Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
File:                     326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa (raw, json)
Hash identifier:          ugfwOFQGKz64ubGSwl8HeIiUw279FT8JLQry0wlBAYA=
Subject key identifier:   57:83:2C:C6:C6:7F:18:AE:3C:8C:E9:70:66:75:F9:42:B5:94:1F:A5
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       5486B1AE51D6E5D7A72B98D8B308567F4C822928
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
Signing time:             Wed 18 Sep 2024 17:47:53 +0000
ROA not before:           Wed 18 Sep 2024 17:42:53 +0000
ROA not after:            Wed 17 Sep 2025 17:47:53 +0000
asID:                     207314
IP address blocks:        2a12:dd47:3a00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:86:b1:ae:51:d6:e5:d7:a7:2b:98:d8:b3:08:56:7f:4c:82:29:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Sep 18 17:42:53 2024 GMT
            Not After : Sep 17 17:47:53 2025 GMT
        Subject: CN=57832CC6C67F18AE3C8CE9706675F942B5941FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:62:f7:80:8a:8c:70:27:b6:20:4b:c9:7f:
                    e3:82:08:16:e0:8d:a4:36:52:4b:f7:33:35:7c:be:
                    49:f5:7d:a2:10:99:7a:ab:42:07:f5:d9:de:c6:3c:
                    09:7c:57:52:e8:d5:09:5d:64:4b:9b:c1:73:30:4b:
                    19:4e:c1:7d:71:0e:d0:2d:09:2d:f1:17:81:05:c5:
                    74:56:aa:fa:74:37:52:78:c1:fd:3f:bd:73:ca:0f:
                    56:37:d2:b4:51:d3:d4:1d:b8:69:6c:75:8b:77:19:
                    98:ce:71:74:89:0b:e3:09:d7:f5:57:c2:39:a9:29:
                    01:06:f1:17:54:cd:3f:e5:d3:01:19:07:ae:08:43:
                    fd:a7:05:a1:7d:a4:20:ea:18:f4:8c:b5:dd:f3:37:
                    a1:14:dd:96:5b:99:86:e8:d9:08:b8:9d:c8:54:f5:
                    c3:55:78:e7:cf:12:8f:d0:aa:eb:da:25:66:ce:99:
                    34:8a:3e:e9:42:11:35:cc:81:a9:fb:3f:a6:c4:ec:
                    79:a3:92:68:4a:52:99:61:f7:59:54:13:e3:10:12:
                    74:5f:56:c2:2e:da:c8:45:18:c1:b4:13:75:fb:ea:
                    5f:0c:c0:d1:ee:82:de:d9:11:6f:9f:d1:b1:68:4b:
                    ab:d5:bc:7b:43:07:e5:54:2a:60:8d:e8:ae:e4:5a:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:2C:C6:C6:7F:18:AE:3C:8C:E9:70:66:75:F9:42:B5:94:1F:A5
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:fd:ab:2b:5c:6e:9f:d9:9e:71:47:6d:4f:3a:ed:b2:c6:
         a9:5c:c2:56:e0:01:dd:64:50:62:0c:85:9a:ef:e9:ec:6b:f0:
         78:78:47:41:a8:85:44:78:fe:08:55:b5:13:50:c4:4f:78:39:
         a7:bd:b4:72:51:42:af:6b:d9:99:2c:32:e5:78:db:4e:fa:52:
         05:86:f6:f0:1f:44:c9:1c:a3:3c:6b:fb:61:e7:40:29:41:b6:
         b7:2c:a9:56:ef:86:a0:8d:7e:de:6a:2a:d9:0c:66:c2:40:8f:
         3c:dc:87:43:86:af:cc:65:01:5a:ca:5f:7f:11:04:7e:ef:3b:
         80:c0:d8:df:95:00:04:bc:3a:a9:44:72:b4:e3:0c:73:e6:64:
         51:8b:36:9d:08:36:5a:70:ab:39:4a:8b:b6:4a:d4:81:87:36:
         6d:14:f1:ce:d5:2a:ff:42:59:5c:64:b6:61:8c:ae:bf:0e:f4:
         ec:68:1f:24:96:78:d1:75:d9:7a:07:5e:86:b4:64:8b:11:2e:
         72:c5:84:c7:3a:f6:86:74:c9:8a:b6:38:7d:63:47:e9:ef:d7:
         83:93:1b:a8:32:7b:dd:d7:98:70:df:ae:54:5a:f3:32:1e:95:
         39:59:e6:f1:cf:e8:f2:0a:d3:08:44:39:6d:2c:b7:b5:ac:64:
         ac:9d:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----