Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a643830303a3a2f34302d3438203d3e20323133303836.roa
File:                     326131323a646434373a643830303a3a2f34302d3438203d3e20323133303836.roa (raw, json)
Hash identifier:          hYRDhGoB8joWbQ/ZIg4wnS0dYwq4RIZBBwg3B3q1Z2I=
Subject key identifier:   8F:CA:50:FA:C8:BC:5E:09:A4:BB:6C:A3:BB:1C:9B:56:0D:0E:37:B0
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       4EE2643F27F1BEDA1BF54247180448BCC7B560E4
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a643830303a3a2f34302d3438203d3e20323133303836.roa
Signing time:             Thu 20 Jun 2024 05:23:23 +0000
ROA not before:           Thu 20 Jun 2024 05:18:23 +0000
ROA not after:            Thu 19 Jun 2025 05:23:23 +0000
asID:                     213086
IP address blocks:        2a12:dd47:d800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e2:64:3f:27:f1:be:da:1b:f5:42:47:18:04:48:bc:c7:b5:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:23 2024 GMT
            Not After : Jun 19 05:23:23 2025 GMT
        Subject: CN=8FCA50FAC8BC5E09A4BB6CA3BB1C9B560D0E37B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:52:03:e8:ba:9d:35:9e:7c:fa:6c:20:37:
                    f8:ff:0b:96:23:0b:23:dc:11:96:03:60:57:47:42:
                    46:c5:29:51:88:46:26:92:78:7a:bd:8a:58:ee:b0:
                    f6:0e:36:ab:47:90:26:4d:77:33:c4:f2:eb:bd:cc:
                    5b:9d:fb:e7:5e:e8:7f:e7:e8:6c:21:af:69:c8:ee:
                    98:21:34:a6:98:de:c5:30:70:3c:73:19:be:10:1e:
                    9a:c9:f5:09:a9:b7:72:0c:41:09:06:6e:02:44:39:
                    75:4d:da:44:be:a1:4d:06:75:df:ef:8e:3f:63:a4:
                    d7:e5:7a:58:02:8b:56:2b:b4:a8:9a:31:2c:d5:bd:
                    dc:65:31:1c:24:7c:f2:ac:c0:b4:41:01:90:b8:08:
                    04:ed:54:28:6f:a6:80:26:d2:56:b8:2b:23:d7:a4:
                    e4:71:08:55:68:07:87:9f:14:04:4b:89:87:68:36:
                    18:e5:c6:91:5a:fa:43:d8:c0:34:64:19:7e:58:a4:
                    60:11:30:87:ba:c2:ed:42:0b:36:35:45:17:61:31:
                    2f:eb:65:eb:e3:ac:85:29:82:01:9f:66:68:d7:b8:
                    2d:a1:25:e0:0e:65:ba:9f:b6:bf:ea:a2:fd:55:f9:
                    76:fe:b8:80:96:dc:82:94:c0:0d:6c:56:37:35:d3:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CA:50:FA:C8:BC:5E:09:A4:BB:6C:A3:BB:1C:9B:56:0D:0E:37:B0
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a643830303a3a2f34302d3438203d3e20323133303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:2c:3d:3a:a5:81:50:fc:93:37:37:2c:71:ba:7d:bb:f1:
         d6:19:39:97:89:8d:09:22:02:36:c1:25:77:06:98:89:73:9e:
         be:25:2f:81:9c:c6:48:a7:3c:66:55:f3:69:67:bd:5e:cc:4c:
         81:a6:c3:5a:14:18:cf:a5:8c:4c:09:b5:8b:9a:a6:27:e9:83:
         52:3d:75:fd:dc:69:1a:6e:4f:17:86:03:68:9a:f0:9f:92:21:
         0c:0a:ef:3a:3c:82:4c:f5:8c:e0:21:9a:f7:34:90:08:9b:e6:
         f5:5f:98:27:0a:13:97:e2:a1:7c:c3:16:56:66:41:5e:fd:54:
         24:90:43:5c:1b:06:30:5c:14:2d:37:2d:19:5d:ae:3e:f5:74:
         dc:15:7f:51:ae:43:45:5a:35:30:72:9b:39:aa:3f:af:9d:a2:
         89:7b:f8:02:25:f2:38:4a:f6:c1:52:26:42:a4:e6:48:82:6b:
         bf:cf:ca:62:ca:d5:f3:82:e2:70:5b:fb:00:c0:d9:56:13:94:
         90:9e:e2:a7:78:71:f0:4d:ab:b6:ff:1f:08:65:e9:5f:78:15:
         24:70:8f:ca:15:69:7a:77:23:24:22:ef:ae:62:cf:f5:c8:ea:
         d1:07:17:be:e5:7e:79:31:fe:a1:68:8b:3f:81:3e:90:47:ec:
         eb:f3:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----