Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          HIi42nrMoBJ0cV+zthY9ohmLWzDvudMWoeF9UJKMPak=
Subject key identifier:   66:EE:89:93:BF:6E:4E:D1:9F:DC:54:E2:40:76:3A:F4:64:EC:7F:0F
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       5F0945F9B9E88EF4979330EB1A7BD4EC58860956
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Tue 17 Sep 2024 16:13:41 +0000
ROA not before:           Tue 17 Sep 2024 16:08:41 +0000
ROA not after:            Tue 16 Sep 2025 16:13:41 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:45:f9:b9:e8:8e:f4:97:93:30:eb:1a:7b:d4:ec:58:86:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Sep 17 16:08:41 2024 GMT
            Not After : Sep 16 16:13:41 2025 GMT
        Subject: CN=66EE8993BF6E4ED19FDC54E240763AF464EC7F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:99:f5:6d:1b:94:2e:75:90:67:64:f1:25:
                    09:72:a2:80:b2:58:51:d3:63:bd:b8:5f:3b:33:2b:
                    dc:df:f4:55:96:32:da:c5:f5:61:b5:5a:8b:39:73:
                    b2:ed:3a:a9:b9:95:87:d4:48:23:51:91:b4:ea:02:
                    30:f2:17:15:55:bc:e8:a1:85:a6:d2:00:7a:f6:2e:
                    07:58:b7:37:12:76:d9:16:f9:b5:a6:1b:38:2e:6e:
                    61:d9:78:da:52:5e:d1:6a:9c:f8:fe:3b:90:43:ed:
                    dc:8c:ca:3f:e1:7a:3b:27:02:6f:8d:32:a3:73:54:
                    01:d9:5f:75:f2:aa:06:b3:2e:06:e4:6c:83:e4:f2:
                    bc:c6:e1:3d:fa:b7:32:0a:89:7a:4b:70:0f:68:db:
                    de:4f:c0:7e:30:c4:dc:0e:4f:ce:5f:ec:e7:c6:c0:
                    b9:3f:e3:fc:cd:bd:de:3b:3b:c3:9d:13:1e:13:f7:
                    4a:b5:e7:ff:77:8a:28:3d:81:b7:59:5e:98:8d:47:
                    49:62:12:37:f7:cd:65:b3:eb:87:2c:d3:00:2f:51:
                    8d:f9:5a:dc:33:df:a2:58:b8:fc:14:9a:a6:8c:43:
                    cd:c4:a8:10:ed:4e:73:2a:8e:ec:d3:5e:53:f7:3a:
                    4f:c9:e7:af:74:f6:f5:0e:d2:4a:cd:51:c1:44:e2:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:89:93:BF:6E:4E:D1:9F:DC:54:E2:40:76:3A:F4:64:EC:7F:0F
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:2b:9d:3e:bb:16:b3:c3:89:f4:fb:b3:9e:94:72:e0:dd:
         93:1e:f0:f2:de:42:05:cc:5e:42:f9:d9:75:64:ee:59:02:3a:
         dc:fd:e2:07:46:d2:e2:85:6d:ea:36:a3:fa:d1:69:e0:bb:da:
         82:4e:93:32:0f:7f:58:5c:ee:c1:1c:c3:5b:37:c4:c7:94:96:
         98:00:bb:2c:30:8a:f6:76:a5:1f:3a:1e:6c:5d:c0:b0:4b:1d:
         d6:07:d8:7b:af:cf:63:ae:e4:66:c8:4f:59:88:05:ed:9c:f4:
         0b:5f:63:fe:ff:e8:72:de:ef:cc:76:0d:96:23:0c:e6:53:f1:
         12:b9:2f:8e:32:b8:fa:c2:09:89:03:6e:e2:50:72:9c:2f:d8:
         f7:b6:0a:59:ca:fe:51:5f:1a:88:dc:e4:8b:93:78:58:87:1b:
         41:de:71:7c:1b:c7:a4:b4:70:f7:79:87:93:cc:09:2e:cd:ef:
         4e:09:a7:dd:8c:be:38:93:67:c6:95:7c:b6:1e:56:dc:9d:18:
         e2:e2:e8:37:96:8e:ed:3a:69:d8:4c:c5:b9:62:02:11:2b:fe:
         47:02:48:f0:6b:24:74:d7:71:32:90:17:7e:f5:eb:4a:ab:e4:
         39:f9:f4:5f:5f:eb:3f:77:d8:d2:51:bd:31:c1:bf:38:f6:32:
         af:87:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:55 2025 by rpki-client