Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
File:                     323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa (raw, json)
Hash identifier:          weQoOBkTLNFSMSGElM193MvE0G8jotmxVJ4JiGL/sa0=
Subject key identifier:   8E:06:35:54:70:79:8D:6D:84:93:C3:9B:69:0C:9C:D6:75:13:73:22
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       0EE9ABD1CD48DB14AD9CE97A48A2F9046254514A
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
Signing time:             Thu 20 Jun 2024 05:23:02 +0000
ROA not before:           Thu 20 Jun 2024 05:18:02 +0000
ROA not after:            Thu 19 Jun 2025 05:23:02 +0000
asID:                     207852
IP address blocks:        2602:fc23:11b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e9:ab:d1:cd:48:db:14:ad:9c:e9:7a:48:a2:f9:04:62:54:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 20 05:18:02 2024 GMT
            Not After : Jun 19 05:23:02 2025 GMT
        Subject: CN=8E06355470798D6D8493C39B690C9CD675137322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:95:8e:54:0a:b5:fc:04:c2:f7:d8:6e:61:5b:
                    7b:20:60:b1:ff:b0:01:f6:22:08:5f:c9:39:7a:30:
                    bd:83:24:5b:83:f8:96:f3:1b:ff:fd:f7:98:87:6b:
                    ad:98:83:15:74:ff:65:da:37:53:63:cc:35:28:92:
                    28:7b:5b:24:df:70:b9:78:fa:36:17:99:9f:a1:03:
                    59:f8:b3:8d:07:b6:16:0e:f8:95:cb:db:30:1d:60:
                    08:47:d2:c2:54:8b:e7:72:e7:d8:5f:1e:7f:f8:99:
                    79:8f:75:11:d5:1f:2f:1f:8c:13:a8:ec:90:ad:93:
                    22:4c:19:37:d6:ea:c7:92:5b:87:49:d8:d2:98:0b:
                    ed:58:08:4d:ca:1d:ce:c6:af:73:a2:64:5b:24:96:
                    da:0f:d6:09:43:e7:99:82:21:a2:18:b5:f5:65:98:
                    f8:1e:7a:65:fa:90:6c:bb:26:6e:e2:54:fa:6c:06:
                    60:77:8e:bb:ae:81:24:cd:f8:4b:16:49:d3:cc:31:
                    37:1d:f2:ad:bd:0e:b6:ed:33:9a:22:e2:8e:a0:48:
                    6e:8a:26:50:19:7a:05:c9:21:21:1e:b0:ab:53:9f:
                    d5:a4:29:03:40:f1:9f:88:1f:86:bc:f6:d2:bf:7b:
                    94:7f:76:92:ae:a4:ba:89:e5:a2:36:5f:e3:98:22:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:06:35:54:70:79:8D:6D:84:93:C3:9B:69:0C:9C:D6:75:13:73:22
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:47:76:42:e8:51:28:fb:1b:45:d9:b4:60:15:5c:3a:dc:
         a0:57:77:7f:6c:c9:da:39:96:88:d6:ed:cb:04:ae:f3:9f:17:
         93:f7:8a:62:cb:fb:e7:cd:16:32:81:1c:98:00:0f:7a:66:69:
         5c:84:b5:8e:be:b4:e4:52:2a:db:c7:8b:14:45:14:5c:e9:8b:
         0c:09:d8:f7:74:88:02:52:95:35:cb:32:89:16:25:63:6b:29:
         87:8e:e7:0a:e3:d0:b9:9e:0f:3d:3d:4a:fb:c6:5b:1f:f8:ff:
         8d:ca:e1:cb:75:2b:91:0a:79:d3:48:ad:e1:70:d7:ce:e8:e9:
         de:68:fa:81:53:cf:fa:62:2b:48:a4:0f:3b:b5:a9:4a:f6:9a:
         76:60:79:d9:f5:ee:8a:0a:79:9b:e5:20:43:75:28:a8:5f:2b:
         38:a2:2a:56:87:ae:fb:95:f5:87:a4:ca:06:01:b4:06:34:c4:
         8f:34:93:7e:3a:a6:ed:94:62:7c:b1:09:d2:82:f3:d4:a4:9c:
         f5:21:27:53:ce:c4:a3:23:70:f8:18:1c:af:83:7c:ee:38:a5:
         e3:33:31:d4:d1:e6:73:75:cd:32:f2:13:22:86:dd:d1:84:a6:
         a4:43:d8:31:35:d9:ce:f0:0a:79:6d:6a:16:15:0b:00:3b:41:
         02:21:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----