Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa
File:                     326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa (raw, json)
Hash identifier:          xCKU+JYqCbUMRLRJbLel11lgGXI4wXBqGuNwNhUxH28=
Subject key identifier:   8B:EA:2D:F6:DD:F4:C0:5B:A8:98:F6:8D:B0:D7:9E:F0:00:8D:D7:7C
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       6FEF77A15DD2188EF1E840BA33BFBEDCC079CA22
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa
Signing time:             Thu 20 Jun 2024 05:23:14 +0000
ROA not before:           Thu 20 Jun 2024 05:18:14 +0000
ROA not after:            Thu 19 Jun 2025 05:23:14 +0000
asID:                     212598
IP address blocks:        2a12:dd47:8320::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ef:77:a1:5d:d2:18:8e:f1:e8:40:ba:33:bf:be:dc:c0:79:ca:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:14 2024 GMT
            Not After : Jun 19 05:23:14 2025 GMT
        Subject: CN=8BEA2DF6DDF4C05BA898F68DB0D79EF0008DD77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:4f:a8:fd:f1:6c:96:98:92:92:be:18:ae:
                    47:86:99:27:2d:2b:41:44:09:ed:ca:db:e0:12:82:
                    17:ba:fe:6a:65:81:37:cd:6c:f4:71:75:11:72:10:
                    78:45:9a:ad:40:88:33:37:94:93:9d:45:ca:f9:a6:
                    ee:9e:93:20:23:98:10:39:b4:2a:d0:41:20:ee:48:
                    26:20:8c:41:9c:fa:d1:42:2f:5f:98:be:3d:48:2c:
                    e7:25:99:4b:ac:6b:6a:7e:2f:6b:fb:72:43:de:f5:
                    cd:8a:e6:79:dc:5e:f2:35:72:6d:c6:75:9d:5d:f2:
                    8e:3e:97:d9:1c:7f:0d:98:c4:02:d1:ce:b6:83:57:
                    55:53:1e:ba:79:75:fc:a4:30:df:d1:e9:f9:66:3a:
                    a6:47:cb:6e:aa:dc:50:01:36:9c:37:f7:45:55:d9:
                    52:69:cb:ce:b0:2e:28:a4:98:68:52:72:db:18:b0:
                    72:84:e0:f8:fd:a6:71:36:64:7f:cc:a1:0c:81:f5:
                    68:ff:32:4b:68:ae:43:23:ce:c1:10:33:cf:5e:51:
                    66:32:f1:73:ad:a4:cc:7a:13:dc:d0:55:71:65:f7:
                    ad:36:36:bb:9e:cb:48:80:fb:6d:13:dd:18:de:3f:
                    de:37:ec:c9:50:a3:8f:66:f4:b1:6e:10:44:26:19:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EA:2D:F6:DD:F4:C0:5B:A8:98:F6:8D:B0:D7:9E:F0:00:8D:D7:7C
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383332303a3a2f34342d3438203d3e20323132353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8320::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:39:32:af:22:1c:35:b3:40:5d:09:c5:dc:fc:ff:9d:f2:
         4e:08:d5:2e:b7:8b:a1:51:aa:00:48:f7:01:e4:7a:ec:f6:e7:
         ee:a2:57:ea:64:09:d9:82:04:34:8e:5e:e9:1c:41:ef:8e:f1:
         bd:8c:b6:63:d3:1d:52:b6:6a:58:3e:52:2f:f1:53:1e:94:02:
         b5:41:72:5e:82:52:10:9f:83:7f:27:22:61:72:cf:e3:4c:8b:
         f0:c7:ab:7d:71:f1:a7:92:6e:d7:7b:9e:be:87:eb:1c:fa:a4:
         1b:bb:29:39:94:e2:79:f5:80:4e:74:bf:aa:af:71:c7:ce:f9:
         cb:bb:da:ad:c7:4e:15:40:a4:8a:cd:d3:6d:3f:c7:b2:bf:f0:
         ec:1a:d8:a7:a2:50:b9:c8:b6:e2:a7:17:2a:2e:fa:76:f8:64:
         5b:63:35:5d:19:d3:3f:bf:4a:43:97:c9:28:d5:18:a9:1d:c7:
         b9:43:2b:2b:ef:bc:ce:19:01:cb:1c:92:e2:97:21:ef:a8:54:
         92:91:e3:d3:c6:39:97:a9:f1:1d:ea:02:49:12:2d:65:7c:b4:
         61:3e:e4:1b:df:0b:6a:58:96:22:28:09:cc:bd:fc:57:c6:22:
         22:7c:dc:b8:7d:0f:d8:60:c6:4d:d7:4f:53:4e:c3:f3:59:74:
         f3:bc:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----