Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386533303a3a2f34342d3438203d3e20323131333538.roa
File:                     326131323a646434373a386533303a3a2f34342d3438203d3e20323131333538.roa (raw, json)
Hash identifier:          QlJhsLdlpMmOsbRmrSZSlkUZOQnbBUdR1DJS04mdoJc=
Subject key identifier:   C4:41:DF:A4:9F:3A:5C:A4:4E:3B:39:51:B8:03:88:22:9A:7B:66:5E
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       41411C070257A866BD82E8D102C5838D355054D5
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386533303a3a2f34342d3438203d3e20323131333538.roa
Signing time:             Thu 20 Jun 2024 05:23:30 +0000
ROA not before:           Thu 20 Jun 2024 05:18:30 +0000
ROA not after:            Thu 19 Jun 2025 05:23:30 +0000
asID:                     211358
IP address blocks:        2a12:dd47:8e30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:1c:07:02:57:a8:66:bd:82:e8:d1:02:c5:83:8d:35:50:54:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:30 2024 GMT
            Not After : Jun 19 05:23:30 2025 GMT
        Subject: CN=C441DFA49F3A5CA44E3B3951B80388229A7B665E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:8b:b7:82:e2:4b:28:8c:c9:5d:cc:1d:1e:
                    bc:c1:51:0c:aa:8a:c4:82:b5:39:82:51:6e:eb:1f:
                    1e:9d:aa:af:c4:15:a6:66:35:d9:23:f6:64:ef:3e:
                    f3:10:d9:09:2c:6b:e4:58:d4:0d:e2:11:f4:2c:e0:
                    93:7a:40:c1:f0:13:d8:bd:1c:5d:52:c9:5f:58:cf:
                    01:f7:75:22:ca:d3:37:b3:d6:93:12:5e:c5:52:b3:
                    a5:3e:f6:f0:5d:9b:1c:15:28:97:8c:02:fa:df:d4:
                    c5:c6:9b:06:c3:5b:f4:01:d1:f4:91:51:80:bb:b2:
                    61:b3:36:a1:de:50:41:f3:ff:1e:23:2b:0f:8d:24:
                    b3:73:eb:44:99:5d:4c:29:82:ea:bf:47:72:df:5b:
                    dd:6f:51:c5:ef:64:99:5e:e4:f7:7a:28:f5:0d:5d:
                    0a:00:d4:04:66:df:ba:d8:74:a8:bc:e2:88:93:52:
                    0b:94:ca:25:71:44:15:6a:ad:6c:f2:7b:01:cc:b4:
                    b1:96:f5:b3:e3:d5:fc:88:07:8b:43:24:45:cb:08:
                    96:96:51:06:91:1a:03:8e:07:b7:84:bb:89:50:b7:
                    27:1d:66:5d:b3:ef:b0:cc:e6:f1:a9:87:12:99:74:
                    05:63:e4:14:d3:56:d0:d7:24:5b:03:a0:20:5e:8b:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:41:DF:A4:9F:3A:5C:A4:4E:3B:39:51:B8:03:88:22:9A:7B:66:5E
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386533303a3a2f34342d3438203d3e20323131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:68:80:a6:e0:90:93:1b:70:25:b6:46:f5:82:d0:4c:05:
         31:cc:8c:d2:a4:46:18:34:7c:08:21:21:15:5c:a8:52:b7:d1:
         09:f8:2a:6b:c5:db:f1:a8:01:2e:17:9e:f7:14:dc:8c:3c:24:
         17:76:6b:27:86:ff:09:16:ff:a4:0e:c4:c2:1d:e5:7f:35:8f:
         49:df:a8:d9:e2:bc:20:ee:dd:04:97:53:4e:2c:fe:b3:36:fd:
         14:05:f8:28:dd:13:d1:e3:c0:2d:f8:bc:ec:cb:a7:c0:64:66:
         85:08:41:8b:4e:56:27:db:37:1a:2f:d7:29:78:de:5f:9b:a5:
         32:dc:a3:ad:63:99:ad:fa:64:d3:01:04:b4:bc:0e:ca:f1:91:
         bc:7a:bb:0b:ed:60:fa:26:84:d7:cc:25:1b:f7:65:12:1a:81:
         cf:3f:7f:1c:fe:32:9c:ff:23:3a:95:3b:d6:d6:37:fe:05:d8:
         57:3a:0f:72:cc:8f:0d:a1:1b:e8:40:c9:a2:8e:02:e8:e0:4a:
         6d:28:bf:17:56:f0:10:24:dd:09:a4:ce:5d:44:2d:ea:1f:31:
         96:5d:e4:b2:9d:43:f6:41:ea:f3:21:34:d8:6f:0b:f4:bb:d3:
         98:a5:7f:4f:b1:40:f3:e3:77:3f:aa:17:e6:37:3c:91:19:03:
         9c:92:08:25
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQUEcBwJXqGa9gujRAsWDjTVQVNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MzBaFw0yNTA2MTkwNTIzMzBaMDMxMTAvBgNV
BAMTKEM0NDFERkE0OUYzQTVDQTQ0RTNCMzk1MUI4MDM4ODIyOUE3QjY2NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlou3guJLKIzJXcwdHrzBUQyq
isSCtTmCUW7rHx6dqq/EFaZmNdkj9mTvPvMQ2Qksa+RY1A3iEfQs4JN6QMHwE9i9
HF1SyV9YzwH3dSLK0zez1pMSXsVSs6U+9vBdmxwVKJeMAvrf1MXGmwbDW/QB0fSR
UYC7smGzNqHeUEHz/x4jKw+NJLNz60SZXUwpguq/R3LfW91vUcXvZJle5Pd6KPUN
XQoA1ARm37rYdKi84oiTUguUyiVxRBVqrWzyewHMtLGW9bPj1fyIB4tDJEXLCJaW
UQaRGgOOB7eEu4lQtycdZl2z77DM5vGphxKZdAVj5BTTVtDXJFsDoCBeizuFAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUxEHfpJ86XKROOzlRuAOIIpp7Zl4wHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzg2NTMzMzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMjMxMzEzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HjjAwDQYJKoZIhvcN
AQELBQADggEBABH7aICm4JCTG3Altkb1gtBMBTHMjNKkRhg0fAghIRVcqFK30Qn4
KmvF2/GoAS4XnvcU3Iw8JBd2ayeG/wkW/6QOxMId5X81j0nfqNnivCDu3QSXU04s
/rM2/RQF+CjdE9HjwC34vOzLp8BkZoUIQYtOVifbNxov1yl43l+bpTLco61jma36
ZNMBBLS8Dsrxkbx6uwvtYPomhNfMJRv3ZRIagc8/fxz+Mpz/IzqVO9bWN/4F2Fc6
D3LMjw2hG+hAyaKOAujgSm0ovxdW8BAk3Qmkzl1ELeofMZZd5LKdQ/ZB6vMhNNhv
C/S705ilf0+xQPPjdz+qF+Y3PJEZA5ySCCU=
-----END CERTIFICATE-----