Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa
File:                     326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa (raw, json)
Hash identifier:          S3OeJla8f+2bOsfHbd+itQmzf9o+xqko+7o8SC3QgR8=
Subject key identifier:   C6:3A:4D:5E:87:F0:7B:B4:0A:4B:2A:82:27:5F:96:AE:45:DB:85:47
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       58EC74EC5BFFCBFDE4641E91980C5ED2C0C9CD71
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa
Signing time:             Thu 20 Jun 2024 05:23:13 +0000
ROA not before:           Thu 20 Jun 2024 05:18:13 +0000
ROA not after:            Thu 19 Jun 2025 05:23:13 +0000
asID:                     200827
IP address blocks:        2a12:dd47:fc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ec:74:ec:5b:ff:cb:fd:e4:64:1e:91:98:0c:5e:d2:c0:c9:cd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:13 2024 GMT
            Not After : Jun 19 05:23:13 2025 GMT
        Subject: CN=C63A4D5E87F07BB40A4B2A82275F96AE45DB8547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:57:39:49:bf:a5:e0:23:08:a4:27:4f:55:
                    f0:92:d9:b8:5b:7f:a0:82:ec:fd:1a:cd:08:04:88:
                    d3:64:f5:02:0b:e7:33:12:23:d1:65:d7:99:e0:42:
                    22:22:2e:51:4f:a1:ba:e5:dc:bb:e8:02:e5:44:85:
                    40:08:6e:b1:6d:1f:f3:e2:59:89:a2:5a:c6:5b:f5:
                    d9:fd:ca:21:3d:3e:5d:2b:5c:15:3b:32:a8:55:1e:
                    d4:41:e8:dd:20:8a:fe:92:b7:53:d6:eb:bf:14:a0:
                    df:96:77:51:a2:78:bb:3d:db:60:46:7c:a7:5d:48:
                    d5:0a:b9:dd:16:56:ed:e3:e3:32:ee:75:cd:6c:e3:
                    26:bc:95:b4:78:f6:3d:2c:80:b9:1b:6a:7b:3d:d3:
                    75:d7:88:55:22:0a:b5:c1:31:c0:e5:06:3b:ca:2c:
                    f6:98:7f:9d:1a:bf:18:d0:38:3d:1e:ab:2a:b7:ce:
                    94:26:eb:ec:c3:8a:6c:29:54:ce:b7:a3:ac:29:c0:
                    fc:dc:9f:83:bd:e3:82:ad:82:0e:8f:a0:53:c1:3f:
                    85:42:b1:8d:2e:96:28:98:df:72:e3:21:b3:30:3a:
                    86:b7:75:cd:bb:c7:be:72:67:a3:96:60:c7:49:ba:
                    0c:25:f2:1d:04:69:35:a7:d7:14:f7:4e:1a:a6:e1:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3A:4D:5E:87:F0:7B:B4:0A:4B:2A:82:27:5F:96:AE:45:DB:85:47
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a666330303a3a2f33382d3338203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         32:99:b1:b5:d3:b8:b6:1c:74:c0:4c:69:6e:da:22:2b:cc:00:
         fd:66:28:6e:30:b4:37:aa:cd:21:fa:5c:88:b2:aa:40:58:78:
         2a:62:0d:c3:12:c5:a0:46:e4:60:4b:04:f8:77:ed:52:ac:81:
         42:f8:cd:a8:4e:77:0a:64:cb:54:3f:42:08:29:82:67:68:09:
         cf:5f:32:64:d0:d9:fb:6a:ef:a1:4f:5e:39:e9:1b:d2:37:e6:
         80:2c:07:8a:47:f1:f5:61:b2:50:7b:7f:53:20:4c:98:22:25:
         fa:d1:90:99:bb:de:c1:f3:83:37:70:fb:b6:3e:fe:7a:84:91:
         22:4c:11:82:bb:ad:70:93:06:c4:5b:a8:48:f4:83:9c:a8:23:
         6f:85:d0:76:d9:68:bf:96:b9:c3:55:fe:ba:42:10:98:db:61:
         1b:03:9f:44:4b:b9:67:59:e4:27:47:5c:a3:de:79:7a:f8:13:
         ae:80:b4:92:42:1d:c1:63:2e:48:89:3d:8e:f0:ee:f8:c0:55:
         e3:34:b6:f2:ec:c5:ef:12:cb:97:47:49:3e:1b:bb:bd:34:49:
         7e:37:1a:0f:af:29:30:6d:8f:41:bb:e7:9c:92:66:07:f5:d9:
         82:48:57:1d:ea:64:4f:d5:2b:fc:b2:d8:74:f2:ec:43:00:ed:
         04:5e:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----