Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383364303a3a2f34342d3438203d3e20323031333836.roa
File:                     326131323a646434373a383364303a3a2f34342d3438203d3e20323031333836.roa (raw, json)
Hash identifier:          P+5zGvIOAeTI2rip5MEw3qfFbek01zu9pW5YqCeE7H4=
Subject key identifier:   83:3B:B4:29:A4:CB:17:EE:77:3C:DC:C5:42:7D:14:84:BC:07:55:5B
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       01F098DC0C0FF529132E8ECBD1770BAE674FD12F
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383364303a3a2f34342d3438203d3e20323031333836.roa
Signing time:             Thu 20 Jun 2024 05:23:38 +0000
ROA not before:           Thu 20 Jun 2024 05:18:38 +0000
ROA not after:            Thu 19 Jun 2025 05:23:38 +0000
asID:                     201386
IP address blocks:        2a12:dd47:83d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:98:dc:0c:0f:f5:29:13:2e:8e:cb:d1:77:0b:ae:67:4f:d1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:38 2024 GMT
            Not After : Jun 19 05:23:38 2025 GMT
        Subject: CN=833BB429A4CB17EE773CDCC5427D1484BC07555B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:e2:50:79:04:6e:0d:76:3b:26:3f:ff:0e:
                    d7:55:48:64:a9:1b:15:10:47:7b:e9:8c:6e:8f:b1:
                    c1:c5:2f:c4:1c:82:4f:45:28:e1:41:a3:c1:75:e2:
                    63:08:88:43:fe:8e:ad:cb:95:76:3f:bd:2a:94:bc:
                    09:fd:cd:4b:3f:ad:49:2f:4a:3b:b2:f9:25:f3:52:
                    1e:e2:24:ed:11:c7:c0:47:e8:c0:93:0a:f9:57:7d:
                    99:72:20:7a:94:a0:24:aa:71:c7:c2:82:7c:f9:79:
                    79:95:25:64:2f:58:bb:cc:fe:79:dc:2e:27:39:2d:
                    2e:7e:f8:d6:dc:ec:f2:d5:b9:c5:8c:f3:d4:8b:54:
                    c8:cf:53:85:7a:1e:d6:ec:c8:1a:ef:a1:45:49:a6:
                    b4:ba:f0:48:a4:84:fc:aa:e2:44:6e:54:41:cb:4d:
                    da:ae:7f:74:69:84:b6:26:19:5f:2c:99:f9:fe:85:
                    12:fb:c9:73:99:22:d4:45:01:cf:1e:c1:09:ce:6f:
                    46:e9:2a:68:ac:e5:ef:6c:ca:38:c8:c6:ca:06:fb:
                    54:5c:28:d7:f4:d1:f2:21:f6:2b:e0:3e:76:4e:bf:
                    c9:5a:8c:dc:e9:7b:c6:cf:3b:dd:e3:b9:19:13:57:
                    9d:8b:fe:2c:0e:8e:ec:77:c1:2a:83:54:14:a0:cf:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3B:B4:29:A4:CB:17:EE:77:3C:DC:C5:42:7D:14:84:BC:07:55:5B
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383364303a3a2f34342d3438203d3e20323031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:3e:d5:b2:db:a7:4d:4d:b8:19:1e:97:f1:24:d2:7c:e6:
         ea:4e:17:bf:b6:0b:83:54:e7:57:04:0f:8b:3b:a6:9a:fb:6c:
         ad:1e:2c:2f:16:85:64:58:40:26:04:a0:db:dd:16:9d:6f:1d:
         10:57:48:28:26:20:18:19:27:31:c6:30:d5:6a:22:ee:08:f2:
         52:59:1a:ae:f3:89:10:a6:ec:38:ca:2f:bf:16:56:61:01:c7:
         c8:f7:cd:c9:8b:1e:8d:78:56:c0:8f:cd:3a:5a:88:6f:49:03:
         73:dc:bb:99:a9:e8:a3:fb:05:bf:bb:ba:16:b6:26:be:2e:09:
         5e:1e:98:56:f4:74:d0:8b:57:83:da:bd:1e:34:3b:0d:ac:4a:
         a7:0e:cf:9b:b2:46:43:85:06:31:e1:29:45:17:36:c0:c1:7f:
         8e:19:79:13:c4:95:fe:5a:93:a2:be:4b:0f:e0:c2:1f:a0:01:
         8f:a6:b4:c7:c7:2e:01:3d:6d:fa:9e:5a:33:3a:f7:78:1b:6e:
         fc:05:2b:b0:55:5d:f2:6b:b3:95:00:b3:47:42:5d:71:f0:1a:
         ef:3e:cb:19:a1:80:2a:a2:46:72:ad:2a:d5:33:f7:c2:d3:d3:
         19:05:01:e8:21:7c:88:39:ff:aa:6c:32:b6:91:27:14:29:e1:
         fa:a3:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----