Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/4/323630363a623063303a3a2f33322d3438203d3e20393435.roa
File:                     323630363a623063303a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          Y1w00hTUALe9XNPE4NSqK7N+C3JJ159Cvdp6VKWhp3A=
Subject key identifier:   4A:07:C6:26:55:74:C4:95:84:BF:00:7D:02:64:BD:7F:D2:0C:04:33
Certificate issuer:       /CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Certificate serial:       0700E79D927CD919F01596F6E1A9B4FF9044910A
Authority key identifier: 47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Subject info access:      rsync://dev.tw/rpki/August/4/323630363a623063303a3a2f33322d3438203d3e20393435.roa
Signing time:             Tue 17 Sep 2024 17:13:51 +0000
ROA not before:           Tue 17 Sep 2024 17:08:51 +0000
ROA not after:            Tue 16 Sep 2025 17:13:51 +0000
asID:                     945
IP address blocks:        2606:b0c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:00:e7:9d:92:7c:d9:19:f0:15:96:f6:e1:a9:b4:ff:90:44:91:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
        Validity
            Not Before: Sep 17 17:08:51 2024 GMT
            Not After : Sep 16 17:13:51 2025 GMT
        Subject: CN=4A07C6265574C49584BF007D0264BD7FD20C0433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:c1:b3:f4:13:03:8c:86:41:53:39:ea:7a:
                    8e:7a:c1:89:57:fc:eb:8a:84:ed:dc:7f:15:41:c6:
                    df:ab:05:2f:90:5d:3b:94:a5:b8:e9:3a:e6:bf:b5:
                    37:f9:03:49:72:59:90:e6:c0:c0:64:ef:db:fa:cd:
                    61:24:cb:9f:37:a6:38:f9:0a:cf:68:2d:11:b1:7a:
                    66:7b:42:1e:a8:5c:19:f1:19:ca:83:63:8e:3a:78:
                    11:c1:0f:1e:f2:44:d1:af:eb:6e:1f:c4:c2:28:ff:
                    b2:fe:76:e7:a6:9f:90:d3:12:ed:66:94:db:bd:2a:
                    68:88:3c:04:98:28:0a:66:20:13:87:8f:e9:bb:ad:
                    17:1b:f6:3a:28:1b:b3:d9:03:91:6b:5f:83:53:5f:
                    58:de:b7:ab:01:3a:ed:e1:17:c0:cc:d8:49:1c:3c:
                    4a:d4:03:15:7e:a6:9e:a1:95:c3:9e:9c:f0:b5:65:
                    06:22:96:37:9e:d0:57:30:80:fa:07:9a:64:85:50:
                    2d:ce:a9:e9:14:0c:9d:13:6b:2d:7f:b4:9d:64:96:
                    9e:e7:2e:3c:58:ef:18:5b:53:4e:52:65:f0:c5:65:
                    c7:5e:f2:f5:8c:5c:f8:8d:80:e9:87:cf:4e:87:d3:
                    1e:96:44:6f:73:96:e5:ec:64:bf:4f:37:0b:14:d8:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:C6:26:55:74:C4:95:84:BF:00:7D:02:64:BD:7F:D2:0C:04:33
            X509v3 Authority Key Identifier:
                keyid:47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/4/323630363a623063303a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:42:9b:44:2c:60:31:2f:16:97:e9:dc:dd:f9:08:3c:19:
