Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/9/3134302e3233352e3139362e302f32322d3234203d3e20343031313131.roa
File:                     3134302e3233352e3139362e302f32322d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          3xeNoJ5b/wdvXNgftZsekKgrU2c90P8PJCoUHusk/O8=
Subject key identifier:   FE:DB:5C:05:B4:FC:B1:7B:BB:9C:AA:B4:E4:0A:F7:2E:91:6D:3B:0B
Certificate issuer:       /CN=a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132
Certificate serial:       7239AAC58BBC7BC35C70C05BF81E3BBDEF18E748
Authority key identifier: 97:F0:EC:C3:07:F1:DF:82:8A:E1:27:E2:D0:FB:B1:34:68:3D:29:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer
Subject info access:      rsync://dev.tw/rpki/August/9/3134302e3233352e3139362e302f32322d3234203d3e20343031313131.roa
Signing time:             Thu 03 Oct 2024 20:33:30 +0000
ROA not before:           Thu 03 Oct 2024 20:28:30 +0000
ROA not after:            Thu 02 Oct 2025 20:33:30 +0000
asID:                     401111
IP address blocks:        140.235.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:aa:c5:8b:bc:7b:c3:5c:70:c0:5b:f8:1e:3b:bd:ef:18:e7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132
        Validity
            Not Before: Oct  3 20:28:30 2024 GMT
            Not After : Oct  2 20:33:30 2025 GMT
        Subject: CN=FEDB5C05B4FCB17BBB9CAAB4E40AF72E916D3B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:e1:65:4d:80:fa:ac:79:36:e7:4c:ff:f7:
                    8e:f5:27:4a:bb:19:45:fd:13:e8:e5:74:50:a7:b5:
                    74:68:02:c1:92:7c:3a:46:1f:ee:ec:d7:bf:30:92:
                    03:64:64:c0:e5:45:d4:83:20:73:c2:92:bf:58:ca:
                    15:33:ce:6e:3c:8a:43:19:11:fb:5b:02:88:74:56:
                    f1:c6:4c:f0:af:ec:eb:38:12:9c:ab:4e:f9:85:fc:
                    56:e3:19:a7:9a:5b:cc:1a:f3:17:a1:07:fa:d7:69:
                    c4:ed:b4:d6:74:b3:00:b3:87:e8:e9:36:83:10:46:
                    6b:f5:7e:d5:71:38:21:42:76:dc:9f:41:71:65:01:
                    f6:26:49:e7:e0:f6:da:48:26:31:8b:dd:b5:c7:46:
                    e6:6f:c5:a8:fe:d9:d1:29:53:97:4b:80:81:a4:4e:
                    dd:c1:ad:5c:69:7a:e7:62:ae:2f:df:9d:17:b9:8c:
                    07:6a:c3:84:6d:19:29:9c:98:5b:6d:62:cc:6a:7f:
                    dd:4c:90:b8:1b:ea:c5:0c:53:d5:09:b0:37:8a:4e:
                    52:81:ce:03:29:9a:2d:3f:a9:c5:9e:b8:dc:48:41:
                    19:77:e0:89:08:1e:ab:98:f6:bf:3e:a9:04:c9:bd:
                    fe:a7:4d:8d:de:17:41:83:f6:4c:55:6e:87:85:c1:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:5C:05:B4:FC:B1:7B:BB:9C:AA:B4:E4:0A:F7:2E:91:6D:3B:0B
            X509v3 Authority Key Identifier:
