Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/7013F054A93711EBBF9AFE5DC4F9AE02.roa
File:                     7013F054A93711EBBF9AFE5DC4F9AE02.roa (raw, json)
Hash identifier:          n/Wme0jf3kwmw5yV4LCJlmfxx92i+pdRL+cSc1fodSY=
Subject key identifier:   CA:0D:2B:D2:52:CD:D7:C1:5E:C5:24:33:F7:62:DB:56:E8:9F:CB:EE
Certificate issuer:       /CN=A91F4466/serialNumber=C36DD2275F39C0761DFEA4AC619D330B65F403FE
Certificate serial:       042B
Authority key identifier: C3:6D:D2:27:5F:39:C0:76:1D:FE:A4:AC:61:9D:33:0B:65:F4:03:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w23SJ185wHYd_qSsYZ0zC2X0A_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/7013F054A93711EBBF9AFE5DC4F9AE02.roa
Signing time:             Thu 03 Nov 2022 01:51:49 +0000
ROA not before:           Thu 03 Nov 2022 01:51:49 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     23734
IP address blocks:        103.102.44.0/24 maxlen: 24
                          103.102.45.0/24 maxlen: 24
                          103.102.47.0/24 maxlen: 24
                          2401:df40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4466/serialNumber=C36DD2275F39C0761DFEA4AC619D330B65F403FE
        Validity
            Not Before: Nov  3 01:51:49 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63631eb5-dfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:47:c8:77:76:35:03:59:ec:8e:92:26:eb:
                    3d:0b:53:63:a0:52:00:0b:20:a2:bb:12:f4:1d:d8:
                    16:d3:92:fa:84:3f:2b:60:98:a0:24:9c:75:b8:47:
                    ba:e8:97:fa:63:31:f9:1c:b4:fa:db:b6:56:e5:18:
                    0d:1a:1d:86:e2:98:34:12:b8:51:30:3c:a6:37:21:
                    4a:b9:7e:dd:78:03:93:49:7f:59:38:17:68:f4:c0:
                    39:41:99:53:b5:05:6a:60:53:40:fc:7a:bc:17:41:
                    c0:c6:68:ad:91:cf:6e:ad:a9:34:33:89:bf:7e:0b:
                    e6:7e:6c:06:a7:ae:c3:8e:71:3e:6b:60:6c:f5:dd:
                    b0:7a:8a:25:a9:0d:6b:c4:8d:76:b7:be:97:f7:b4:
                    a8:e6:1a:84:4a:eb:88:d3:00:b6:01:41:01:af:80:
                    ef:ae:5a:bd:d0:ed:12:36:a3:41:8e:3c:77:2b:44:
                    c3:7f:19:5f:0b:4a:ed:44:79:92:f4:22:72:f7:9a:
                    69:0d:33:71:7b:60:a1:bc:0c:78:1c:6a:e9:80:58:
                    44:37:51:53:9f:19:cc:da:1a:b3:f7:1c:83:90:48:
                    ba:d2:e6:11:ef:05:72:79:a4:67:44:90:55:45:98:
                    cf:fa:d5:af:bd:83:d6:6a:52:0b:10:75:0f:0d:10:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0D:2B:D2:52:CD:D7:C1:5E:C5:24:33:F7:62:DB:56:E8:9F:CB:EE
            X509v3 Authority Key Identifier:
                keyid:C3:6D:D2:27:5F:39:C0:76:1D:FE:A4:AC:61:9D:33:0B:65:F4:03:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/w23SJ185wHYd_qSsYZ0zC2X0A_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w23SJ185wHYd_qSsYZ0zC2X0A_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/7013F054A93711EBBF9AFE5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.44.0/23
                  103.102.47.0/24
                IPv6:
                  2401:df40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:8b:87:e9:8a:05:64:04:5d:f9:28:12:4e:28:d1:25:6d:
         8f:93:14:bd:e8:5d:02:da:f5:96:7f:e4:51:1b:36:69:e8:92:
         4c:ee:28:f9:50:40:c1:65:d8:be:9e:46:db:42:81:96:17:ad:
         73:f0:36:d4:35:48:36:b2:5a:9f:40:21:72:64:60:23:65:b9:
         36:cb:22:8a:5d:70:55:1e:3b:cd:98:76:5b:71:66:fe:7b:06:
         3c:38:c1:32:a0:a6:3f:e4:a8:c8:20:77:05:1d:c7:d2:a5:25:
         4b:6f:12:58:05:76:44:91:2b:0f:b9:06:34:38:6f:68:24:3f:
         e8:5a:9d:de:1d:fa:50:10:bf:90:34:51:db:39:9e:29:03:bd:
         a5:97:ee:c4:50:27:c1:2b:f4:18:9e:64:9e:55:28:88:38:34:
         4e:2e:38:6b:25:ac:f6:13:2e:39:f2:89:f2:8b:96:0d:85:45:
         2c:28:fa:7a:9a:94:8a:5a:ca:3e:0b:e1:e2:06:d2:3a:27:bf:
         35:15:8b:98:b1:88:68:e7:ac:dd:4a:01:95:ca:b3:93:c7:15:
         7e:0a:8f:ca:cf:59:cf:ee:c5:fa:93:b2:d3:78:a2:50:aa:3e:
         e7:06:36:e5:ff:ad:2b:44:3f:78:4b:19:b0:69:1a:f0:d8:1e:
         39:d9:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----