Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/74611956219211EC99713582C4F9AE02.roa
File:                     74611956219211EC99713582C4F9AE02.roa (raw, json)
Hash identifier:          YUuXAz9Zc1G6LV2j9Cd4mWG05OH47LCMApd0DwaWIRM=
Subject key identifier:   92:57:E5:03:A0:5F:31:74:A3:36:5C:4B:58:68:0E:06:16:A8:EE:0F
Certificate issuer:       /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial:       22AD
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/74611956219211EC99713582C4F9AE02.roa
Signing time:             Thu 30 Sep 2021 02:02:24 +0000
ROA not before:           Thu 30 Sep 2021 02:02:24 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     147027
IP address blocks:        110.164.234.0/24 maxlen: 24
                          110.164.235.0/24 maxlen: 24
                          2403:6200:7928::/48 maxlen: 48
                          2403:6200:7929::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8877 (0x22ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
        Validity
            Not Before: Sep 30 02:02:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=61551ab0-8e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:4e:28:2e:3f:a8:14:ae:20:77:6f:4c:f5:
                    cc:0f:9e:c2:45:a6:1f:3b:a5:33:9f:6d:d4:28:ac:
                    14:88:a2:bc:63:31:f2:78:6c:7a:a7:f3:5c:c5:42:
                    eb:de:a9:9c:aa:f4:99:29:ff:85:fb:10:7c:4b:5e:
                    d0:2b:31:ab:3c:13:59:11:5d:aa:95:17:30:a9:b9:
                    95:e4:01:e9:4e:64:b9:eb:b5:34:1b:5b:b9:1f:8f:
                    93:ef:21:de:ee:b6:51:38:e4:3f:79:da:bc:8f:c5:
                    65:ae:8a:3e:fd:bf:9b:d0:9f:83:17:db:89:c0:d6:
                    19:6b:69:9f:56:b0:64:da:7d:14:db:ef:74:f5:bb:
                    83:77:26:b1:5c:46:42:1e:f0:a1:40:41:01:da:29:
                    1a:1b:d4:b1:75:c4:6d:db:03:19:89:da:f0:dd:8b:
                    b9:7d:42:45:76:f6:54:0e:9d:3c:10:29:3f:30:97:
                    b4:ef:4d:55:ed:a2:05:0e:34:d4:c8:3e:47:ee:a5:
                    32:77:55:42:dd:06:fa:a8:55:1e:95:88:30:3d:0a:
                    cf:7f:8f:63:f1:e0:4c:eb:3c:44:e2:60:f4:cf:68:
                    74:d0:68:95:1a:80:75:75:cc:a5:de:bb:b9:77:7e:
                    86:04:62:10:5f:ed:03:ab:d4:85:22:2c:98:20:a0:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:57:E5:03:A0:5F:31:74:A3:36:5C:4B:58:68:0E:06:16:A8:EE:0F
            X509v3 Authority Key Identifier:
                keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/74611956219211EC99713582C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.234.0/23
                IPv6:
                  2403:6200:7928::/47

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:65:80:99:6f:3b:d6:1f:a1:11:2a:68:64:79:c1:e4:04:
         7b:80:0b:f2:6d:3a:f0:57:fa:13:9d:0a:d1:88:9e:e5:cc:ab:
         d7:cf:c7:3a:b2:03:72:d4:8e:e6:5c:7e:bf:03:e3:bb:82:17:
         5b:a8:d7:8f:7d:b9:17:3e:85:31:6f:3c:87:f1:25:e6:07:bc:
         4e:8e:bc:81:61:6f:f7:87:49:24:ca:0b:99:b4:cc:49:3a:ed:
         83:0e:5b:88:2f:4c:c5:04:10:17:b0:99:a0:b2:ec:a5:7d:fa:
         9e:8e:28:7a:ab:c9:55:99:ba:4b:0b:c1:17:66:6b:5a:43:ae:
         0c:88:8e:f1:91:51:c6:a1:a6:7d:01:f8:b4:59:d6:ee:57:41:
         cc:68:d1:43:a4:3c:44:89:97:6f:88:5f:c1:32:01:1a:10:59:
         38:c3:01:55:88:75:51:7f:7f:6a:47:15:2c:81:85:81:3f:93:
         21:b0:db:0f:1d:5f:ef:04:1e:e7:b9:a8:6e:9a:15:06:62:7f:
         28:48:a4:9f:6b:6a:97:11:29:a6:68:d7:e1:df:69:21:94:82:
         c4:ae:1f:ca:55:a3:64:f8:9a:f0:4b:83:e6:b9:50:1f:90:7d:
         a3:db:9c:02:b7:3a:c7:08:19:5f:ed:2f:38:90:91:56:a0:4b:
         29:9d:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----