Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434363a323030303a3a2f33362d3438203d3e20323032343030.roa
File:                     326131323a646434363a323030303a3a2f33362d3438203d3e20323032343030.roa (raw, json)
Hash identifier:          4u56KUM/PDtojYA5NBpeHc/GDMdA1CB/Nw1soFaBZes=
Subject key identifier:   5F:8A:07:C9:46:35:13:F8:68:8E:6E:5C:B4:02:7C:A9:DE:27:8F:7D
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       7EAE2401C0C0F6FEF78F1D82690AF0412B7159B9
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434363a323030303a3a2f33362d3438203d3e20323032343030.roa
Signing time:             Thu 20 Jun 2024 05:23:08 +0000
ROA not before:           Thu 20 Jun 2024 05:18:08 +0000
ROA not after:            Thu 19 Jun 2025 05:23:08 +0000
asID:                     202400
IP address blocks:        2a12:dd46:2000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ae:24:01:c0:c0:f6:fe:f7:8f:1d:82:69:0a:f0:41:2b:71:59:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:08 2024 GMT
            Not After : Jun 19 05:23:08 2025 GMT
        Subject: CN=5F8A07C9463513F8688E6E5CB4027CA9DE278F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b4:55:e4:39:fa:db:1e:b2:ad:7a:61:e5:8f:
                    77:e5:95:fc:0e:07:8b:00:d2:f7:40:fc:b9:18:e2:
                    51:eb:51:06:67:30:2d:e2:a9:39:df:40:3d:3a:d2:
                    71:05:9f:23:12:f1:84:f7:0c:94:9e:97:85:7c:66:
                    75:57:cf:4e:ab:18:6f:36:2b:28:34:ef:d3:66:4b:
                    62:1c:34:26:6f:39:87:43:88:cb:75:5b:88:7c:67:
                    dc:53:92:36:bc:a6:9e:0f:67:3e:14:8e:20:92:0e:
                    76:64:a9:44:9d:95:9f:8d:ac:71:35:d9:84:40:f0:
                    6b:36:39:0a:75:9e:34:5b:2d:ea:77:9c:6d:cf:ef:
                    24:75:04:c2:fb:13:12:27:42:63:b0:fd:f1:80:15:
                    62:13:1a:cf:43:b9:98:7d:04:e4:ea:a4:8d:b7:42:
                    cd:c4:d8:ca:76:22:a0:47:22:3a:9c:1b:5c:11:fc:
                    1f:b2:86:22:cc:a9:71:18:a6:86:21:71:13:1b:5d:
                    88:d8:7b:41:39:7b:15:bf:12:67:7d:a9:35:11:c8:
                    c1:3f:ba:12:9d:d8:9d:dc:6c:c8:5d:29:08:92:ad:
                    dd:43:b3:58:0f:58:a7:6c:49:c0:15:5c:ca:75:04:
                    4c:b0:51:47:4b:6e:98:3b:54:f5:e2:50:2f:80:18:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:07:C9:46:35:13:F8:68:8E:6E:5C:B4:02:7C:A9:DE:27:8F:7D
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434363a323030303a3a2f33362d3438203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:1f:3d:34:ff:3c:47:0d:cf:a9:6d:2b:6c:b8:55:64:d6:1d:
         cf:2b:8f:10:1b:cb:7a:0b:03:f1:6c:16:58:f2:68:4b:7a:48:
         e2:a3:af:fe:a1:36:e6:fa:8c:72:3d:4a:f4:9e:81:b1:26:92:
         f6:ea:0c:16:6e:19:99:50:d6:6c:8d:51:63:04:d3:44:bf:19:
         e3:06:30:7f:e5:c9:0c:ac:f5:38:6c:6e:8f:42:ab:c6:89:5c:
         ab:27:a1:fb:18:66:7d:01:a2:95:83:8b:3e:bf:f7:7a:fd:8b:
         21:84:9f:ad:f6:e6:98:9a:cf:1c:de:50:ed:87:20:63:c8:84:
         b2:ac:b1:c0:a6:5b:69:fb:84:10:26:8f:fd:fc:00:40:1c:65:
         35:26:3b:03:da:f3:bf:5b:40:ec:bc:e5:c7:fb:06:b4:2a:be:
         8c:d1:4c:05:c2:cf:6e:e3:4e:e0:c0:32:d5:e7:5a:3b:29:77:
         c2:c4:89:b2:07:8c:9f:2d:e5:c3:e5:e7:3d:a1:b2:ea:db:05:
         c2:a9:a0:2d:fe:50:95:d8:e9:7d:85:29:65:79:35:d2:45:19:
         5e:d1:23:78:b2:50:6a:91:29:1c:9c:5d:fc:b9:f8:f8:70:6d:
         87:75:1c:63:28:92:5c:22:e8:f1:85:e1:3e:a1:a4:43:35:f0:
         3a:36:65:6a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUfq4kAcDA9v73jx2CaQrwQStxWbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MDhaFw0yNTA2MTkwNTIzMDhaMDMxMTAvBgNV
BAMTKDVGOEEwN0M5NDYzNTEzRjg2ODhFNkU1Q0I0MDI3Q0E5REUyNzhGN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtFXkOfrbHrKtemHlj3fllfwO
B4sA0vdA/LkY4lHrUQZnMC3iqTnfQD060nEFnyMS8YT3DJSel4V8ZnVXz06rGG82
Kyg079NmS2IcNCZvOYdDiMt1W4h8Z9xTkja8pp4PZz4UjiCSDnZkqUSdlZ+NrHE1
2YRA8Gs2OQp1njRbLep3nG3P7yR1BML7ExInQmOw/fGAFWITGs9DuZh9BOTqpI23
Qs3E2Mp2IqBHIjqcG1wR/B+yhiLMqXEYpoYhcRMbXYjYe0E5exW/Emd9qTURyME/
uhKd2J3cbMhdKQiSrd1Ds1gPWKdsScAVXMp1BEywUUdLbpg7VPXiUC+AGEOHAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUX4oHyUY1E/hojm5ctAJ8qd4nj30wHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNjNhMzIzMDMwMzAzYTNhMmYzMzM2MmQzNDM4
MjAzZDNlMjAzMjMwMzIzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqEt1GIDANBgkqhkiG9w0B
AQsFAAOCAQEABB89NP88Rw3PqW0rbLhVZNYdzyuPEBvLegsD8WwWWPJoS3pI4qOv
/qE25vqMcj1K9J6BsSaS9uoMFm4ZmVDWbI1RYwTTRL8Z4wYwf+XJDKz1OGxuj0Kr
xolcqyeh+xhmfQGilYOLPr/3ev2LIYSfrfbmmJrPHN5Q7YcgY8iEsqyxwKZbafuE
ECaP/fwAQBxlNSY7A9rzv1tA7Lzlx/sGtCq+jNFMBcLPbuNO4MAy1edaOyl3wsSJ
sgeMny3lw+XnPaGy6tsFwqmgLf5QldjpfYUpZXk10kUZXtEjeLJQapEpHJxd/Ln4
+HBth3UcYyiSXCLo8YXhPqGkQzXwOjZlag==
-----END CERTIFICATE-----