                keyid:97:F0:EC:C3:07:F1:DF:82:8A:E1:27:E2:D0:FB:B1:34:68:3D:29:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/9/3134302e3233352e3139362e302f32322d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:4b:cb:f1:1f:8c:66:12:5a:b8:4b:71:b8:07:04:bf:ac:7d:
         42:16:30:7b:21:7a:85:9d:db:72:12:6a:c8:c7:fc:97:8b:87:
         92:86:15:57:87:f9:a5:60:b9:82:f8:9a:f5:b5:c1:36:f3:1a:
         9c:69:0d:62:f5:81:25:86:1a:2e:4f:10:3d:60:67:d0:c9:c6:
         ef:71:54:c6:73:1a:33:2c:26:04:c9:f8:1f:2c:d0:de:16:3f:
         5a:b8:a4:ce:59:aa:8f:cd:65:56:2c:73:e5:31:8d:9a:1d:a6:
         6b:fe:4b:ab:6a:25:11:63:4b:43:81:c5:d3:c4:00:be:67:7d:
         57:51:6a:60:86:f2:e2:00:0c:80:9b:be:50:9b:ab:2f:ff:5e:
         ef:c7:db:e6:4f:13:c6:49:b6:35:12:ff:9c:1f:67:24:9c:f7:
         78:9d:cb:56:53:d3:f4:ce:d6:90:cc:82:e4:35:f8:9b:f4:2a:
         6f:ad:fa:c0:59:0d:d4:42:45:5e:65:11:a2:ad:b1:e4:65:85:
         6f:a2:e9:df:22:0f:f5:6e:f5:eb:b2:c0:6f:bc:e4:5d:7b:bd:
         c9:16:28:82:33:a1:06:b7:bd:40:06:93:af:db:9d:35:5d:a0:
         fc:6c:e7:76:24:37:3a:9a:58:9b:c9:28:f8:20:01:b2:ef:b3:
         6e:24:49:8e
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUcjmqxYu8e8NccMBb+B47ve8Y50gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTYyMDFlZmQ0Yzc5Nzk3Yjc4MjNjMTgwMDBkYWM4MGVj
NDdiNjFjM2JlNGZjNTUxMzIwHhcNMjQxMDAzMjAyODMwWhcNMjUxMDAyMjAzMzMw
WjAzMTEwLwYDVQQDEyhGRURCNUMwNUI0RkNCMTdCQkI5Q0FBQjRFNDBBRjcyRTkx
NkQzQjBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QbhZU2A+qx5
NudM//eO9SdKuxlF/RPo5XRQp7V0aALBknw6Rh/u7Ne/MJIDZGTA5UXUgyBzwpK/
WMoVM85uPIpDGRH7WwKIdFbxxkzwr+zrOBKcq075hfxW4xmnmlvMGvMXoQf612nE
7bTWdLMAs4fo6TaDEEZr9X7VcTghQnbcn0FxZQH2Jknn4PbaSCYxi921x0bmb8Wo
/tnRKVOXS4CBpE7dwa1caXrnYq4v350XuYwHasOEbRkpnJhbbWLMan/dTJC4G+rF
DFPVCbA3ik5Sgc4DKZotP6nFnrjcSEEZd+CJCB6rmPa/PqkEyb3+p02N3hdBg/ZM
VW6HhcGGaQIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFP7bXAW0/LF7u5yqtOQK9y6R
bTsLMB8GA1UdIwQYMBaAFJfw7MMH8d+CiuEn4tD7sTRoPSlaMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC85Lzk3RjBFQ0MzMDdGMURGODI4QUUxMjdFMkQwRkJCMTM0NjgzRDI5NUEuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFi
ZTIwNDkzM2FlNS80NmMwN2U3Ni02NmQ4LTQ4ZDctODI2YS04NWRlMjljNjZhMjIv
YTYyMDFlZmQ0Yzc5Nzk3Yjc4MjNjMTgwMDBkYWM4MGVjNDdiNjFjM2JlNGZjNTUx
MzIuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvOS8zMTM0MzAyZTMyMzMzNTJlMzEzOTM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzQzMDMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOvEMA0GCSqG
SIb3DQEBCwUAA4IBAQCxS8vxH4xmElq4S3G4BwS/rH1CFjB7IXqFndtyEmrIx/yX
i4eShhVXh/mlYLmC+Jr1tcE28xqcaQ1i9YElhhouTxA9YGfQycbvcVTGcxozLCYE
yfgfLNDeFj9auKTOWaqPzWVWLHPlMY2aHaZr/kuraiURY0tDgcXTxAC+Z31XUWpg
hvLiAAyAm75Qm6sv/17vx9vmTxPGSbY1Ev+cH2cknPd4nctWU9P0ztaQzILkNfib
9CpvrfrAWQ3UQkVeZRGirbHkZYVvounfIg/1bvXrssBvvORde73JFiiCM6EGt71A
BpOv2501XaD8bOd2JDc6mlibySj4IAGy77NuJEmO
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:17 2025 by rpki-client