Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
File:                     326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa (raw, json)
Hash identifier:          hZlMmgg+X5bdVq7PsLVP5fsY4Xv2/Nv5asTQfguFrCI=
Subject key identifier:   10:0D:E9:40:E9:0D:3C:CE:3B:7D:18:8C:1A:29:C9:76:B4:01:D5:E7
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       16D66C93FBCBBBC6508FF581B2B45F2692D13202
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa
Signing time:             Thu 20 Jun 2024 05:23:12 +0000
ROA not before:           Thu 20 Jun 2024 05:18:12 +0000
ROA not after:            Thu 19 Jun 2025 05:23:12 +0000
asID:                     211233
IP address blocks:        2a12:dd47:8050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d6:6c:93:fb:cb:bb:c6:50:8f:f5:81:b2:b4:5f:26:92:d1:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:12 2024 GMT
            Not After : Jun 19 05:23:12 2025 GMT
        Subject: CN=100DE940E90D3CCE3B7D188C1A29C976B401D5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:35:fe:13:9c:a7:8b:9b:b8:f3:7b:70:02:
                    63:3a:6f:26:9c:b8:aa:e0:96:2a:34:3b:0c:b0:db:
                    63:5f:a4:d1:bf:a6:55:58:b7:0c:44:1e:93:53:0d:
                    d2:4e:12:a0:e6:b0:03:2c:76:c5:b3:e7:aa:c3:42:
                    e3:b6:90:44:f0:a5:50:25:4e:55:22:0f:d1:14:6a:
                    30:17:72:a3:42:a5:26:81:3e:49:07:be:64:2b:13:
                    c5:75:c3:4b:c7:91:58:82:4d:18:2e:b9:b3:89:dc:
                    d9:38:54:54:d9:a1:ff:79:cf:cd:c4:c4:7f:7f:ed:
                    d3:62:5d:23:3c:3d:51:20:f0:84:ac:ae:dd:40:e9:
                    b2:cc:93:eb:72:89:8d:57:48:6e:69:42:2a:1b:9f:
                    e8:4c:41:89:a9:cb:75:26:b6:8b:2d:4c:dc:92:d4:
                    b8:79:7a:fd:c3:f9:03:e3:bf:f7:5f:ef:03:1d:89:
                    d9:a8:bb:ce:6b:0b:a2:3e:9b:d3:1f:5d:db:73:b8:
                    b2:b2:f3:e6:37:cd:af:83:6f:7b:f9:86:29:a8:29:
                    98:cd:e3:e1:ef:f9:bb:5c:1c:24:53:47:cd:81:32:
                    5d:0d:4d:2c:fe:bc:34:e7:68:2b:ed:92:04:4d:e5:
                    34:f4:e6:ea:42:63:ee:20:1e:2d:c0:80:4b:75:d1:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:E9:40:E9:0D:3C:CE:3B:7D:18:8C:1A:29:C9:76:B4:01:D5:E7
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383035303a3a2f34342d3438203d3e20323131323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:0b:a2:74:15:26:ba:25:1b:fc:0b:d4:ea:93:29:98:fb:
         f2:7f:f1:f2:5e:ec:c9:47:d2:ca:d8:84:83:bd:3e:bf:2d:8c:
         1d:d4:4c:cc:b6:4f:e0:e0:11:7b:ed:88:2d:01:ac:8f:15:7a:
         5e:6f:fb:b0:20:b6:00:ca:f7:3b:d9:58:7f:6b:89:74:0e:03:
         26:e6:76:44:a4:df:7d:62:ac:bf:0d:c3:05:28:f9:81:e0:ff:
         15:62:5a:eb:9d:6e:81:32:12:5d:3f:3a:b6:d3:83:aa:b8:60:
         1d:cf:04:4d:6f:b1:c1:fc:ac:e9:31:c1:aa:e3:a0:a0:01:de:
         78:f5:1d:af:07:45:4d:25:b1:24:d9:02:ee:7a:40:fe:4a:e7:
         2e:16:22:cb:d7:4d:db:fe:5e:5d:d1:7c:1f:a3:27:c0:62:d2:
         f2:c9:3b:4f:0b:05:30:6f:e0:45:2b:bc:c2:60:4e:38:31:42:
         56:a9:0c:48:10:98:93:4c:50:37:cb:95:5d:70:dc:a6:9d:68:
         40:e5:55:25:33:79:24:f0:83:f4:32:d0:f2:bb:a7:3b:53:fa:
         0d:f9:47:38:f1:06:65:da:f6:53:09:0d:53:f7:ac:aa:e5:e1:
         b9:ab:7f:51:bb:d0:e7:73:53:ae:f8:43:62:bc:67:fc:e9:f5:
         50:5a:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----