Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e20323039323432.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          JVvYqjHIt+V8L2hha6FVIpMK1l0hDLDN5F9bA4UyRJg=
Subject key identifier:   79:79:9B:91:47:A7:0B:34:0F:68:A3:E9:28:3F:5D:A5:ED:7B:B4:BF
Certificate issuer:       /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial:       328522DAD07ADA61156F67E0C81C0EFFD66A7DE0
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e20323039323432.roa
Signing time:             Sun 01 Jan 2023 03:43:40 +0000
ROA not before:           Sun 01 Jan 2023 03:38:40 +0000
ROA not after:            Sun 31 Dec 2023 03:43:40 +0000
asID:                     209242
IP address blocks:        199.182.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:85:22:da:d0:7a:da:61:15:6f:67:e0:c8:1c:0e:ff:d6:6a:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
        Validity
            Not Before: Jan  1 03:38:40 2023 GMT
            Not After : Dec 31 03:43:40 2023 GMT
        Subject: CN=79799B9147A70B340F68A3E9283F5DA5ED7BB4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cf:1d:82:cc:8a:d4:c4:78:bc:a3:3a:20:21:
                    06:38:9e:d1:5c:4e:2b:33:7e:8b:dd:27:3e:ec:f6:
                    95:7c:ab:20:02:38:86:f9:b0:85:b0:a2:9e:80:82:
                    f5:56:dd:5f:82:85:fa:5c:c2:80:1e:48:a2:40:9c:
                    e1:4a:cf:a7:ab:35:45:6e:b1:6c:60:28:b7:50:9b:
                    af:84:c3:fc:21:52:0a:7c:65:71:dc:24:65:b9:99:
                    c0:16:78:c4:82:ab:14:86:f4:d7:fa:05:8e:89:09:
                    79:2b:9c:77:9f:75:9e:d8:ea:d3:04:0f:09:ff:a1:
                    8e:db:ab:25:4f:54:9c:ef:5e:56:b5:95:fd:29:6a:
                    ee:bf:a9:35:19:18:79:19:5d:04:17:90:3a:53:89:
                    cf:d1:17:9b:a1:32:be:6b:c5:68:f0:06:b8:72:c6:
                    60:96:fc:c7:d9:a8:19:40:9b:88:51:a6:fd:50:5b:
                    ed:62:cc:5f:26:0e:7e:08:bc:5b:d9:45:ba:09:2b:
                    c1:eb:05:c1:88:89:98:2f:19:09:61:99:c3:bd:aa:
                    15:9b:5a:ee:85:7d:37:cd:e7:24:ec:a1:67:87:50:
                    35:74:ff:6a:93:62:b4:ca:80:f2:c7:fc:4c:34:99:
                    9e:04:f1:e8:98:9d:98:d5:e0:5d:74:18:d0:c8:d8:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:9B:91:47:A7:0B:34:0F:68:A3:E9:28:3F:5D:A5:ED:7B:B4:BF
            X509v3 Authority Key Identifier:
                keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:3c:1c:67:6c:e9:34:9d:d0:84:0d:b8:76:05:e9:48:68:d1:
         82:3a:59:e6:7d:41:89:74:4d:26:df:88:ec:e6:f8:97:04:ab:
         30:7a:78:00:d0:63:8d:6f:3d:ce:f6:5e:ea:02:41:fa:5c:73:
         ce:0a:c9:03:31:9c:22:3d:52:b9:8c:1a:9b:db:e1:36:6f:40:
         5a:05:57:5b:cb:a0:1e:91:e3:ce:c5:79:0b:26:df:9f:db:98:
         50:d2:3e:4c:5f:8d:e5:55:cd:62:4f:a7:cd:e8:40:fd:9c:54:
         52:56:fc:09:fe:39:47:3d:e9:b4:e9:a9:ed:bb:9c:81:35:a1:
         ea:c1:80:a2:8f:c8:6e:0d:45:6e:eb:53:77:c8:a7:9d:0e:4f:
         6d:ed:1f:bc:4e:cb:7a:b6:59:f2:dc:56:2d:63:71:0f:a8:5a:
         49:5b:86:1f:57:93:df:3b:df:e8:e0:67:3e:3f:42:8e:c1:65:
         36:18:6e:07:aa:8e:20:75:83:fc:3b:ca:d9:78:e8:1b:ce:bd:
         f0:51:3f:2a:7b:e8:e3:d1:11:e3:ce:1a:84:57:4f:ae:fd:b0:
         bf:94:5b:81:1b:c0:ca:b3:35:94:dc:ad:a6:2d:59:00:1f:d1:
         77:9e:92:8d:e0:3b:66:ae:eb:f2:ab:4f:ab:41:d3:03:c0:66:
         60:69:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----