Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/FEDD68863FA811EBB05B181FC4F9AE02.roa
File:                     FEDD68863FA811EBB05B181FC4F9AE02.roa (raw, json)
Hash identifier:          8mYQvKLlQT6og9tSCq2K5/eSvHGqoaOcn63tH0poX4E=
Subject key identifier:   D1:E6:8B:A2:F8:F5:16:B9:BD:1F:09:99:50:19:C2:32:8B:DD:3E:44
Certificate issuer:       /CN=A917DA63/serialNumber=08ED06B7AC39A73374F82417F1AB0217338A82F2
Certificate serial:       092F
Authority key identifier: 08:ED:06:B7:AC:39:A7:33:74:F8:24:17:F1:AB:02:17:33:8A:82:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO0Gt6w5pzN0-CQX8asCFzOKgvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/FEDD68863FA811EBB05B181FC4F9AE02.roa
Signing time:             Thu 30 Jun 2022 21:11:00 +0000
ROA not before:           Thu 30 Jun 2022 21:11:00 +0000
ROA not after:            Sun 30 Oct 2022 00:00:00 +0000
asID:                     136582
IP address blocks:        103.93.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DA63/serialNumber=08ED06B7AC39A73374F82417F1AB0217338A82F2
        Validity
            Not Before: Jun 30 21:11:00 2022 GMT
            Not After : Oct 30 00:00:00 2022 GMT
        Subject: CN=62be1164-35dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:6e:44:09:11:70:dc:b8:a5:c5:b1:9e:79:
                    42:c3:76:0f:f1:c5:05:dd:a9:ef:31:3f:d7:99:d7:
                    ca:9b:21:01:30:02:21:1a:8c:ae:48:31:d0:6f:11:
                    01:d5:b7:77:f9:4d:c6:e7:59:fd:b6:a1:e5:51:31:
                    28:a0:5e:df:80:7a:fc:11:12:39:b9:61:85:3c:44:
                    87:1e:c9:17:20:e0:fb:d5:58:be:3b:6a:23:e3:93:
                    10:75:67:b1:9a:8b:94:c5:d5:ad:51:c6:b7:64:d9:
                    04:51:7a:d6:75:89:9a:64:16:76:45:5f:5f:91:81:
                    10:93:8f:f2:06:56:cc:28:6f:be:03:0d:39:a5:15:
                    b9:c4:1b:17:8f:c7:e1:b1:c8:34:3f:30:6e:b6:b4:
                    48:eb:d0:82:b4:0b:2f:59:af:32:21:38:8d:74:27:
                    45:70:d9:5f:ea:2b:49:8b:ae:c6:a4:c8:ad:ce:3f:
                    88:ed:4c:e8:76:8f:1c:ec:3f:a9:66:fc:fe:a7:e8:
                    0a:28:8a:c7:16:0a:aa:4b:64:75:3e:ab:98:9e:57:
                    7f:85:43:3e:7c:71:e1:44:dd:a9:de:4e:56:b2:e2:
                    fb:fe:7f:36:60:60:bb:bf:4e:5c:24:94:9e:89:fb:
                    d1:15:86:4c:ee:d8:16:18:8b:e2:65:04:16:7f:a3:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:8B:A2:F8:F5:16:B9:BD:1F:09:99:50:19:C2:32:8B:DD:3E:44
            X509v3 Authority Key Identifier:
                keyid:08:ED:06:B7:AC:39:A7:33:74:F8:24:17:F1:AB:02:17:33:8A:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/CO0Gt6w5pzN0-CQX8asCFzOKgvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO0Gt6w5pzN0-CQX8asCFzOKgvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA63/0F47B1DE199611EA859C914DC4F9AE02/FEDD68863FA811EBB05B181FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:e0:cc:2f:61:ee:86:52:e6:b9:7a:5d:74:5c:73:76:b6:
         b9:9f:a7:56:1c:15:33:02:66:a6:07:a5:97:dc:22:4d:ad:a2:
         13:38:31:97:06:98:0c:88:52:b7:cb:f7:95:77:a3:e5:da:73:
         86:26:49:c5:d0:5c:32:cf:03:09:ee:a5:8c:dc:8f:d4:31:38:
         8c:b1:53:44:90:20:f4:88:0f:61:11:6b:c3:7a:4c:fb:8e:0a:
         be:0b:64:84:38:89:53:fd:7b:19:ae:24:2b:20:41:49:0d:9b:
         59:e0:13:70:6b:e6:29:9c:6d:f0:04:a8:00:39:a6:56:f9:4d:
         dc:e2:58:37:36:4e:b0:86:7f:f5:47:92:4e:95:c8:01:18:2e:
         92:38:cc:70:f4:b8:ab:76:d1:ac:19:10:e7:77:c3:bd:d8:0b:
         a2:67:43:a4:23:ab:52:7a:bb:11:14:70:2c:d4:a2:99:7e:1a:
         44:11:53:77:91:ed:b0:e7:34:0f:1d:25:a0:f4:4a:c5:9e:ae:
         d8:0b:94:45:55:1d:a7:87:fc:3d:c9:59:f3:6e:be:11:80:84:
         f9:a0:0a:78:6f:32:89:0d:ac:38:52:f4:95:6a:89:e9:07:9b:
         0d:bd:82:9d:f4:1a:9c:df:de:b4:a2:24:55:2b:ac:f7:78:b5:
         f0:28:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----