Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa
File:                     326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa (raw, json)
Hash identifier:          na35NIfDXN1VuqDZeaULZQ9PO49/wvbXwMSTSXZcx9g=
Subject key identifier:   4A:34:DE:EB:55:5E:68:0D:E3:25:18:13:46:69:B3:41:B4:3D:AC:50
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       17EC6199C510EBD0F75CF23B4D0F3220E908E642
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa
Signing time:             Thu 20 Jun 2024 05:23:13 +0000
ROA not before:           Thu 20 Jun 2024 05:18:13 +0000
ROA not after:            Thu 19 Jun 2025 05:23:13 +0000
asID:                     151338
IP address blocks:        2a12:dd47:8370::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ec:61:99:c5:10:eb:d0:f7:5c:f2:3b:4d:0f:32:20:e9:08:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:13 2024 GMT
            Not After : Jun 19 05:23:13 2025 GMT
        Subject: CN=4A34DEEB555E680DE32518134669B341B43DAC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:f9:30:4a:90:6d:6e:28:fd:30:b4:42:14:
                    2a:4e:40:fb:30:ef:77:a8:da:0c:aa:38:8e:13:cd:
                    f6:ff:84:ce:af:13:41:ca:fd:16:66:dd:53:5b:e1:
                    9f:0a:d6:f6:fa:e6:4f:d9:8a:88:02:9c:6d:40:48:
                    1e:77:5f:45:17:f5:95:d0:13:80:58:17:6b:a9:89:
                    e4:95:d5:7c:b7:f6:28:30:6c:52:13:bd:fb:73:9a:
                    ab:28:63:d3:3b:fd:18:e6:f7:eb:6a:84:26:21:06:
                    af:70:55:a7:59:eb:16:10:0f:fa:70:c7:cd:8e:25:
                    f6:f5:9a:30:b5:0a:f1:b4:45:cc:6c:8f:32:3b:73:
                    f2:65:ed:40:91:4a:4d:fc:a3:ae:77:a0:50:41:4a:
                    15:7c:0d:c2:b2:2c:50:c5:82:57:d0:bd:b0:19:75:
                    3d:fe:9f:86:37:d1:28:b7:58:2e:49:f5:4d:c9:60:
                    99:1f:c4:44:25:f4:e6:f9:ce:62:4b:a3:20:8d:72:
                    f9:ec:29:7f:32:d0:9c:77:c1:02:92:52:d1:cf:73:
                    b9:9b:39:0c:b7:bb:3e:99:bd:28:96:82:d9:c4:25:
                    25:d5:80:f4:72:e0:4f:12:38:d7:56:e7:9a:5d:f6:
                    17:d7:15:bf:fe:c6:06:3f:ff:92:ed:49:93:78:27:
                    92:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:34:DE:EB:55:5E:68:0D:E3:25:18:13:46:69:B3:41:B4:3D:AC:50
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8370::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:20:6c:4c:ba:d7:10:16:9b:19:46:9e:e0:e4:ac:03:2b:
         d2:49:7e:13:1b:1b:f1:0d:bd:6f:e6:99:79:ea:7d:2d:f7:4a:
         c0:f1:d1:a6:ac:b3:43:ee:21:c5:5f:1d:99:9a:77:17:ec:26:
         a0:65:f8:4f:51:9d:ce:94:41:28:96:fd:e6:5c:84:1e:1b:0c:
         f3:b4:db:69:0d:42:5c:9e:4c:5c:4f:9d:12:f6:b7:16:66:bf:
         e9:f8:ec:13:31:c6:a4:c8:4e:b0:0e:1e:7c:ba:b1:ce:12:31:
         6d:26:01:4e:b5:9a:39:13:93:72:4d:d2:a2:93:68:69:7a:bd:
         31:8d:14:fc:d7:22:e3:2e:c8:7d:52:e9:cb:c1:70:a7:22:ba:
         46:cb:e3:1b:17:4b:f4:cd:7e:a8:03:64:10:d8:23:57:cc:c3:
         34:1e:21:04:a1:ad:fe:8c:4f:34:56:bc:fc:da:88:a0:ac:e0:
         75:c0:f3:0e:b0:42:06:b9:d4:30:eb:95:b8:ac:a7:46:55:a4:
         e8:60:aa:e6:7f:a6:b9:3e:42:30:b4:ab:3f:df:4d:3f:8c:ec:
         90:e4:67:09:27:b6:08:63:d7:b6:d1:07:c7:5c:ee:d3:e5:7b:
         ab:02:4a:22:64:06:88:17:49:0a:e9:ac:47:ff:2a:27:c4:06:
         1d:1d:09:a8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUF+xhmcUQ69D3XPI7TQ8yIOkI5kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MTNaFw0yNTA2MTkwNTIzMTNaMDMxMTAvBgNV
BAMTKDRBMzRERUVCNTU1RTY4MERFMzI1MTgxMzQ2NjlCMzQxQjQzREFDNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5fkwSpBtbij9MLRCFCpOQPsw
73eo2gyqOI4Tzfb/hM6vE0HK/RZm3VNb4Z8K1vb65k/ZiogCnG1ASB53X0UX9ZXQ
E4BYF2upieSV1Xy39igwbFITvftzmqsoY9M7/Rjm9+tqhCYhBq9wVadZ6xYQD/pw
x82OJfb1mjC1CvG0RcxsjzI7c/Jl7UCRSk38o653oFBBShV8DcKyLFDFglfQvbAZ
dT3+n4Y30Si3WC5J9U3JYJkfxEQl9Ob5zmJLoyCNcvnsKX8y0Jx3wQKSUtHPc7mb
OQy3uz6ZvSiWgtnEJSXVgPRy4E8SONdW55pd9hfXFb/+xgY//5LtSZN4J5KXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUSjTe61VeaA3jJRgTRmmzQbQ9rFAwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzgzMzM3MzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMTM1MzEzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1Hg3AwDQYJKoZIhvcN
AQELBQADggEBAFtXIGxMutcQFpsZRp7g5KwDK9JJfhMbG/ENvW/mmXnqfS33SsDx
0aass0PuIcVfHZmadxfsJqBl+E9Rnc6UQSiW/eZchB4bDPO022kNQlyeTFxPnRL2
txZmv+n47BMxxqTITrAOHny6sc4SMW0mAU61mjkTk3JN0qKTaGl6vTGNFPzXIuMu
yH1S6cvBcKciukbL4xsXS/TNfqgDZBDYI1fMwzQeIQShrf6MTzRWvPzaiKCs4HXA
8w6wQga51DDrlbisp0ZVpOhgquZ/prk+QjC0qz/fTT+M7JDkZwkntghj17bRB8dc
7tPle6sCSiJkBogXSQrprEf/KifEBh0dCag=
-----END CERTIFICATE-----