:68:da:bc:07:12:c9:1b:08:9c:8f:47:
                    55:95:28:d7:8d:f3:5a:9c:4e:2d:29:01:5c:a4:63:
                    96:1b:9d:ec:bd:b0:89:ad:fd:cb:05:fb:84:54:89:
                    94:b5:73:2a:c5:db:88:8c:a5:c2:35:0a:4e:65:69:
                    7b:b4:1e:7c:47:2e:3a:76:b4:c8:81:ed:7b:37:a9:
                    ed:7e:e2:5a:fe:56:73:09:f9:30:71:c9:0a:a9:5f:
                    37:ea:2d:55:b6:15:a2:32:4b:e9:69:02:d7:84:bf:
                    0e:dc:3d:f4:51:65:48:b6:b9:d8:4a:12:48:02:5e:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:97:12:60:6A:16:58:59:1D:11:35:1E:E2:6F:3F:FD:27:C0:75:B0
            X509v3 Authority Key Identifier:
                keyid:2C:7B:AD:62:FA:B1:09:66:FC:F4:28:DD:36:B7:BA:8F:52:AA:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHutYvqxCWb89CjdNre6j1Kqpc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/C7A060E4672911EDAB094B29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.26.0/23
                IPv6:
                  2400:bda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         f0:ea:24:ae:08:cd:bd:2c:31:d5:3c:a7:7f:10:83:c1:02:c1:
         e1:6e:e5:e2:8a:95:da:3a:d6:b6:4d:a7:80:04:4b:0c:48:ab:
         f3:a7:e9:66:ff:e0:46:c2:14:b7:2d:cb:b8:3c:23:18:68:ef:
         58:db:a4:0d:3e:cc:d1:90:d3:0d:e9:4d:b1:c2:1c:c1:40:02:
         d5:53:dc:4e:df:dd:b5:d0:9e:95:e6:48:db:2a:f0:46:f5:91:
         d1:02:e9:8c:10:ee:3f:1c:12:5f:17:e3:dc:3c:f7:2e:4e:9e:
         fe:dd:cf:19:17:07:d7:1f:ba:c5:ff:a0:03:e8:7d:d8:f5:75:
         6a:e9:c8:d0:8a:4a:c9:eb:1f:ef:d1:a3:da:fe:ac:41:e8:92:
         a6:b7:6f:20:48:62:68:bb:5e:00:be:26:c9:53:49:f3:8e:c2:
         30:97:e1:7b:b8:d7:83:d0:27:76:64:c5:87:9d:2e:01:9a:3b:
         d6:b3:1f:ff:e2:e8:7e:ff:22:f3:c1:81:2d:1a:8a:26:b9:a7:
         ac:25:6e:bf:56:59:0d:76:8b:0d:1a:d3:43:2f:6c:ec:99:2f:
         69:0d:a1:40:07:5a:2f:9d:3f:94:ca:32:62:95:bc:e9:a6:e0:
         72:68:ce:bb:88:a7:20:48:30:c6:26:d0:2c:4e:d3:5c:87:0b:
         1b:bd:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----