         60:40:83:cb:67:84:4d:dd:c0:0a:6e:4b:e0:71:1f:ea:f4:70:
         5f:10:6d:3e:31:5f:f1:8f:05:42:c7:99:d0:5a:81:ee:00:3a:
         f4:8a:1a:38:66:9e:c1:59:dd:67:23:6a:c3:bd:a0:b6:c9:b3:
         c3:c6:70:ee:61:ba:8c:53:60:3e:3f:5c:10:73:57:ac:95:ef:
         c9:9d:a7:7c:1f:22:29:ab:14:d2:4c:3a:b5:dd:2e:37:bf:32:
         7c:30:d0:12:15:79:0f:b0:e4:fe:3c:c5:0b:96:8e:47:c2:c9:
         21:80:57:8e:54:7f:cf:55:7d:6c:71:fa:8a:c0:7e:f5:b3:73:
         62:cc:91:cc:4e:5b:4a:87:23:31:fb:21:b5:4a:9c:4f:2d:5d:
         ae:10:91:dc:ed:94:f0:97:ec:c4:4e:8e:29:92:f3:3f:5a:f6:
         47:2f:07:77:84:42:aa:00:4b:26:52:64:6f:bf:56:e7:fd:cc:
         b9:90:08:0f:3b:56:9a:43:71:49:84:ac:09:6c:66:77:e1:86:
         8e:2b:2e:bb:97:ee:3d:37:e1:ca:c1:54:bf:40:78:d2:6f:a4:
         1e:89:58:8d:50:d6:b4:13:fd:00:69:ef:de:9e:52:ec:b9:fe:
         f7:c7:43:22
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBwDnnZJ82RnwFZb24am0/5BEkQowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmJkMDQ2NjU0YTJjNWMwMmU4OTlkMGJl
ODljYTdiZDE4ODEyN2E0MzkwHhcNMjQwOTE3MTcwODUxWhcNMjUwOTE2MTcxMzUx
WjAzMTEwLwYDVQQDEyg0QTA3QzYyNjU1NzRDNDk1ODRCRjAwN0QwMjY0QkQ3RkQy
MEMwNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA037Bs/QTA4yG
QVM56nqOesGJV/zrioTt3H8VQcbfqwUvkF07lKW46Trmv7U3+QNJclmQ5sDAZO/b
+s1hJMufN6Y4+QrPaC0RsXpme0IeqFwZ8RnKg2OOOngRwQ8e8kTRr+tuH8TCKP+y
/nbnpp+Q0xLtZpTbvSpoiDwEmCgKZiATh4/pu60XG/Y6KBuz2QORa1+DU19Y3rer
ATrt4RfAzNhJHDxK1AMVfqaeoZXDnpzwtWUGIpY3ntBXMID6B5pkhVAtzqnpFAyd
E2stf7SdZJae5y48WO8YW1NOUmXwxWXHXvL1jFz4jYDph89Oh9MelkRvc5bl7GS/
TzcLFNiYAQIDAQABo4ICUTCCAk0wHQYDVR0OBBYEFEoHxiZVdMSVhL8AfQJkvX/S
DAQzMB8GA1UdIwQYMBaAFEcs2EWeB7lqdqcM68A2HoeQFM+BMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC80LzQ3MkNEODQ1OUUwN0I5NkE3NkE3MENFQkMwMzYxRTg3OTAxNENGODEuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEz
NzIyN2U5NzFhYy83YTA1NGQxZS04MzI2LTQyYTctYjFhZC0wMmIzMDI4N2I0ODMv
NjJmM2QwYWYxNmJkMDQ2NjU0YTJjNWMwMmU4OTlkMGJlODljYTdiZDE4ODEyN2E0
MzkuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvNC8zMjM2MzAzNjNhNjIzMDYzMzAzYTNhMmYzMzMyMmQz
NDM4MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBrDAMA0GCSqGSIb3DQEBCwUA
A4IBAQA5i0KbRCxgMS8Wl+nc3fkIPBlgQIPLZ4RN3cAKbkvgcR/q9HBfEG0+MV/x
jwVCx5nQWoHuADr0iho4Zp7BWd1nI2rDvaC2ybPDxnDuYbqMU2A+P1wQc1esle/J
nad8HyIpqxTSTDq13S43vzJ8MNASFXkPsOT+PMULlo5HwskhgFeOVH/PVX1scfqK
wH71s3NizJHMTltKhyMx+yG1SpxPLV2uEJHc7ZTwl+zETo4pkvM/WvZHLwd3hEKq
AEsmUmRvv1bn/cy5kAgPO1aaQ3FJhKwJbGZ34YaOKy67l+49N+HKwVS/QHjSb6Qe
iViNUNa0E/0Aae/enlLsuf73x0Mi
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:04 2025 by rpki-client