Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
File:                     326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa (raw, json)
Hash identifier:          Q+bFC4VS1xTlSPsNZYCH0ugeHdTqfEbG4TktgA9K9+4=
Subject key identifier:   66:40:2D:81:31:ED:5A:84:20:63:5D:35:FB:1E:D1:C3:DF:2E:B2:66
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       281BE877C8705AA7AC5ABA96D14F8CB4E78AB838
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa
Signing time:             Thu 20 Jun 2024 05:23:31 +0000
ROA not before:           Thu 20 Jun 2024 05:18:31 +0000
ROA not after:            Thu 19 Jun 2025 05:23:31 +0000
asID:                     202911
IP address blocks:        2a12:dd47:8210::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1b:e8:77:c8:70:5a:a7:ac:5a:ba:96:d1:4f:8c:b4:e7:8a:b8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:31 2024 GMT
            Not After : Jun 19 05:23:31 2025 GMT
        Subject: CN=66402D8131ED5A8420635D35FB1ED1C3DF2EB266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:2b:d3:ee:83:ea:f0:da:af:73:8d:56:c9:
                    0f:c5:13:0f:f8:cf:6d:2b:01:21:d0:5a:8d:ad:44:
                    c1:e7:4e:97:fe:36:b4:f6:f8:3a:e7:dd:10:c6:c8:
                    c0:ba:6a:db:ba:b5:a8:73:76:61:5b:32:0f:82:45:
                    1d:cf:f0:48:d8:fd:b0:18:ff:2e:b2:45:79:16:f9:
                    cc:a0:f8:7d:a1:e9:a0:81:f0:41:b7:17:61:3b:60:
                    f4:0e:87:66:2e:df:4f:b4:c9:90:62:59:89:11:64:
                    de:5b:e3:65:17:2f:50:6b:54:1b:18:c9:86:f9:72:
                    94:84:1e:f3:14:47:91:4e:be:8a:ed:70:c0:71:54:
                    d4:5c:89:a5:17:97:22:a8:d6:8c:8c:64:46:27:67:
                    23:d2:41:eb:9b:a6:4b:f9:df:20:cd:b6:ec:03:12:
                    45:00:40:7d:15:dd:94:25:75:f3:56:0d:8d:dd:32:
                    05:70:86:f0:21:f3:73:04:b1:75:c5:a8:88:8e:9d:
                    d4:12:77:58:cf:76:52:09:54:9d:64:f1:8a:d6:21:
                    78:16:55:4d:a0:59:0c:9c:d5:6f:b5:22:42:47:15:
                    60:5d:f5:51:c3:f7:c3:b1:a9:e1:47:63:cd:55:6d:
                    d3:d2:15:c6:e7:7e:34:e9:90:48:7a:b2:17:3d:dc:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:40:2D:81:31:ED:5A:84:20:63:5D:35:FB:1E:D1:C3:DF:2E:B2:66
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383231303a3a2f34342d3438203d3e20323032393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:a8:fc:f5:41:5d:15:3d:1d:5e:9b:50:5b:3e:c6:75:0b:f7:
         3b:f2:81:73:a0:74:3e:80:93:13:a9:29:fb:44:a4:b9:6e:1d:
         59:7a:e1:db:6d:08:fc:3a:d9:04:35:25:f3:3d:f8:0f:1b:e1:
         25:4e:fb:9c:a3:51:6f:d7:0c:cf:bd:14:91:30:85:b4:7d:8e:
         b6:52:17:85:b4:16:0b:7c:7b:23:15:75:ba:84:3d:70:c2:6c:
         7a:96:2a:ea:01:67:2b:cc:16:10:b6:3c:5e:43:c3:a3:8f:0d:
         06:76:d6:e1:d1:f5:7f:4b:6d:67:88:59:e4:86:be:76:1b:c3:
         02:ab:44:c9:cc:84:05:de:ea:7b:5b:43:d2:15:3e:ef:51:94:
         bf:6d:b8:10:0d:1b:b1:ea:e9:76:42:38:62:bd:12:ba:9c:55:
         d1:ae:02:76:d9:c5:aa:ad:d9:cb:7d:89:b1:75:78:bb:a7:a3:
         2b:47:2e:d3:e6:15:3a:5c:19:68:0b:ea:11:5e:33:8c:19:c4:
         36:27:65:6d:ec:82:88:05:a1:c2:26:61:ab:3c:d5:6b:1d:86:
         e7:fd:f0:d0:68:e8:ca:23:f5:2e:ee:10:cd:63:40:72:35:41:
         ff:c4:e2:3c:51:f8:eb:ba:9f:63:3e:1e:71:86:0b:79:3f:88:
         ae:ac:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----