Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa
File:                     326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa (raw, json)
Hash identifier:          9ybcVrMYxZV2EkOXHz3Lr8uhaqi52fAXNMhZmFZDW/A=
Subject key identifier:   D8:2F:9E:E3:90:63:17:0B:70:FB:7B:A4:6B:5D:04:A1:6D:B5:3F:A5
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       161619A3D1BFF1176C254B91522F1EBC1FD64A8D
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa
Signing time:             Thu 20 Jun 2024 05:23:39 +0000
ROA not before:           Thu 20 Jun 2024 05:18:39 +0000
ROA not after:            Thu 19 Jun 2025 05:23:39 +0000
asID:                     200021
IP address blocks:        2a12:dd47:5c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:16:19:a3:d1:bf:f1:17:6c:25:4b:91:52:2f:1e:bc:1f:d6:4a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:39 2024 GMT
            Not After : Jun 19 05:23:39 2025 GMT
        Subject: CN=D82F9EE39063170B70FB7BA46B5D04A16DB53FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:ad:1f:3e:22:69:19:69:33:b9:3a:cc:05:
                    3b:20:8e:b0:fb:69:25:c1:27:18:e8:31:48:5a:72:
                    e7:c9:4e:db:93:22:7f:fc:44:88:ad:1d:8c:30:96:
                    41:56:80:dd:7e:18:33:69:f9:a6:5d:7e:be:71:eb:
                    a4:29:e8:8e:1d:b0:0c:f7:40:ff:d0:65:f3:d1:ad:
                    80:69:b2:91:15:ed:7f:1a:96:ee:d8:7f:96:6e:89:
                    0a:ea:55:5c:ae:bf:d6:86:d7:82:37:a9:5b:2e:f6:
                    5e:cd:77:d2:06:fc:11:34:ea:c0:54:2b:90:4d:79:
                    ea:47:7e:16:ad:ee:e3:9f:49:6f:1d:84:ac:87:7b:
                    eb:9f:38:ff:a6:51:fd:58:3c:64:07:73:db:70:5e:
                    39:15:2d:31:22:d3:e7:53:71:f3:99:91:6e:d3:60:
                    33:d9:ad:19:de:a1:26:31:8e:7a:29:f5:39:66:10:
                    8a:f9:b9:57:30:06:8d:73:f6:32:62:00:67:a7:14:
                    21:ea:d3:91:2b:2f:9a:cc:f8:10:dd:7d:bf:26:5d:
                    ce:69:ce:74:88:86:7a:12:dc:30:1a:53:eb:99:16:
                    0b:99:1f:d5:f1:18:7f:d7:9e:c7:7d:6b:57:5f:3d:
                    6f:0e:bf:99:6a:c3:47:1c:62:cc:bc:06:ae:dc:bf:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2F:9E:E3:90:63:17:0B:70:FB:7B:A4:6B:5D:04:A1:6D:B5:3F:A5
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a356330303a3a2f34302d3438203d3e20323030303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:99:17:1d:8e:72:b4:cd:d2:2e:86:71:2a:82:5f:f4:e1:
         40:5e:54:2a:ef:cd:af:67:b1:3d:e8:de:51:c5:d1:03:8e:4b:
         e9:51:52:41:1e:bd:1e:5a:69:a8:6f:ea:1d:61:01:9c:e3:9d:
         bb:87:5f:75:31:ed:d7:75:f7:60:88:a6:fd:df:b9:19:81:0a:
         08:6c:8d:75:7b:1f:3e:d7:e4:72:18:ee:4c:0d:bc:1d:5f:76:
         52:b2:f4:27:cd:71:36:46:39:73:55:0f:e4:14:bd:a8:bd:d5:
         43:2b:c5:ba:a1:e1:a6:e2:0f:1b:d9:42:f6:17:16:b7:36:84:
         73:5e:7e:cc:8c:04:9c:5f:ed:56:03:3f:27:d4:bd:64:37:06:
         50:41:de:70:36:cc:50:81:2c:73:2b:05:54:1e:50:57:7a:69:
         dc:d9:64:0d:0e:85:fb:c6:34:c1:29:17:6e:af:86:d3:48:30:
         da:32:d5:0b:23:32:fb:2e:92:e0:33:38:ea:d3:cc:ac:45:76:
         5e:54:ff:64:f7:c2:10:21:0d:7b:d1:de:83:9b:60:a5:d6:dd:
         3f:c4:58:4c:9e:bc:8c:67:fa:42:94:35:5b:f0:fe:bb:7b:17:
         5b:e8:a4:00:ca:2a:f6:94:5e:98:0b:7d:44:05:b2:83:45:28:
         9b:b2:d6:6e
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUFhYZo9G/8RdsJUuRUi8evB/WSo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MzlaFw0yNTA2MTkwNTIzMzlaMDMxMTAvBgNV
BAMTKEQ4MkY5RUUzOTA2MzE3MEI3MEZCN0JBNDZCNUQwNEExNkRCNTNGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimq0fPiJpGWkzuTrMBTsgjrD7
aSXBJxjoMUhacufJTtuTIn/8RIitHYwwlkFWgN1+GDNp+aZdfr5x66Qp6I4dsAz3
QP/QZfPRrYBpspEV7X8alu7Yf5ZuiQrqVVyuv9aG14I3qVsu9l7Nd9IG/BE06sBU
K5BNeepHfhat7uOfSW8dhKyHe+ufOP+mUf1YPGQHc9twXjkVLTEi0+dTcfOZkW7T
YDPZrRneoSYxjnop9TlmEIr5uVcwBo1z9jJiAGenFCHq05ErL5rM+BDdfb8mXc5p
znSIhnoS3DAaU+uZFguZH9XxGH/Xnsd9a1dfPW8Ov5lqw0ccYsy8Bq7cv50JAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU2C+e45BjFwtw+3uka10EoW21P6UwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzU2MzMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzAzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HXDANBgkqhkiG9w0B
AQsFAAOCAQEAYdiZFx2OcrTN0i6GcSqCX/ThQF5UKu/Nr2exPejeUcXRA45L6VFS
QR69HlppqG/qHWEBnOOdu4dfdTHt13X3YIim/d+5GYEKCGyNdXsfPtfkchjuTA28
HV92UrL0J81xNkY5c1UP5BS9qL3VQyvFuqHhpuIPG9lC9hcWtzaEc15+zIwEnF/t
VgM/J9S9ZDcGUEHecDbMUIEscysFVB5QV3pp3NlkDQ6F+8Y0wSkXbq+G00gw2jLV
CyMy+y6S4DM46tPMrEV2XlT/ZPfCECENe9Heg5tgpdbdP8RYTJ68jGf6QpQ1W/D+
u3sXW+ikAMoq9pRemAt9RAWyg0Uom7LWbg==
-----END CERTIFICATE-----