Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          4usYI/4XhQA97GvqwEjlpJHPGNScgBkUnm13iqLhy4s=
Subject key identifier:   FC:DC:AA:9C:7D:2C:71:34:64:6D:99:4E:3F:E6:CB:49:53:0B:B6:8D
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       093690518C8C1432258056E8FBA6BA95D8942466
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 18 Jul 2024 09:18:19 +0000
ROA not before:           Thu 18 Jul 2024 09:13:19 +0000
ROA not after:            Thu 17 Jul 2025 09:18:19 +0000
asID:                     16509
IP address blocks:        2620:134:600b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:36:90:51:8c:8c:14:32:25:80:56:e8:fb:a6:ba:95:d8:94:24:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul 18 09:13:19 2024 GMT
            Not After : Jul 17 09:18:19 2025 GMT
        Subject: CN=FCDCAA9C7D2C7134646D994E3FE6CB49530BB68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:eb:d6:be:9f:71:36:f8:ca:a6:26:0f:b9:
                    7d:7a:e3:37:28:b1:79:74:9c:b4:ab:22:61:44:c4:
                    1c:96:3b:d1:86:2c:59:79:3c:21:61:d7:39:4f:b1:
                    91:13:c5:5f:c0:d0:e0:7d:c0:3e:1d:e3:3d:83:78:
                    ec:88:5f:98:58:e2:c9:d8:47:d1:55:f3:34:d1:cc:
                    4d:f4:19:c0:9f:97:cc:16:7e:2f:4e:83:62:83:82:
                    cb:60:65:22:2e:5b:ce:94:b7:4e:d0:8b:34:89:16:
                    c8:1d:3e:ce:07:dc:d9:53:4d:f6:81:f9:83:e2:ad:
                    5f:45:11:04:1e:37:4e:9e:d9:cc:85:36:7f:cf:b8:
                    ea:07:e0:44:6d:5e:af:78:59:23:a9:9d:06:67:f9:
                    07:65:e9:58:5e:78:de:9c:3c:74:3a:7b:19:68:26:
                    f3:4d:84:1f:d8:54:df:c0:5a:af:7d:28:42:14:9b:
                    c3:a6:e5:32:22:14:7d:95:d3:06:bb:2c:3c:a3:34:
                    42:46:9b:46:33:c4:9a:49:41:02:74:0c:16:18:29:
                    ba:e8:04:fd:dc:d1:8d:e1:b8:75:49:93:b7:6c:53:
                    5b:96:d9:d4:bf:a7:3c:98:62:ee:66:30:34:ed:5d:
                    c9:25:bc:61:50:6b:af:1d:61:4e:87:c6:3c:50:fa:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:AA:9C:7D:2C:71:34:64:6D:99:4E:3F:E6:CB:49:53:0B:B6:8D
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:e4:4c:4f:fd:3b:0d:bf:d2:a9:48:24:22:cd:cd:b9:ea:94:
         43:bf:4c:2a:fe:85:f4:cc:ee:10:09:26:66:75:ed:22:f3:9f:
         3c:ee:88:4a:03:21:b4:bb:97:e6:29:5e:32:ca:a0:d8:e6:a1:
         e4:1e:d6:88:1b:a4:44:ad:71:52:fe:20:4c:64:9a:d8:47:c8:
         8c:0d:19:69:1a:c7:2d:33:f4:23:b4:3a:64:49:73:db:9d:2f:
         f4:41:08:17:62:20:44:6e:c9:39:5e:8b:76:29:f7:7b:5e:2f:
         c1:6a:3e:a2:4b:ee:d3:82:d3:2d:ef:f3:11:52:67:45:83:60:
         09:ee:e9:2f:0c:47:44:3f:83:f7:86:31:01:2d:ab:4e:29:88:
         f7:f5:6e:af:ef:de:55:f8:0b:4e:d1:29:1f:dd:5f:46:3e:16:
         81:57:95:8e:5a:33:d0:db:26:f7:8f:e9:30:dc:a5:f2:24:0b:
         cd:3f:4a:27:8a:19:7e:3d:44:32:c6:e5:1a:e4:06:7e:b0:74:
         86:66:50:e3:81:9f:4b:9c:85:89:71:91:3e:b8:42:48:ab:cd:
         20:bc:79:91:f1:b5:3c:39:2f:b2:8c:7e:b9:a1:7d:58:47:ca:
         a8:5f:f0:18:10:78:2b:6f:97:98:5f:2d:d2:23:75:b1:1f:85:
         03:38:3f:be
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUCTaQUYyMFDIlgFbo+6a6ldiUJGYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwNzE4MDkxMzE5WhcNMjUwNzE3MDkxODE5
WjAzMTEwLwYDVQQDEyhGQ0RDQUE5QzdEMkM3MTM0NjQ2RDk5NEUzRkU2Q0I0OTUz
MEJCNjhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR/r1r6fcTb4
yqYmD7l9euM3KLF5dJy0qyJhRMQcljvRhixZeTwhYdc5T7GRE8VfwNDgfcA+HeM9
g3jsiF+YWOLJ2EfRVfM00cxN9BnAn5fMFn4vToNig4LLYGUiLlvOlLdO0Is0iRbI
HT7OB9zZU032gfmD4q1fRREEHjdOntnMhTZ/z7jqB+BEbV6veFkjqZ0GZ/kHZelY
XnjenDx0OnsZaCbzTYQf2FTfwFqvfShCFJvDpuUyIhR9ldMGuyw8ozRCRptGM8Sa
SUECdAwWGCm66AT93NGN4bh1SZO3bFNbltnUv6c8mGLuZjA07V3JJbxhUGuvHWFO
h8Y8UPqFZwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFPzcqpx9LHE0ZG2ZTj/my0lT
C7aNMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGALMA0GCSqGSIb3DQEBCwUAA4IBAQBW5ExP/TsNv9KpSCQizc256pRDv0wq/oX0
zO4QCSZmde0i85887ohKAyG0u5fmKV4yyqDY5qHkHtaIG6RErXFS/iBMZJrYR8iM
DRlpGsctM/QjtDpkSXPbnS/0QQgXYiBEbsk5Xot2Kfd7Xi/Baj6iS+7TgtMt7/MR
UmdFg2AJ7ukvDEdEP4P3hjEBLatOKYj39W6v795V+AtO0Skf3V9GPhaBV5WOWjPQ
2yb3j+kw3KXyJAvNP0onihl+PUQyxuUa5AZ+sHSGZlDjgZ9LnIWJcZE+uEJIq80g
vHmR8bU8OS+yjH65oX1YR8qoX/AYEHgrb5eYXy3SI3WxH4UDOD++
-----END CERTIFICATE-----