Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa
File:                     326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa (raw, json)
Hash identifier:          XjgHIBKNeN0nE/vajQ/oYl3xVei8IZKi/uk24ZQNbyQ=
Subject key identifier:   48:74:DF:C1:59:26:C4:F4:9D:82:E9:64:36:35:24:AB:91:99:AC:15
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       5C0907C56600E4EBBD7E0FCB64E2C504FF4FA86D
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa
Signing time:             Thu 20 Jun 2024 05:23:29 +0000
ROA not before:           Thu 20 Jun 2024 05:18:29 +0000
ROA not after:            Thu 19 Jun 2025 05:23:29 +0000
asID:                     212483
IP address blocks:        2a12:dd47:80b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:09:07:c5:66:00:e4:eb:bd:7e:0f:cb:64:e2:c5:04:ff:4f:a8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:29 2024 GMT
            Not After : Jun 19 05:23:29 2025 GMT
        Subject: CN=4874DFC15926C4F49D82E964363524AB9199AC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:ac:f3:af:f0:05:4f:11:9c:a8:a8:83:10:
                    c8:48:47:03:f7:d9:ef:25:57:1b:13:13:1b:37:f7:
                    2f:31:2f:fa:8f:75:25:0b:71:54:39:03:48:1f:72:
                    d3:a8:be:5f:dd:c7:a1:1a:23:5a:a3:ed:5c:44:67:
                    1c:e4:31:16:18:c3:5f:78:44:91:6b:2e:c1:25:36:
                    17:88:59:7c:bf:7e:7d:a8:11:34:79:26:dd:1a:fd:
                    cd:e7:ad:89:d9:15:96:cb:a7:82:56:b4:5b:f6:6d:
                    dc:f3:cf:1b:5b:8b:3d:35:53:ec:34:46:ab:1d:25:
                    75:d8:d1:63:e2:8a:83:fa:aa:2b:29:9e:b4:3c:8d:
                    c6:de:1c:b5:ea:d7:22:6b:fb:3e:64:9f:71:f6:81:
                    87:f1:e9:38:d8:23:ee:5d:a4:17:ef:63:8e:9b:9f:
                    96:c2:b6:2e:6d:d5:c7:ff:6f:47:0f:39:bb:8b:42:
                    49:5d:5f:d9:63:72:ed:41:32:d8:88:05:e4:94:f1:
                    8d:43:0c:c9:4b:e6:db:ba:ba:8c:15:cd:56:52:f8:
                    60:44:7e:8f:59:6b:17:ed:55:3c:67:24:45:52:c6:
                    af:f5:37:45:d8:fa:d1:af:b0:38:7b:5f:a0:74:f7:
                    a8:e1:0d:56:6d:63:1b:e2:91:3c:75:79:5c:07:ae:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:DF:C1:59:26:C4:F4:9D:82:E9:64:36:35:24:AB:91:99:AC:15
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383062303a3a2f34342d3438203d3e20323132343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:a2:51:dd:de:49:2a:cb:20:81:54:1c:d2:96:70:7e:97:ce:
         e3:b4:fe:a9:98:b9:7f:8b:d0:37:7a:a8:da:95:ef:d0:15:f5:
         40:24:86:10:39:49:e2:f5:cc:aa:15:36:6a:59:12:30:e1:37:
         d7:7a:0d:6b:26:ee:09:0c:af:b4:d0:d8:9b:9c:8b:a6:f3:f3:
         82:99:96:1d:58:2d:b9:59:59:27:fd:ab:c2:c9:c3:1b:cd:28:
         de:fa:90:e0:fb:a4:cc:bc:42:ef:96:80:8f:f9:e8:38:33:50:
         d9:e9:35:8d:40:6e:6f:31:78:7e:dc:1f:86:50:17:dd:aa:fb:
         1c:9b:ce:19:c0:b7:b3:eb:eb:04:2e:de:35:ea:5c:9e:4c:92:
         6b:98:d6:a4:0d:5d:09:bf:24:25:4b:b6:7c:ed:d8:d6:b9:7d:
         8d:08:e7:a1:48:86:4b:5d:cd:cf:4d:db:5c:18:ba:48:24:90:
         9b:47:33:24:e5:91:ab:f7:3d:42:ad:c9:a7:93:b1:e9:51:32:
         fd:b4:05:77:81:9a:aa:a0:2b:5a:6e:3b:a3:fe:94:0c:4a:e1:
         fa:d3:8d:59:fc:8d:2a:c0:93:de:49:01:97:6a:d0:bf:15:73:
         e0:96:6b:d0:9c:4f:c2:af:57:ca:ba:4d:b3:d1:d9:e2:80:68:
         95:29:f3:3c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXAkHxWYA5Ou9fg/LZOLFBP9PqG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MjlaFw0yNTA2MTkwNTIzMjlaMDMxMTAvBgNV
BAMTKDQ4NzRERkMxNTkyNkM0RjQ5RDgyRTk2NDM2MzUyNEFCOTE5OUFDMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ26zzr/AFTxGcqKiDEMhIRwP3
2e8lVxsTExs39y8xL/qPdSULcVQ5A0gfctOovl/dx6EaI1qj7VxEZxzkMRYYw194
RJFrLsElNheIWXy/fn2oETR5Jt0a/c3nrYnZFZbLp4JWtFv2bdzzzxtbiz01U+w0
RqsdJXXY0WPiioP6qispnrQ8jcbeHLXq1yJr+z5kn3H2gYfx6TjYI+5dpBfvY46b
n5bCti5t1cf/b0cPObuLQkldX9ljcu1BMtiIBeSU8Y1DDMlL5tu6uowVzVZS+GBE
fo9ZaxftVTxnJEVSxq/1N0XY+tGvsDh7X6B096jhDVZtYxvikTx1eVwHrgevAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUSHTfwVkmxPSdgulkNjUkq5GZrBUwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzgzMDYyMzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMjMxMzIzNDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HgLAwDQYJKoZIhvcN
AQELBQADggEBAKOiUd3eSSrLIIFUHNKWcH6XzuO0/qmYuX+L0Dd6qNqV79AV9UAk
hhA5SeL1zKoVNmpZEjDhN9d6DWsm7gkMr7TQ2Juci6bz84KZlh1YLblZWSf9q8LJ
wxvNKN76kOD7pMy8Qu+WgI/56DgzUNnpNY1Abm8xeH7cH4ZQF92q+xybzhnAt7Pr
6wQu3jXqXJ5MkmuY1qQNXQm/JCVLtnzt2Na5fY0I56FIhktdzc9N21wYukgkkJtH
MyTlkav3PUKtyaeTselRMv20BXeBmqqgK1puO6P+lAxK4frTjVn8jSrAk95JAZdq
0L8Vc+CWa9CcT8KvV8q6TbPR2eKAaJUp8zw=
-----END CERTIFICATE-----