Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          /1OeWcUPLirxO10bi+ccmZXIKM10SHLY8s+X80hWSiI=
Subject key identifier:   C0:8E:CD:3E:08:8D:50:F7:FD:80:AE:FF:BA:F5:B1:56:66:F9:41:B4
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5C93D7277A5237A2DAD45F2322D1D4AD7E8D15D9
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:28 +0000
ROA not before:           Fri 02 Aug 2024 11:19:28 +0000
ROA not after:            Fri 01 Aug 2025 11:24:28 +0000
asID:                     397726
IP address blocks:        216.145.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:93:d7:27:7a:52:37:a2:da:d4:5f:23:22:d1:d4:ad:7e:8d:15:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:28 2024 GMT
            Not After : Aug  1 11:24:28 2025 GMT
        Subject: CN=C08ECD3E088D50F7FD80AEFFBAF5B15666F941B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:20:63:09:10:35:f9:25:58:f2:7c:3f:31:
                    cd:3a:60:07:c7:74:12:ed:b7:f5:fc:9e:a4:c1:19:
                    69:26:d3:dc:66:bf:52:3f:38:8c:fd:6f:33:2f:da:
                    aa:09:16:4d:5f:9c:0f:52:01:35:54:05:96:1a:e3:
                    0c:5c:41:78:f2:da:4f:c5:d7:63:79:b2:d8:b5:89:
                    c4:8a:c0:69:fe:b4:f4:49:66:27:6e:d4:bb:53:7a:
                    8a:a0:b0:bb:48:20:02:87:db:16:9b:ff:12:e0:4e:
                    e5:35:35:f5:40:49:d6:23:94:b9:3a:f2:13:2e:8b:
                    7c:9c:67:b1:d6:b6:a6:d0:8a:74:d7:be:2e:50:2e:
                    bd:44:dc:bd:9b:1e:2c:e1:01:22:b5:45:5e:64:9a:
                    71:cf:e2:24:62:f0:d7:18:9f:b4:21:ca:72:49:c2:
                    3d:17:80:e2:93:e1:63:1d:dc:40:68:22:c5:03:30:
                    5c:93:05:f5:f4:b3:92:56:ae:30:6c:f2:2b:22:5a:
                    2a:e6:74:dc:e3:e6:ee:27:5d:46:6b:ae:df:48:db:
                    9c:ff:05:6e:8b:a1:17:4a:35:5c:66:57:2b:7d:81:
                    21:fc:89:35:fe:fb:a0:8f:5e:3b:10:52:71:5c:04:
                    a9:27:35:42:71:ec:d1:ca:df:14:53:37:a3:0c:d7:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8E:CD:3E:08:8D:50:F7:FD:80:AE:FF:BA:F5:B1:56:66:F9:41:B4
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:f7:b5:1a:69:de:88:ac:97:d6:c5:8b:75:3b:f1:c7:f5:
         d3:21:dc:e1:7d:3e:95:fd:44:41:29:02:c7:35:00:d9:83:ee:
         74:af:7d:d9:1d:ca:90:38:c8:34:a8:01:7f:3b:d3:5e:ba:11:
         3f:5f:ba:79:29:61:cb:66:6e:d5:ae:83:f8:80:ec:00:e6:4e:
         58:40:ca:e1:10:8e:d6:ee:41:5d:24:de:25:17:5b:00:57:dd:
         21:b1:6c:89:66:3d:a3:c6:d5:3d:3f:c8:9f:0c:4e:12:70:d4:
         94:a2:5b:a5:3e:b7:54:1b:a0:43:3b:72:2e:bf:b7:f3:62:f8:
         e3:a7:9b:f9:e7:02:42:94:9a:da:04:12:d8:c4:a0:a8:c0:02:
         e5:a0:6d:32:a4:f7:27:8f:79:2d:03:a3:85:f0:77:04:cd:3b:
         10:8c:56:7f:40:a9:33:f1:68:61:fc:94:70:54:b3:59:30:d1:
         65:b4:d3:3c:1f:4b:d9:88:17:c9:6b:32:94:28:90:a6:98:d8:
         a9:3c:8e:6b:96:dc:a6:6f:cd:45:93:91:0f:7d:bb:6f:f7:bc:
         24:c1:ac:86:4c:87:18:86:57:7d:fd:d5:2c:45:ce:f5:1c:30:
         11:9c:a3:e1:99:fe:e2:ad:88:72:53:50:83:4f:f0:70:da:a5:
         bd:aa:fa:9a
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUXJPXJ3pSN6La1F8jItHUrX6NFdkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI4WhcNMjUwODAxMTEyNDI4
WjAzMTEwLwYDVQQDEyhDMDhFQ0QzRTA4OEQ1MEY3RkQ4MEFFRkZCQUY1QjE1NjY2
Rjk0MUI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiggYwkQNfkl
WPJ8PzHNOmAHx3QS7bf1/J6kwRlpJtPcZr9SPziM/W8zL9qqCRZNX5wPUgE1VAWW
GuMMXEF48tpPxddjebLYtYnEisBp/rT0SWYnbtS7U3qKoLC7SCACh9sWm/8S4E7l
NTX1QEnWI5S5OvITLot8nGex1ram0Ip0174uUC69RNy9mx4s4QEitUVeZJpxz+Ik
YvDXGJ+0IcpyScI9F4Dik+FjHdxAaCLFAzBckwX19LOSVq4wbPIrIloq5nTc4+bu
J11Ga67fSNuc/wVui6EXSjVcZlcrfYEh/Ik1/vugj147EFJxXASpJzVCcezRyt8U
UzejDNfrLQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFMCOzT4IjVD3/YCu/7r1sVZm
+UG0MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMwMmUzMDJm
MzIzMzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JHSMA0G
CSqGSIb3DQEBCwUAA4IBAQBvcve1GmneiKyX1sWLdTvxx/XTIdzhfT6V/URBKQLH
NQDZg+50r33ZHcqQOMg0qAF/O9NeuhE/X7p5KWHLZm7VroP4gOwA5k5YQMrhEI7W
7kFdJN4lF1sAV90hsWyJZj2jxtU9P8ifDE4ScNSUolulPrdUG6BDO3Iuv7fzYvjj
p5v55wJClJraBBLYxKCowALloG0ypPcnj3ktA6OF8HcEzTsQjFZ/QKkz8Whh/JRw
VLNZMNFltNM8H0vZiBfJazKUKJCmmNipPI5rltymb81Fk5EPfbtv97wkwayGTIcY
hld9/dUsRc71HDARnKPhmf7irYhyU1CDT/Bw2qW9qvqa
-----END CERTIFICATE-----