Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697D0/7821E6DC456011E7B1D53131C4F9AE02/2059190A831F11EC981F3884C4F9AE02.roa
File:                     2059190A831F11EC981F3884C4F9AE02.roa (raw, json)
Hash identifier:          IMi+WIs1pTP3tlIjioUOpHJCroR+dmKLDXUL7yLKXi4=
Subject key identifier:   7A:FF:90:CA:EE:5E:DA:F6:64:01:8E:7D:8E:8A:32:5D:41:B1:74:95
Certificate issuer:       /CN=A91697D0/serialNumber=85184D9097B14BD5AC8D683545F105B3537743E3
Certificate serial:       169C
Authority key identifier: 85:18:4D:90:97:B1:4B:D5:AC:8D:68:35:45:F1:05:B3:53:77:43:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRhNkJexS9WsjWg1RfEFs1N3Q-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697D0/7821E6DC456011E7B1D53131C4F9AE02/2059190A831F11EC981F3884C4F9AE02.roa
Signing time:             Wed 02 Feb 2022 17:23:33 +0000
ROA not before:           Wed 02 Feb 2022 17:23:33 +0000
ROA not after:            Thu 02 Jun 2022 00:00:00 +0000
asID:                     58691
IP address blocks:        2403:f780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5788 (0x169c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697D0/serialNumber=85184D9097B14BD5AC8D683545F105B3537743E3
        Validity
            Not Before: Feb  2 17:23:33 2022 GMT
            Not After : Jun  2 00:00:00 2022 GMT
        Subject: CN=61fabe15-f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:fc:6e:f5:72:8b:d6:8c:9b:7c:5e:8e:fd:
                    21:3f:9a:b1:0c:20:7e:c0:6e:57:c2:c8:c4:3b:16:
                    11:d5:91:08:5e:4a:36:ca:66:85:f2:9e:bb:50:11:
                    0c:ff:c1:71:28:53:76:22:bf:f5:2d:9e:be:91:91:
                    db:55:d8:43:15:4c:7b:03:fc:80:c1:cc:f9:cd:da:
                    21:54:50:c0:07:18:44:64:35:85:aa:90:71:65:8d:
                    06:db:26:e7:af:4b:45:8c:22:8c:e5:88:6a:76:5c:
                    0e:92:db:af:8c:ce:71:34:ba:fe:9d:1d:05:ca:9a:
                    b9:da:93:0b:91:12:11:d8:91:ae:57:1c:1f:3f:1f:
                    51:3b:9f:75:da:4a:c7:87:8d:65:f7:3c:7a:c6:11:
                    66:4d:cd:b2:07:0a:ec:0a:4c:ea:79:a7:18:6b:32:
                    22:71:0b:6d:4b:37:90:c2:69:26:7f:c3:9c:8d:f4:
                    fa:a3:df:ee:d5:b9:07:ca:d9:da:7c:be:19:df:1b:
                    66:cd:bf:b2:b5:3a:9d:ac:10:fb:2b:15:5d:b7:b3:
                    28:b2:9a:ad:b4:30:75:7d:d0:b0:94:cf:e8:3f:11:
                    ef:96:f0:25:28:51:64:98:e5:e8:62:bd:a0:da:02:
                    53:6e:9a:ec:67:d4:36:68:c8:86:3f:f2:ee:33:0d:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FF:90:CA:EE:5E:DA:F6:64:01:8E:7D:8E:8A:32:5D:41:B1:74:95
            X509v3 Authority Key Identifier:
                keyid:85:18:4D:90:97:B1:4B:D5:AC:8D:68:35:45:F1:05:B3:53:77:43:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697D0/7821E6DC456011E7B1D53131C4F9AE02/hRhNkJexS9WsjWg1RfEFs1N3Q-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRhNkJexS9WsjWg1RfEFs1N3Q-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697D0/7821E6DC456011E7B1D53131C4F9AE02/2059190A831F11EC981F3884C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:53:b3:bc:e3:e8:90:2e:7b:2b:af:7b:05:4d:e6:d6:e3:
         b0:9f:dd:13:0a:6c:40:ca:f7:c0:00:d5:ef:5f:0a:ec:29:b2:
         2b:e3:70:42:62:30:64:6a:b7:71:bb:c1:d5:d3:37:f9:f8:1b:
         07:7b:7e:55:31:8a:59:20:7f:9c:4e:87:f7:f5:69:a1:62:23:
         98:ff:12:6e:39:60:fc:f9:03:1d:a2:ff:89:3e:03:35:34:5c:
         b0:13:a1:56:d9:97:00:94:a9:db:3d:72:fb:15:0b:13:b0:9f:
         c8:2b:ba:11:eb:c0:f5:a7:66:ae:55:85:3e:0b:49:e3:31:ac:
         14:e3:f6:b3:64:55:13:a8:62:6b:50:1c:f5:62:24:48:0f:5a:
         55:9e:1f:e5:ec:01:3e:56:33:6f:37:44:3b:3e:f7:88:68:c7:
         72:27:e5:e8:ae:53:36:97:eb:ec:29:ce:7c:09:09:66:27:61:
         7c:eb:6e:e3:3a:94:05:e5:a6:d0:4e:b3:78:43:b2:f2:97:81:
         70:4e:14:f4:7d:7c:47:8e:72:76:e1:1a:02:db:0c:bd:0e:d4:
         e8:94:93:93:f4:f3:43:7b:fc:ef:dc:df:15:73:bc:8b:aa:bb:
         7c:19:52:ed:64:ab:0e:bf:c5:dd:6c:ed:94:9e:a7:54:8b:a8:
         57:ad:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----