Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
File:                     3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa (raw, json)
Hash identifier:          qljXfzZwzib83TFqbsIddRrLYvwswpBiqIUgH98aPUE=
Subject key identifier:   2F:3B:75:FE:A0:70:F2:FB:5C:06:19:6A:99:C9:49:BE:D9:18:B7:A7
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       03F2E2F24AFE74AE8EB46121D32B5B08A51FCC08
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
Signing time:             Mon 20 May 2024 23:58:40 +0000
ROA not before:           Mon 20 May 2024 23:53:40 +0000
ROA not after:            Mon 19 May 2025 23:58:40 +0000
asID:                     7719
IP address blocks:        199.189.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f2:e2:f2:4a:fe:74:ae:8e:b4:61:21:d3:2b:5b:08:a5:1f:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: May 20 23:53:40 2024 GMT
            Not After : May 19 23:58:40 2025 GMT
        Subject: CN=2F3B75FEA070F2FB5C06196A99C949BED918B7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:72:cd:4f:8b:c5:fa:ee:16:63:15:7e:68:
                    64:d6:bb:4e:77:b2:e0:60:c6:53:40:22:e1:4f:e2:
                    78:0f:8f:0f:4b:c0:bf:53:3e:c5:5f:ac:68:52:8e:
                    93:19:32:bb:84:85:e4:45:23:df:0d:ba:6d:ce:9a:
                    08:6b:b2:f8:58:0a:b2:06:b6:92:ce:c5:5a:ed:a3:
                    26:45:bf:02:b4:27:91:cb:dc:88:3d:e9:e8:da:29:
                    0b:a1:76:2d:46:6a:8b:31:ad:a3:85:2b:92:71:61:
                    af:54:93:0b:7e:1d:11:b7:22:b3:66:bf:a9:33:3b:
                    37:40:36:98:45:91:01:2e:62:3a:f4:81:fd:7b:06:
                    39:1c:80:51:13:a6:92:c0:67:5f:93:e4:39:dc:98:
                    07:98:47:c5:2e:32:f3:d5:33:1b:ea:38:1b:07:13:
                    6a:e0:ce:4b:60:1d:e3:b4:8c:2f:f7:72:f9:47:fe:
                    c5:02:c9:e0:d1:43:b3:12:94:f8:76:f2:8d:79:5c:
                    ba:86:99:a4:cb:5d:26:90:2b:ee:93:30:84:96:76:
                    e0:c6:df:b7:d5:39:b3:a2:b7:87:7d:cc:ad:4b:a9:
                    28:16:ab:df:22:54:24:ed:50:76:19:7c:2d:13:14:
                    ea:42:58:27:86:6e:7e:49:a3:c1:00:01:ba:7f:36:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3B:75:FE:A0:70:F2:FB:5C:06:19:6A:99:C9:49:BE:D9:18:B7:A7
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:be:ea:53:cf:5f:48:19:3c:92:de:51:78:16:47:c7:76:ce:
         6d:9c:09:a0:89:f6:63:af:aa:ed:d3:b4:a3:6c:b7:1d:ff:b7:
         57:05:25:f7:a6:9f:1d:2b:fa:7e:6c:9e:13:43:82:ee:20:6c:
         cf:52:d3:31:01:a9:01:a6:12:7b:95:ae:b6:d1:5b:36:31:88:
         4b:21:83:9a:d9:c9:6e:85:5e:cc:9b:5c:d4:95:bb:de:ee:f4:
         82:7f:db:25:ec:78:cd:66:32:20:8a:d9:72:ab:56:13:c0:cd:
         d8:6f:25:a1:a6:87:7f:39:5a:64:d9:89:c5:6f:94:72:8f:ee:
         5c:f9:b8:67:7c:cf:90:d2:d1:a2:74:3c:17:87:41:fc:dd:03:
         42:2e:b5:de:88:b0:d2:a2:6e:02:2c:1b:2d:c7:17:e2:57:af:
         02:d0:be:db:50:5b:33:ec:e8:e8:37:5f:04:9c:1f:a8:39:9f:
         9b:42:29:f6:42:82:e4:c7:79:02:cc:52:bf:0a:41:20:e8:d5:
         1f:08:fa:88:87:26:0a:7c:84:cd:47:31:03:e1:e3:66:84:9d:
         97:21:7d:9a:7d:d4:40:cd:d2:3f:5b:83:82:fb:84:e7:3c:22:
         a4:65:5f:fb:f8:52:d4:00:62:0f:25:74:1c:b4:34:51:8c:57:
         b4:c3:8a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:10:03 2024 by rpki-client on console-ams.rpki-client.org