Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa
File:                     326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa (raw, json)
Hash identifier:          Y1oWkIzLsnlkvBR390MO4C9PTMFjTOOfKP7VTqc8wEo=
Subject key identifier:   6D:0F:01:D3:13:D4:BA:5D:CA:C7:B7:52:D3:68:9D:94:AA:AC:58:6E
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       14F88B2D7CE65B7AAB33A1A3EA7FD8BB518CD3BA
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa
Signing time:             Thu 20 Jun 2024 05:23:30 +0000
ROA not before:           Thu 20 Jun 2024 05:18:30 +0000
ROA not after:            Thu 19 Jun 2025 05:23:30 +0000
asID:                     200240
IP address blocks:        2a12:dd47:8340::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f8:8b:2d:7c:e6:5b:7a:ab:33:a1:a3:ea:7f:d8:bb:51:8c:d3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:30 2024 GMT
            Not After : Jun 19 05:23:30 2025 GMT
        Subject: CN=6D0F01D313D4BA5DCAC7B752D3689D94AAAC586E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:c1:71:fd:8d:22:4f:bc:01:72:fb:6c:9b:
                    77:8c:26:a5:72:79:b2:b8:12:77:32:95:f8:4b:25:
                    ea:9f:be:5d:2c:82:b1:e2:b0:cf:70:14:ac:c2:c6:
                    ee:64:2f:d2:91:1a:b4:4a:e3:88:01:47:bb:75:f9:
                    27:3b:3b:87:fc:d7:44:df:0d:b6:a9:12:71:62:5d:
                    ee:ba:d9:76:23:da:52:54:70:62:e1:9d:29:1f:bb:
                    87:ac:b1:97:3e:59:91:83:ee:f4:4a:dd:fa:69:2d:
                    ff:d8:38:dc:9f:20:1a:bd:80:45:ba:ea:4d:76:4b:
                    b1:d9:5b:c5:de:e2:ce:d4:c2:e1:d7:e1:2d:f3:0c:
                    c2:77:14:54:23:89:f0:ca:01:8d:03:5c:d6:53:1d:
                    66:03:29:2c:f7:29:4a:b9:a2:8b:8f:21:6f:d4:fa:
                    6a:61:e5:b3:e6:b4:02:81:6d:92:22:88:1e:4a:a1:
                    1d:4f:99:de:ab:23:11:2d:4e:2e:ec:93:33:69:67:
                    b9:58:0b:39:d8:cc:79:2a:3a:62:1b:a0:5b:89:54:
                    fd:91:08:a7:26:7d:e3:2e:36:63:5d:4f:26:1d:07:
                    ec:58:23:5d:1f:13:8d:2b:e2:c9:b6:97:af:31:18:
                    5f:01:03:e6:07:4e:63:40:66:17:3b:05:38:c6:38:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:01:D3:13:D4:BA:5D:CA:C7:B7:52:D3:68:9D:94:AA:AC:58:6E
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383334303a3a2f34342d3438203d3e20323030323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8340::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:f3:34:80:36:83:d5:55:ac:f8:f5:ba:39:55:f0:6b:2d:
         3b:2a:65:e8:3d:f5:fd:c2:79:7d:0d:ae:e0:44:b9:a3:f2:25:
         4c:93:42:fd:35:78:7e:c2:7f:d6:40:cb:19:35:18:96:e1:39:
         11:2e:ef:0d:c0:ad:1d:b6:0e:a6:b4:6c:f8:67:3e:3a:6e:5c:
         9b:10:56:0b:f7:c9:d4:57:a2:93:44:ca:1c:6e:a9:7d:b5:34:
         66:c4:96:01:26:dd:75:62:52:7e:79:c8:ab:c2:d9:33:91:86:
         28:86:f3:a7:3e:79:5e:25:11:c7:e6:8d:74:93:89:19:25:b0:
         f0:9e:48:40:c7:24:2c:b6:63:cc:35:59:5f:5a:4d:6e:9d:72:
         20:18:d7:12:54:5b:39:c4:fb:8f:5b:d1:4b:56:fc:11:16:ee:
         db:21:9a:5c:0d:8c:88:cb:f6:97:87:fb:3d:6b:d3:45:c7:4e:
         47:e6:2f:75:61:a1:fa:89:60:ec:93:93:e7:6e:4c:3f:aa:66:
         47:dd:60:a7:65:1d:f7:7e:c8:38:48:fc:4a:a1:06:8e:db:95:
         19:bf:cd:61:b1:3a:77:6d:81:ad:32:47:8d:0f:b5:0d:fb:4c:
         65:bc:43:95:24:64:5d:18:41:cf:6d:1b:ff:c2:2e:23:9a:d8:
         91:0a:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----