Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
File:                     323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (raw, json)
Hash identifier:          uS5Zkjr3pWfsQoLx7IaCAYRoZX4GiQluWoHMBU3bFUk=
Subject key identifier:   46:2D:44:B1:B1:E8:07:B1:3E:68:99:9C:FE:0B:7B:08:DC:A7:88:7C
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       41DB6B2B6122EA33368A6299A5BDEC1016B23B9F
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
Signing time:             Thu 20 Jun 2024 05:23:03 +0000
ROA not before:           Thu 20 Jun 2024 05:18:03 +0000
ROA not after:            Thu 19 Jun 2025 05:23:03 +0000
asID:                     57429
IP address blocks:        2602:fc23:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:6b:2b:61:22:ea:33:36:8a:62:99:a5:bd:ec:10:16:b2:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 20 05:18:03 2024 GMT
            Not After : Jun 19 05:23:03 2025 GMT
        Subject: CN=462D44B1B1E807B13E68999CFE0B7B08DCA7887C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:e4:5c:94:3e:e0:2b:ee:b0:ee:1e:23:3b:
                    04:82:5f:bd:7d:af:ab:ec:71:94:2c:fe:96:7b:89:
                    03:85:da:2c:bb:e7:20:a8:c1:e6:19:be:32:67:8e:
                    e3:7a:e7:4e:12:b5:59:2a:22:cb:0b:50:17:39:3d:
                    92:69:90:c6:34:97:6a:c5:0d:0e:8e:23:2f:54:5f:
                    e8:a2:b0:0f:d2:41:9d:0e:12:aa:b6:54:30:e5:42:
                    5e:39:14:f1:6c:82:65:e2:cf:7e:f2:f3:c9:61:88:
                    e5:5c:27:57:2b:9d:31:ec:31:66:01:c5:ac:c2:aa:
                    14:b6:dc:88:1d:18:9a:8a:59:1d:87:0a:04:2a:b8:
                    08:da:5c:e4:ec:02:7f:1a:72:1b:30:e9:62:ac:a9:
                    c0:da:ac:fc:a1:d5:da:74:97:9c:83:ed:fe:4f:9a:
                    27:3e:03:7f:75:98:ed:92:71:f1:0c:a1:ef:5f:2f:
                    ab:bf:48:a3:99:bd:0e:b4:08:24:61:a8:8a:99:82:
                    48:c0:43:27:6e:51:89:c8:03:15:f1:36:68:f1:9e:
                    98:6f:d8:97:32:3d:ac:c1:38:d0:7a:39:52:02:23:
                    ff:54:2d:ec:51:93:26:b3:6a:7e:a3:5b:16:fc:f6:
                    38:44:dc:20:1c:76:77:6e:ea:7c:3c:3c:3a:1b:2e:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:44:B1:B1:E8:07:B1:3E:68:99:9C:FE:0B:7B:08:DC:A7:88:7C
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:40:d9:83:ae:62:2f:32:65:44:09:8f:f5:75:e6:a9:23:
         56:fe:d1:37:bc:59:da:43:06:5f:e3:f7:3f:7c:e9:06:f3:81:
         d9:8d:ae:64:2d:e5:d3:8f:8b:6e:a9:2b:1c:8e:63:d1:9e:a2:
         ae:2c:7b:9e:b7:ef:65:63:df:cb:f2:4a:f6:8b:8a:ab:82:b0:
         8f:c6:b8:4d:50:63:84:7a:17:c5:3b:ed:d9:55:f8:71:18:70:
         b9:9a:88:13:d8:da:9d:33:a7:ad:14:fd:6b:7f:73:25:fa:f0:
         39:d7:3b:d9:39:8f:01:29:f5:ed:88:21:a7:79:7a:77:2e:03:
         ab:f8:52:c6:a7:cf:09:b4:7e:5e:2c:71:e2:1e:62:03:15:a3:
         b2:fc:1e:5c:2f:c8:2a:90:fa:8d:1e:fc:3e:59:6d:2b:18:74:
         1f:9e:37:d0:26:a0:ac:b0:db:f3:a2:e9:a7:d7:33:54:4b:ad:
         3f:ff:36:5d:dc:02:84:4b:1f:97:ca:85:56:9f:54:07:0e:b0:
         55:45:46:46:e1:2f:3b:4b:55:46:6b:34:ee:5f:28:46:c5:d7:
         e1:30:28:ff:74:c3:6a:4b:40:bb:13:0d:29:d6:38:26:77:cf:
         eb:91:18:ac:07:af:7e:8a:10:f8:4b:57:df:99:06:a3:fd:c7:
         04:fd:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----