Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          Ek8QXkAAP0C4e/nfzvpywMJcHzVXP+eiApfFO6vE0uY=
Subject key identifier:   7C:A1:96:31:15:8F:1F:0E:86:0A:9C:95:79:0F:C0:28:BB:F1:7E:16
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       1A87594390E90D7474856850CF7412097E2BB08E
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
Signing time:             Mon 07 Oct 2024 10:04:38 +0000
ROA not before:           Mon 07 Oct 2024 09:59:38 +0000
ROA not after:            Mon 06 Oct 2025 10:04:38 +0000
asID:                     197537
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:87:59:43:90:e9:0d:74:74:85:68:50:cf:74:12:09:7e:2b:b0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Oct  7 09:59:38 2024 GMT
            Not After : Oct  6 10:04:38 2025 GMT
        Subject: CN=7CA19631158F1F0E860A9C95790FC028BBF17E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:ac:79:e7:42:fd:31:b5:6d:20:18:16:f6:
                    28:db:42:a5:11:cb:27:71:8f:a3:98:8f:17:6f:c4:
                    fb:88:04:9b:10:24:dc:9a:c8:b5:23:ed:6e:7e:5a:
                    6e:bb:34:48:d7:e6:66:07:48:3e:23:74:0a:05:ef:
                    47:87:83:b8:47:c1:5a:2a:a6:fa:f3:e2:ea:ff:d2:
                    5d:0f:13:3f:3b:33:ea:60:e2:96:08:41:4e:d9:76:
                    4d:cf:50:c9:04:3e:f1:81:b5:72:e9:27:0f:05:be:
                    fd:e5:ca:45:71:0d:d6:aa:82:a9:c0:09:07:ab:6c:
                    58:c8:86:f6:00:3a:4c:c0:44:8c:3e:4a:b3:f3:1f:
                    03:3a:56:43:f1:46:30:12:9b:48:24:20:94:79:2c:
                    d7:21:dc:b4:b7:8d:28:39:fb:a2:9c:31:7d:7a:22:
                    d6:7a:0c:f3:1f:b8:2a:1e:e9:3a:d5:63:f3:e5:5c:
                    b0:40:b1:e6:ab:56:d9:9d:77:d1:eb:3a:00:8b:e8:
                    b8:df:11:a9:1c:f6:54:60:7a:f7:aa:d9:c1:5c:0b:
                    1a:65:dc:98:93:b5:89:4c:f4:46:67:7d:7a:35:47:
                    22:56:ff:c8:58:35:04:33:6c:3e:0d:c8:67:43:31:
                    9e:b8:5a:97:84:b0:09:23:3c:fa:0a:55:a0:a5:52:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:96:31:15:8F:1F:0E:86:0A:9C:95:79:0F:C0:28:BB:F1:7E:16
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:08:de:a1:1b:2a:80:af:8d:37:9b:04:9f:1b:0a:72:be:1a:
         47:a8:35:07:4f:cc:8d:d6:48:cf:e9:ad:c6:91:d2:26:47:f4:
         74:8c:ca:25:a9:8a:1a:bf:d2:cd:83:5f:d6:20:ba:51:8f:32:
         56:78:ae:40:90:d0:66:eb:47:94:3c:80:00:3a:70:72:54:93:
         64:b6:08:23:4d:8b:f4:37:25:6b:c9:f7:e0:a4:70:09:c6:e5:
         21:ed:7a:5e:49:26:36:dd:e9:04:2c:77:7b:e4:ca:d9:2f:13:
         e1:2f:c4:a8:f7:9b:a6:45:87:3f:30:1f:32:a5:1f:1c:14:93:
         c0:f1:12:6b:c5:e6:b5:cc:57:b7:30:1c:9a:8f:fe:c0:00:33:
         73:9e:ba:9d:25:32:2b:da:97:5c:96:4d:9c:99:2c:90:25:af:
         be:1a:44:1c:1b:b9:a3:54:86:36:b2:d7:ce:a4:8b:12:ab:7d:
         55:39:de:ee:ee:ca:ac:37:78:82:b3:89:36:97:c1:46:33:5c:
         f4:5f:5f:95:db:2f:ac:08:35:53:99:7b:64:74:c3:db:d8:63:
         5e:5d:88:0b:20:81:11:b6:56:3d:a8:b2:a8:16:ca:14:8a:6b:
         53:9c:7d:53:85:ff:99:ab:8f:99:8d:5c:9e:3d:47:9a:72:d6:
         76:27:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:55 2024 by rpki-client on console-ams.rpki-client.org