Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa
File:                     326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa (raw, json)
Hash identifier:          INhEZRZJUktZA4UkzJ9HeTaCYt3hL9CF7jchQCKpP4g=
Subject key identifier:   DA:95:6B:73:4A:BD:B2:93:3E:7B:CE:01:E9:B9:8C:28:A1:35:76:C4
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       7DF8C6A6E077393C300DB85FCD39FF291263289A
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa
Signing time:             Thu 20 Jun 2024 05:23:36 +0000
ROA not before:           Thu 20 Jun 2024 05:18:36 +0000
ROA not after:            Thu 19 Jun 2025 05:23:36 +0000
asID:                     198734
IP address blocks:        2a12:dd47:d500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:c6:a6:e0:77:39:3c:30:0d:b8:5f:cd:39:ff:29:12:63:28:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:36 2024 GMT
            Not After : Jun 19 05:23:36 2025 GMT
        Subject: CN=DA956B734ABDB2933E7BCE01E9B98C28A13576C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:ac:49:c7:98:d0:1d:b5:13:c5:e5:f3:23:
                    2f:b5:0e:46:5c:8b:4d:19:7d:00:8a:7f:53:e3:7c:
                    ad:46:37:14:7d:49:74:86:be:19:0b:ad:97:60:fc:
                    1a:f9:ad:f2:bc:4f:52:8a:42:3a:c8:e4:ad:41:55:
                    dc:09:fb:9f:d4:2f:d9:a7:96:dd:17:64:c9:c4:ab:
                    d2:e4:f7:da:06:9f:c7:f5:51:6e:68:c2:9a:31:b8:
                    9e:8b:77:af:9c:8a:71:22:06:45:d3:96:e6:ec:4e:
                    b7:04:58:c8:82:91:d2:da:50:68:db:c3:65:57:08:
                    d4:fb:9f:b3:82:2c:68:c5:1b:9a:fb:d4:f4:e0:01:
                    de:eb:07:31:89:4e:4e:bf:64:2d:59:c6:f9:1f:45:
                    f0:3a:a4:3d:66:f0:96:b3:5c:9c:51:10:4d:70:00:
                    9e:fa:8a:f6:3b:9e:c8:92:b8:bb:3c:73:63:51:bb:
                    34:58:63:3f:93:5d:f7:56:34:38:0c:3a:fe:4e:47:
                    aa:d4:d2:b6:37:40:b8:01:c6:cd:ba:35:c9:06:9e:
                    3b:39:89:75:82:0a:07:3d:25:cc:08:8b:97:5b:e6:
                    4f:39:29:5a:6c:b6:21:8e:d7:6c:01:55:03:81:19:
                    a2:0b:d5:fc:65:59:9f:fe:dc:89:27:18:33:e5:93:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:6B:73:4A:BD:B2:93:3E:7B:CE:01:E9:B9:8C:28:A1:35:76:C4
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:d6:61:1a:64:6e:2d:84:2a:88:36:60:94:8c:93:63:97:
         0b:39:3a:eb:66:49:b3:61:e5:45:e3:85:b4:4e:6e:5a:36:22:
         2a:95:f0:bb:b9:8b:5f:1e:c2:7c:1e:54:59:c4:bb:03:6b:92:
         6e:ae:92:e9:d9:2c:7d:0f:f7:0f:ff:d0:1a:0e:2c:9b:62:6c:
         0a:de:38:c8:ec:96:4b:42:88:34:f5:33:18:cd:21:59:87:2a:
         6b:d0:45:40:bf:46:c6:03:19:a9:32:29:c8:ae:5d:34:f8:90:
         1d:4f:e1:10:51:da:e7:cc:19:af:8e:9b:de:64:ee:da:37:2f:
         a4:af:b2:25:29:23:85:49:7f:fb:98:40:da:2e:3b:8c:e3:e4:
         60:63:30:3d:05:1f:77:59:21:53:af:67:56:d1:06:c5:02:cd:
         41:d5:07:44:d1:b4:f6:bb:93:36:7a:2f:b2:49:10:bb:07:1b:
         e6:55:05:68:62:10:b8:e7:87:d2:8a:c2:dc:81:cb:2e:46:40:
         6f:6d:ef:4b:ec:f9:0c:e5:62:28:72:30:ad:7d:05:93:49:f9:
         75:17:ed:51:ea:c2:c0:11:17:99:ac:5d:2f:b4:8e:11:70:6d:
         cd:c7:6c:aa:86:30:2f:ff:f2:4e:02:ac:27:a3:87:2e:82:1f:
         bf:5b:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----