Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa
File:                     326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa (raw, json)
Hash identifier:          qNeY1rHn1aEU8sKDVOdmetrSJQ7NaJpjq0+2jXpt544=
Subject key identifier:   91:F9:90:B8:CA:A0:EA:9A:B7:8E:AE:CD:0C:59:D5:A3:B4:8D:0F:7F
Certificate issuer:       /CN=83A7D195284957F50D83CDF37583C8652095A716
Certificate serial:       4DF3F72C0480F2B7AC873C08576C94DAA20FE211
Authority key identifier: 83:A7:D1:95:28:49:57:F5:0D:83:CD:F3:75:83:C8:65:20:95:A7:16
Authority info access:    rsync://dev.tw/rpki/August/13/83A7D195284957F50D83CDF37583C8652095A716.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa
Signing time:             Thu 20 Jun 2024 05:23:05 +0000
ROA not before:           Thu 20 Jun 2024 05:18:05 +0000
ROA not after:            Thu 19 Jun 2025 05:23:05 +0000
asID:                     200529
IP address blocks:        2a05:dfc6:9500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f3:f7:2c:04:80:f2:b7:ac:87:3c:08:57:6c:94:da:a2:0f:e2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A7D195284957F50D83CDF37583C8652095A716
        Validity
            Not Before: Jun 20 05:18:05 2024 GMT
            Not After : Jun 19 05:23:05 2025 GMT
        Subject: CN=91F990B8CAA0EA9AB78EAECD0C59D5A3B48D0F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:7d:50:73:0f:1b:2e:f3:8a:98:1f:25:bc:
                    59:23:5a:71:a4:ac:83:bc:2b:e6:17:a9:46:90:89:
                    c1:e0:ea:6a:ed:52:32:13:2d:95:e5:af:d9:56:8d:
                    7b:36:e8:70:9c:9a:0e:82:35:4e:07:0c:4f:c4:52:
                    6e:21:b4:6b:c3:76:13:96:2c:51:37:25:47:ab:1d:
                    6f:72:e1:81:de:29:f3:63:0c:86:18:c7:d5:e1:16:
                    d1:24:75:33:d0:b5:74:d9:97:a6:16:4c:13:44:8b:
                    c1:e6:c1:69:43:e5:63:3d:cc:73:47:93:6a:a3:4c:
                    59:bf:69:d2:a9:72:0d:dc:40:c6:e9:62:0a:eb:96:
                    1d:1d:38:8b:12:84:c9:fe:d2:a7:48:19:dd:18:f8:
                    15:7d:19:66:0a:23:2f:d7:20:53:e6:84:74:33:9b:
                    e3:6c:c8:8e:16:21:3d:cc:36:4e:45:4d:c2:b0:e5:
                    6c:c2:6e:77:fc:2f:63:95:8f:7e:f8:32:ce:ee:5f:
                    cc:e9:65:b1:dd:1a:83:23:5a:f5:ac:a9:d5:be:22:
                    8f:4f:ab:f3:b2:00:ac:7c:fd:02:6e:f8:f6:4f:a5:
                    70:be:9f:9a:17:a2:97:f7:36:d4:c3:8a:46:4d:79:
                    37:09:e3:80:93:4d:ae:a9:4a:3c:34:b0:28:5d:43:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F9:90:B8:CA:A0:EA:9A:B7:8E:AE:CD:0C:59:D5:A3:B4:8D:0F:7F
            X509v3 Authority Key Identifier:
                keyid:83:A7:D1:95:28:49:57:F5:0D:83:CD:F3:75:83:C8:65:20:95:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/83A7D195284957F50D83CDF37583C8652095A716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/83A7D195284957F50D83CDF37583C8652095A716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/14/326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:88:c8:56:7c:b7:b1:9e:1f:f3:e9:2b:39:80:93:ee:0f:28:
