Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/BBBC88D6EE3211ECBF16BF22C4F9AE02.roa
File:                     BBBC88D6EE3211ECBF16BF22C4F9AE02.roa (raw, json)
Hash identifier:          gIDE07gn352b2yTEcUx0jc6gb3nEWR9SrAIHWXxYWS4=
Subject key identifier:   C2:BE:18:40:6A:0E:E3:83:DC:DC:E4:CE:DD:1F:E4:6A:82:CD:36:D9
Certificate issuer:       /CN=A91F66B3/serialNumber=C2E856ABE1385B5A26068FAB65DB189511642DB4
Certificate serial:       23
Authority key identifier: C2:E8:56:AB:E1:38:5B:5A:26:06:8F:AB:65:DB:18:95:11:64:2D:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuhWq-E4W1omBo-rZdsYlRFkLbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/BBBC88D6EE3211ECBF16BF22C4F9AE02.roa
Signing time:             Fri 17 Jun 2022 11:43:41 +0000
ROA not before:           Fri 17 Jun 2022 11:43:41 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     7575
IP address blocks:        139.230.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F66B3/serialNumber=C2E856ABE1385B5A26068FAB65DB189511642DB4
        Validity
            Not Before: Jun 17 11:43:41 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62ac68ed-5d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:0f:ef:51:86:2d:26:9c:bd:40:8e:e1:d3:
                    ac:e6:2f:41:ed:b8:2b:5a:22:95:83:b0:f7:c8:d4:
                    4e:78:b9:fd:fd:87:b5:b6:86:58:a9:dc:7e:ad:2b:
                    e3:e0:fe:52:20:52:f5:7a:63:1d:12:53:15:e3:12:
                    1b:09:33:cb:d4:fa:fb:e9:82:53:ff:e0:fe:8f:ee:
                    28:cf:a0:30:2f:3b:06:f7:f6:ff:fb:47:a8:08:99:
                    33:81:e4:25:dd:6e:c8:21:e6:e6:f1:7c:3c:e7:d7:
                    5d:12:93:ba:e1:2b:3d:0e:b5:25:d9:30:96:a9:a2:
                    24:75:e7:23:2c:4e:63:4b:ba:57:cd:18:4a:00:1c:
                    bc:86:6d:8c:36:9b:0b:4c:86:d3:1e:e8:aa:ce:b8:
                    6a:d6:31:1a:5c:4d:4d:33:5f:a3:d7:5f:b1:dd:fb:
                    87:a6:73:30:b0:b1:57:e4:aa:f8:ad:af:ee:13:52:
                    70:e0:17:9c:ef:31:8f:54:5c:c6:db:2f:b4:03:20:
                    18:c5:9b:eb:65:47:9d:27:65:0e:b0:ed:31:dd:5e:
                    33:d4:df:8d:66:1e:94:1c:d3:49:1c:58:6d:34:e5:
                    9c:2c:93:80:93:a9:36:e0:dd:ef:4b:31:68:f2:22:
                    59:ca:3f:24:cd:63:19:28:15:6b:c1:76:10:a8:a4:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BE:18:40:6A:0E:E3:83:DC:DC:E4:CE:DD:1F:E4:6A:82:CD:36:D9
            X509v3 Authority Key Identifier:
                keyid:C2:E8:56:AB:E1:38:5B:5A:26:06:8F:AB:65:DB:18:95:11:64:2D:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/wuhWq-E4W1omBo-rZdsYlRFkLbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wuhWq-E4W1omBo-rZdsYlRFkLbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F66B3/7CB15820E08F11EC86309B52C4F9AE02/BBBC88D6EE3211ECBF16BF22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:6d:48:cd:92:c2:7b:87:a7:e8:48:06:04:39:80:d1:ac:b1:
         ff:d8:2e:ef:de:09:f4:60:7f:ce:5f:66:99:65:7b:a0:d7:e3:
         1c:ec:93:d4:ce:af:e4:95:5b:25:48:14:81:cb:56:75:e0:dd:
         98:51:48:8b:47:93:34:fe:ed:e3:f4:21:9b:9b:55:d3:47:17:
         a6:33:fc:d5:15:9f:b7:b4:47:d3:bb:a7:d6:4b:99:d5:23:da:
         de:da:d0:f8:94:38:16:8f:9e:31:00:60:a8:3f:e3:51:7d:8c:
         b5:61:19:b3:a1:b6:62:2e:89:92:a3:38:70:9e:ea:67:0b:a8:
         d0:74:ed:a5:fa:4b:cb:40:d1:94:9d:fc:c7:45:0d:94:45:06:
         52:2f:d2:1d:a4:63:68:b7:29:32:2d:a9:9c:92:19:d6:99:b7:
         7a:76:8c:f9:14:d6:82:14:e2:43:0c:a7:de:ad:32:c2:6e:77:
         9a:fc:ef:f1:83:88:5a:0d:08:cd:a8:50:a9:ca:23:42:7c:fa:
         79:98:c2:fd:ba:56:9e:ec:d8:48:6f:99:b2:98:f9:94:77:7a:
         d2:26:8d:db:26:c3:ca:e3:6d:ee:f8:5e:7e:63:92:e5:e5:4b:
         c1:21:c9:c4:17:da:a2:79:ad:ae:0e:e0:6d:31:27:59:0f:f2:
         e7:42:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----