Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336330303a3a2f34302d3438203d3e203136353039.roa
File:                     326131323a646434373a336330303a3a2f34302d3438203d3e203136353039.roa (raw, json)
Hash identifier:          2/pCbBza76A1bbgmjk+3jmAXPORFJfXnRafEbpaQlo0=
Subject key identifier:   CC:DE:BC:03:28:B6:1C:3D:3B:0C:FD:E8:D4:A7:A0:1D:24:B3:D6:1A
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       037326DB0674C5488450AE70103A1CFC2283B697
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336330303a3a2f34302d3438203d3e203136353039.roa
Signing time:             Thu 20 Jun 2024 05:23:13 +0000
ROA not before:           Thu 20 Jun 2024 05:18:13 +0000
ROA not after:            Thu 19 Jun 2025 05:23:13 +0000
asID:                     16509
IP address blocks:        2a12:dd47:3c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:73:26:db:06:74:c5:48:84:50:ae:70:10:3a:1c:fc:22:83:b6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:13 2024 GMT
            Not After : Jun 19 05:23:13 2025 GMT
        Subject: CN=CCDEBC0328B61C3D3B0CFDE8D4A7A01D24B3D61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:f6:74:03:a0:59:4f:b0:b2:55:24:75:c8:
                    c8:16:8a:ed:e9:75:18:c2:d9:fb:8e:95:91:6e:78:
                    19:79:01:39:ca:0d:d3:f6:11:72:a4:1c:0f:e5:1f:
                    46:a1:67:1e:4d:fa:81:16:52:e3:2f:81:57:97:5a:
                    d9:1b:06:a2:e1:1f:85:a1:99:88:ec:ae:b1:93:07:
                    f1:db:80:f8:f6:bf:af:83:1d:f4:e0:ec:93:35:d3:
                    0b:1d:b2:f9:4c:35:d0:3e:32:1e:28:ad:20:ce:69:
                    4c:88:a3:33:ed:41:6a:6d:a9:4a:0e:9c:20:49:1f:
                    74:a2:dc:3c:b8:22:c1:7f:be:77:24:6b:0b:f3:80:
                    9b:5d:25:1a:7a:d9:ca:f1:6a:ac:e1:f6:fb:89:48:
                    18:85:9b:94:53:ff:95:c0:5d:04:0a:44:50:a4:18:
                    c2:18:d7:41:18:d8:64:09:48:af:03:71:0b:5c:fb:
                    ac:42:54:ae:c6:16:47:f2:b9:1c:14:fc:d7:d5:8c:
                    0d:2b:5f:b4:83:38:26:1c:2f:e9:7a:79:db:24:e2:
                    7c:ac:eb:b0:6e:f8:fc:06:c4:11:02:5b:51:00:17:
                    25:fb:9a:85:0c:a8:72:f4:3a:f3:b8:d5:53:0b:c2:
                    43:89:0c:fa:67:75:df:40:1d:d3:ed:96:91:df:04:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DE:BC:03:28:B6:1C:3D:3B:0C:FD:E8:D4:A7:A0:1D:24:B3:D6:1A
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336330303a3a2f34302d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:9b:0d:64:38:e4:ea:b8:ff:0e:4c:3e:cd:9f:63:73:35:
         af:33:f6:3e:a7:83:8b:bc:bc:d6:b3:0a:c7:3d:1f:f3:58:e7:
         8e:3a:a4:0f:62:22:7d:ed:c3:98:10:e4:8c:00:40:41:61:7d:
         09:d7:14:91:52:6d:72:6e:9b:79:45:15:16:b5:e4:57:7a:af:
         52:6b:62:b1:c5:55:77:79:4a:b0:25:48:61:30:18:0d:4b:c1:
         0d:b2:a5:a4:c5:27:8d:e5:ab:20:db:e3:41:98:28:b7:ff:03:
         21:04:31:e7:a8:fc:b7:d2:8d:c1:f5:08:ce:92:b4:e2:41:7a:
         e7:d7:09:0c:f6:c1:44:ae:58:8f:52:ae:81:01:34:3b:1d:d6:
         6b:07:97:47:fe:c1:6b:46:f1:c7:28:9c:3b:43:76:9c:48:3e:
         a8:f3:12:73:66:d1:4e:c5:18:ff:5d:09:7b:b0:52:2c:74:e2:
         9c:9f:2c:09:a3:e4:67:97:6d:56:67:c8:d3:5d:02:38:fb:a2:
         34:09:28:82:fb:91:23:57:aa:c5:69:98:73:25:42:e8:2b:ab:
         46:28:1c:5d:ab:9f:a4:d1:4e:7e:51:18:43:e4:2d:f7:41:9c:
         e8:d6:66:ca:ff:07:e1:75:c5:40:2f:ea:f0:9f:0f:53:3d:76:
         f9:71:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----