Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32332d3234203d3e20393435.roa
File:                     32332e3133392e34302e302f32332d3234203d3e20393435.roa (raw, json)
Hash identifier:          ZedN+rxXqBTKlVfnPSDrP3U1tMInj5o8H5s7h6mHBe0=
Subject key identifier:   96:90:87:20:AB:A2:0F:BB:CC:23:91:A4:B1:BB:1D:ED:00:EF:61:BD
Certificate issuer:       /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial:       4776D9F947ACAF1885FE98ED86E43D12CA5970CC
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access:    rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32332d3234203d3e20393435.roa
Signing time:             Mon 07 Oct 2024 10:03:30 +0000
ROA not before:           Mon 07 Oct 2024 09:58:30 +0000
ROA not after:            Mon 06 Oct 2025 10:03:30 +0000
asID:                     945
IP address blocks:        23.139.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:76:d9:f9:47:ac:af:18:85:fe:98:ed:86:e4:3d:12:ca:59:70:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
        Validity
            Not Before: Oct  7 09:58:30 2024 GMT
            Not After : Oct  6 10:03:30 2025 GMT
        Subject: CN=96908720ABA20FBBCC2391A4B1BB1DED00EF61BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:87:8a:55:38:de:9f:9d:06:c8:2c:41:f4:
                    6b:b9:cd:8c:1a:e1:76:0d:8f:8b:e8:6c:c9:df:43:
                    e0:37:c8:0c:9f:1c:d8:57:68:b6:36:40:15:81:78:
                    c4:34:b0:18:c8:75:31:bb:7c:a7:fa:50:b2:fb:47:
                    ea:6b:d8:f9:d8:6c:64:d5:3d:71:78:b2:5c:ee:47:
                    df:4b:f7:b5:e4:bf:b2:cd:6c:01:2f:13:e2:e5:d8:
                    00:fb:81:f8:89:7b:77:33:d1:10:df:b7:58:8c:4a:
                    02:b7:ff:cd:23:e1:8f:14:56:8a:05:ab:e7:62:a4:
                    00:c1:b1:d5:23:dc:d2:60:9d:29:1d:61:e3:a9:22:
                    a1:b7:37:ab:38:4a:95:d7:08:1d:e3:3d:9a:f1:3b:
                    ee:fa:88:f1:2f:b3:7d:16:2e:81:8b:67:d0:6d:e8:
                    0a:76:b1:33:75:bd:43:52:21:44:1b:7e:17:09:e2:
                    c6:b4:5e:54:e3:e1:91:cc:4f:4f:0b:cd:b2:c8:8d:
                    a4:d1:c3:47:3b:9e:f4:30:e2:f3:02:8f:40:b4:56:
                    c3:b6:79:cb:03:cb:db:1c:c6:34:b6:55:e5:28:49:
                    b2:cb:a3:db:59:af:e8:ab:55:eb:9b:e9:64:c9:f4:
                    a5:c6:06:18:24:dc:7a:c4:7d:b5:f5:34:48:c9:46:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:90:87:20:AB:A2:0F:BB:CC:23:91:A4:B1:BB:1D:ED:00:EF:61:BD
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32332d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:70:8d:13:a6:3c:f3:a0:f9:97:1f:9b:4c:8d:7f:d4:0a:5d:
         51:8b:ac:8b:73:aa:e3:27:50:a2:76:a2:43:4e:1e:30:74:94:
         cc:72:3e:5f:92:44:ad:72:b2:0c:d5:4c:e5:5f:90:b0:08:52:
         87:d1:3f:58:ec:9b:5e:1e:5a:48:5e:8d:14:a3:fe:31:24:b1:
         f8:ee:52:0c:f3:9e:86:ac:9c:15:23:72:22:fc:7c:ea:c1:31:
         ba:ff:99:f3:27:aa:f6:e1:8c:b2:b7:95:97:d6:3e:f8:a0:b2:
         cc:a5:b7:21:b6:20:d4:61:63:a2:de:52:60:7e:eb:ef:52:e0:
         0c:5e:fd:fb:72:16:72:07:3c:cd:cf:74:35:7a:13:ef:7c:2f:
         0e:82:c0:2f:f5:89:d2:49:06:dc:ed:e8:2b:48:94:90:76:ce:
         50:2b:a5:62:18:ce:2f:bf:13:3f:72:fc:0c:d5:f7:17:4a:79:
         67:dc:1e:6e:d1:b7:36:e5:1b:4f:02:57:75:6c:e4:58:df:47:
         d6:e6:51:54:d8:7f:92:68:59:58:a7:df:e0:d3:88:ac:9b:2e:
         27:6b:46:37:e5:3d:87:8a:40:3e:12:aa:d5:89:f3:bf:71:d6:
         50:f1:89:31:bb:7c:a0:d8:c2:11:66:29:d1:53:39:ea:7b:b7:
         5d:17:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org