Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/501915BA8A7811EF90D24F15C4F9AE02.roa
File:                     501915BA8A7811EF90D24F15C4F9AE02.roa (raw, json)
Hash identifier:          OA2ko99bBHxJOXM8VQ03Oiibc5MqjzJixcg4DbTwTWk=
Subject key identifier:   DA:7E:FE:B3:33:89:F6:10:D6:AA:59:09:C7:53:DC:D9:3B:36:1B:00
Certificate issuer:       /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial:       0691
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/501915BA8A7811EF90D24F15C4F9AE02.roa
Signing time:             Mon 14 Oct 2024 22:05:47 +0000
ROA not before:           Mon 14 Oct 2024 22:05:47 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     150092
IP address blocks:        2400:8180:41::/48 maxlen: 48
                          2400:8180:42::/48 maxlen: 48
                          2400:8180:43::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
        Validity
            Not Before: Oct 14 22:05:47 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=670d95bb-02a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:bf:f0:8e:88:85:10:a6:bc:3f:70:c1:bf:
                    e5:3b:3c:ff:36:dd:af:1f:7a:f9:b5:21:10:9e:ef:
                    de:e0:0a:c0:05:19:db:11:5d:80:9f:9f:cb:c5:e7:
                    f4:76:67:ac:3c:98:8c:bd:18:f5:d5:cb:42:1f:67:
                    2f:31:56:04:02:68:c8:d7:b1:80:1e:1b:35:35:bf:
                    29:30:70:85:3e:df:5e:d8:14:34:f7:15:66:22:52:
                    3d:1c:7c:5c:db:31:55:18:7e:49:44:8c:3f:b2:3f:
                    13:57:1e:5c:36:aa:58:e5:dc:7b:05:36:c0:b1:00:
                    c1:ff:21:b2:e4:46:d5:73:67:35:bb:15:89:17:75:
                    ef:87:a8:17:d2:cb:6e:f8:9c:30:5d:79:a9:33:83:
                    48:ca:78:74:48:b8:a8:00:50:aa:63:83:ff:fb:d0:
                    c5:d2:9e:1e:65:8b:fd:92:ff:47:19:ac:98:e8:d5:
                    e2:3f:6e:5b:8b:66:11:c0:0b:f6:00:c3:0d:69:91:
                    60:2b:e5:72:67:25:f2:5c:ab:6d:39:ed:5f:d9:bf:
                    62:ed:31:88:ed:16:a5:50:ee:94:81:23:a7:86:1b:
                    b3:b9:3d:24:e5:e9:68:f0:d9:b8:73:5a:52:48:1b:
                    99:02:9f:94:fb:fe:e7:77:ea:f4:2f:08:8b:ce:46:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:FE:B3:33:89:F6:10:D6:AA:59:09:C7:53:DC:D9:3B:36:1B:00
            X509v3 Authority Key Identifier:
                keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/501915BA8A7811EF90D24F15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8180:41::-2400:8180:43:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         47:94:b6:a5:6c:84:eb:0b:cf:12:37:11:03:dd:5a:1f:ea:54:
         6a:8e:14:14:35:b8:b3:ed:95:ff:ea:07:1b:58:32:66:6c:48:
         a2:48:97:38:0b:cb:59:e4:db:62:8b:bb:93:d0:ab:40:03:54:
         0a:ea:c8:90:22:75:a7:f4:76:d7:7a:01:f7:ec:8d:d8:63:a2:
         5e:b9:9a:8c:ef:1c:f1:ba:3c:e9:fb:71:bc:8c:a6:97:b3:f9:
         24:ad:5d:36:d5:6c:5a:81:09:e9:99:91:c9:f2:d1:aa:11:54:
         e5:2c:9e:92:99:90:73:c5:78:0e:a3:5c:9f:8e:a5:c8:34:ae:
         08:6c:bd:9f:20:9c:8e:49:38:4f:d6:46:bc:e4:0c:59:59:89:
         6f:ea:28:b1:5e:23:62:d2:7b:6f:4a:a7:72:82:50:ee:60:95:
         d8:f7:72:72:15:4f:96:9c:dc:ed:29:85:68:1a:bc:bb:53:d2:
         0a:4e:6f:fe:ca:1d:3d:22:df:dc:66:d3:92:d2:c8:9c:b7:ee:
         84:f4:59:d6:77:35:f5:8c:d5:50:67:14:94:ee:a1:40:73:82:
         b3:3c:32:4a:34:46:5b:df:98:04:3d:da:ae:0e:2d:ca:74:2a:
         d0:96:1f:98:19:4b:23:2b:da:01:32:1f:5c:bd:d9:ec:3d:a7:
         14:ca:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----