         1a:61:71:e5:42:aa:a3:44:6b:b9:87:75:50:66:e0:76:1a:f6:
         9d:bc:2e:c7:c9:a4:12:33:c4:45:2c:31:61:e9:41:61:69:11:
         a8:3d:29:ab:43:a1:a3:95:a2:6c:ab:8a:0a:c2:44:ab:61:8e:
         44:a7:57:07:7d:18:cb:78:a3:22:eb:02:3c:62:6a:8e:e5:c9:
         5e:73:22:84:36:d9:e5:6c:a7:c6:46:f6:02:9f:5f:94:7c:53:
         99:92:bd:61:7a:53:56:5e:ee:b3:95:5f:f5:c8:0d:30:ab:7d:
         a4:ee:9c:84:dd:e1:8a:cb:c0:fa:6b:4f:d7:3a:db:1b:be:cd:
         ae:77:11:25:bd:cd:f8:f0:10:dc:0f:b7:13:1f:43:44:84:fa:
         51:95:6d:a4:18:cf:5f:b1:51:9a:f0:ae:a2:61:a1:7a:81:4f:
         97:cb:ab:87:00:25:28:e0:d8:1e:4c:49:28:65:a4:b4:67:86:
         8f:09:9c:11:37:90:e7:43:af:b8:40:1b:a7:4b:36:63:f1:9c:
         84:18:df:69:ed:6d:4d:e5:e1:26:00:b2:23:d4:d8:16:49:17:
         65:6f:d2:a4:cd:97:a3:20:18:c4:8f:5e:6f:50:ae:e4:3c:97:
         f5:25:c5:be
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTfP3LASA8reshzwIV2yU2qIP4hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNBN0QxOTUyODQ5NTdGNTBEODNDREYzNzU4M0M4NjUy
MDk1QTcxNjAeFw0yNDA2MjAwNTE4MDVaFw0yNTA2MTkwNTIzMDVaMDMxMTAvBgNV
BAMTKDkxRjk5MEI4Q0FBMEVBOUFCNzhFQUVDRDBDNTlENUEzQjQ4RDBGN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOV31Qcw8bLvOKmB8lvFkjWnGk
rIO8K+YXqUaQicHg6mrtUjITLZXlr9lWjXs26HCcmg6CNU4HDE/EUm4htGvDdhOW
LFE3JUerHW9y4YHeKfNjDIYYx9XhFtEkdTPQtXTZl6YWTBNEi8HmwWlD5WM9zHNH
k2qjTFm/adKpcg3cQMbpYgrrlh0dOIsShMn+0qdIGd0Y+BV9GWYKIy/XIFPmhHQz
m+NsyI4WIT3MNk5FTcKw5WzCbnf8L2OVj374Ms7uX8zpZbHdGoMjWvWsqdW+Io9P
q/OyAKx8/QJu+PZPpXC+n5oXopf3NtTDikZNeTcJ44CTTa6pSjw0sChdQ0BNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkfmQuMqg6pq3jq7NDFnVo7SND38wHwYDVR0j
BBgwFoAUg6fRlShJV/UNg83zdYPIZSCVpxYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMTQvODNBN0QxOTUy
ODQ5NTdGNTBEODNDREYzNzU4M0M4NjUyMDk1QTcxNi5jcmwwZgYIKwYBBQUHAQEE
WjBYMFYGCCsGAQUFBzAChkpyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC8xMy84
M0E3RDE5NTI4NDk1N0Y1MEQ4M0NERjM3NTgzQzg2NTIwOTVBNzE2LmNlcjCBrQYI
KwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJwcy5h
cmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNkYmRlY2M0
ZmE0LzE0LzMyNjEzMDM1M2E2NDY2NjMzNjNhMzkzNTMwMzAzYTNhMmYzNDMwMmQz
NDM4MjAzZDNlMjAzMjMwMzAzNTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/GlTANBgkqhkiG
9w0BAQsFAAOCAQEAtYjIVny3sZ4f8+krOYCT7g8oGmFx5UKqo0RruYd1UGbgdhr2
nbwux8mkEjPERSwxYelBYWkRqD0pq0Oho5WibKuKCsJEq2GORKdXB30Yy3ijIusC
PGJqjuXJXnMihDbZ5Wynxkb2Ap9flHxTmZK9YXpTVl7us5Vf9cgNMKt9pO6chN3h
isvA+mtP1zrbG77NrncRJb3N+PAQ3A+3Ex9DRIT6UZVtpBjPX7FRmvCuomGheoFP
l8urhwAlKODYHkxJKGWktGeGjwmcETeQ50OvuEAbp0s2Y/GchBjfae1tTeXhJgCy
I9TYFkkXZW/SpM2XoyAYxI9eb1Cu5DyX9SXFvg==
-----END CERTIFICATE-----