Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/E8418BA2853B11EA9E7C3A84C4F9AE02.roa
File:                     E8418BA2853B11EA9E7C3A84C4F9AE02.roa (raw, json)
Hash identifier:          jy4kr4NXYnd4IK7ntU7hvm31Rr8d5VC+/UGklkEyfZ8=
Subject key identifier:   94:4A:6B:7C:E2:7E:D4:47:BF:2C:03:29:58:C0:AC:7D:4E:BC:81:72
Certificate issuer:       /CN=A91D9208/serialNumber=C4435E7785381F6C5F13C4006431FCD05B424C55
Certificate serial:       0639
Authority key identifier: C4:43:5E:77:85:38:1F:6C:5F:13:C4:00:64:31:FC:D0:5B:42:4C:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xENed4U4H2xfE8QAZDH80FtCTFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/E8418BA2853B11EA9E7C3A84C4F9AE02.roa
Signing time:             Tue 22 Mar 2022 22:08:28 +0000
ROA not before:           Tue 22 Mar 2022 22:08:28 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     681
IP address blocks:        130.217.0.0/16 maxlen: 17
                          192.107.171.0/24 maxlen: 24
                          192.107.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9208/serialNumber=C4435E7785381F6C5F13C4006431FCD05B424C55
        Validity
            Not Before: Mar 22 22:08:28 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=623a48dc-f3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:d8:27:fc:06:2e:46:33:ae:b4:2a:a1:0b:
                    cb:97:85:d2:cb:39:db:d1:68:52:90:81:90:11:91:
                    61:3e:a5:06:9a:5f:66:c6:bb:63:45:36:fb:56:37:
                    76:cf:ea:d2:04:a0:af:05:7c:d9:3d:51:36:64:a6:
                    58:86:48:d9:9c:01:86:f6:5c:da:95:38:51:90:81:
                    7e:0d:d2:dc:75:ad:d1:fb:03:55:bc:b7:6b:d5:04:
                    2d:63:b8:df:d1:49:74:60:72:a6:fd:4b:dd:e6:b3:
                    a2:1a:bf:b4:77:ae:ae:e7:a1:ac:52:fd:61:96:60:
                    4c:df:0c:29:c7:27:05:3f:9b:6f:0e:49:3b:0f:25:
                    2c:07:03:4b:cd:fc:cd:84:46:a9:69:67:aa:80:34:
                    f7:1d:91:a0:c6:fb:e1:11:33:ea:16:84:4d:2e:32:
                    0a:2c:fc:22:2f:11:c0:88:e6:78:83:6b:64:ca:84:
                    18:9c:8d:22:cf:fa:83:52:0c:cb:36:f2:c5:5a:3c:
                    0e:0f:a1:0c:86:77:1b:d1:7c:33:8f:32:26:62:43:
                    45:d7:15:7c:ad:aa:38:83:80:c6:0a:47:2a:82:32:
                    e6:56:9f:d1:bd:66:cb:be:3d:2c:59:d6:51:64:c6:
                    8f:b3:7f:67:26:ae:96:44:2e:dc:41:e2:1e:77:94:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4A:6B:7C:E2:7E:D4:47:BF:2C:03:29:58:C0:AC:7D:4E:BC:81:72
            X509v3 Authority Key Identifier:
                keyid:C4:43:5E:77:85:38:1F:6C:5F:13:C4:00:64:31:FC:D0:5B:42:4C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/xENed4U4H2xfE8QAZDH80FtCTFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xENed4U4H2xfE8QAZDH80FtCTFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9208/5F4F0334853A11EA88004E81C4F9AE02/E8418BA2853B11EA9E7C3A84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.217.0.0/16
                  192.107.171.0-192.107.172.255

    Signature Algorithm: sha256WithRSAEncryption
         96:84:c6:30:65:0b:14:22:26:4a:c8:9d:18:4c:37:8d:e7:f3:
         dd:0d:f6:fc:d3:17:98:1c:4f:0d:e5:3d:27:52:b7:ed:96:1b:
         67:2f:2e:da:a5:61:b8:0b:7d:68:f7:b2:0d:8f:06:0f:58:d3:
         f8:e6:66:e9:54:da:63:cc:ae:48:1b:e0:41:dc:3d:5f:ec:bf:
         1d:8f:64:a2:ea:a7:39:78:23:4e:3f:ec:5a:da:b5:a2:26:e9:
         61:e3:47:d6:80:0c:8a:c4:e2:84:77:7f:65:68:e6:df:97:75:
         2e:3e:d3:f1:3b:e9:b1:ac:ea:e5:2b:28:17:15:3c:51:04:48:
         03:75:d8:92:50:a7:f8:13:45:04:a8:b4:d6:35:c1:ab:ee:a4:
         d5:75:3f:97:d5:d5:fe:1d:48:6d:67:7b:48:63:7b:8c:7d:39:
         ba:eb:e5:56:a0:ff:ec:b1:d6:70:5b:52:01:c2:07:dc:e5:76:
         4b:58:60:fc:99:59:4c:41:bb:e5:ce:6c:fe:bd:98:78:b7:74:
         8d:f1:2b:1e:a6:82:8f:6c:0f:97:dd:32:29:e0:3f:c3:e9:44:
         2a:a1:37:d9:11:32:6f:63:de:7f:76:38:6b:8e:a0:54:f1:57:
         8f:56:11:b5:2c:62:d3:94:75:0d:8a:6b:3f:6f:e4:09:df:d8:
         96:50:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----