Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa
File:                     323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa (raw, json)
Hash identifier:          Hsar49vo5NNXYWE6aizyDwiQhWEbsbQlquyl1yKm7gY=
Subject key identifier:   DC:D0:F0:33:0F:13:01:7C:58:B2:07:4B:98:1C:68:CF:3C:73:3C:36
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       757CAF35BEF40DA92221DBFB511938ED03BB28C3
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa
Signing time:             Fri 21 Jun 2024 21:45:11 +0000
ROA not before:           Fri 21 Jun 2024 21:40:11 +0000
ROA not after:            Fri 20 Jun 2025 21:45:11 +0000
asID:                     54625
IP address blocks:        2602:fc23:150::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7c:af:35:be:f4:0d:a9:22:21:db:fb:51:19:38:ed:03:bb:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 21 21:40:11 2024 GMT
            Not After : Jun 20 21:45:11 2025 GMT
        Subject: CN=DCD0F0330F13017C58B2074B981C68CF3C733C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:6a:85:39:f0:a4:d4:07:e9:d9:83:93:be:
                    a8:ec:4e:54:32:f1:4e:4d:48:a4:ff:0e:b3:89:bf:
                    3f:59:13:0e:60:c4:12:ba:0a:7f:57:d9:9c:58:70:
                    00:21:65:11:09:6d:37:dd:8c:b4:cb:5c:e0:8d:f1:
                    82:c5:6e:73:29:08:06:99:62:3f:6c:c4:97:bb:c0:
                    c4:e2:5b:f8:25:75:e0:18:7e:af:fd:52:59:d8:02:
                    b8:0b:4f:88:aa:ff:4c:a3:ed:d0:2e:e7:bd:65:eb:
                    09:be:44:d1:4e:6e:bd:b9:72:72:da:1f:ce:9c:6c:
                    95:e3:f1:ba:16:48:62:cb:76:fa:76:4e:be:87:7c:
                    35:f4:10:92:74:d5:9a:16:4f:a2:29:be:1c:32:f2:
                    9d:41:1d:95:92:08:e6:a0:d7:fa:e7:53:42:6c:0f:
                    4c:98:fe:61:39:26:b1:1b:c6:5d:1f:b0:70:66:52:
                    7d:a7:27:c1:2f:fd:a5:7e:a6:d0:81:6f:8c:70:31:
                    70:3f:36:21:fb:5f:df:ab:24:88:c3:a0:e8:c1:37:
                    2d:92:bf:1b:42:99:c6:70:c2:57:c0:4e:0d:8f:c3:
                    2d:0e:ad:4e:a5:4d:29:90:34:d9:fd:d5:97:35:09:
                    b7:94:8c:e9:fd:cd:5d:e9:c5:72:73:ae:a4:d8:87:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D0:F0:33:0F:13:01:7C:58:B2:07:4B:98:1C:68:CF:3C:73:3C:36
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:150::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:4c:2c:9f:a0:df:bc:93:57:fc:c6:b9:a8:0c:26:13:18:
         87:22:3b:a5:b2:f0:41:c9:d3:fe:6d:d9:19:74:6d:05:ab:cc:
         27:91:e9:3f:c7:47:3e:f6:4f:7d:4b:04:a2:0c:a8:99:fc:e8:
         14:03:fd:2f:43:f0:42:c5:d3:4c:e6:e6:04:37:1a:21:4f:1c:
         fa:f4:31:57:2c:c7:07:c1:c4:5f:2b:c4:9e:c6:7f:97:4b:0f:
         8e:44:68:0b:94:f2:b2:9f:98:f1:48:24:12:1e:0f:f2:cb:79:
         c0:c3:17:9b:5d:80:b0:8d:a4:96:cc:6e:ed:9d:0a:02:5a:05:
         af:3d:0d:ea:21:83:7e:38:78:56:51:10:ad:66:b3:a8:cb:ab:
         78:ec:1e:f4:d8:24:3c:94:31:2b:a0:69:34:39:7a:30:48:f6:
         10:b0:31:d1:f4:ca:5b:1f:84:f6:ba:a8:b3:57:df:55:ab:ae:
         5d:95:f4:a9:50:c0:17:cc:2a:98:9a:d5:af:a5:be:85:1e:ec:
         3e:67:f8:22:0d:86:4d:e6:ed:db:d8:ac:e0:c2:ff:c0:b3:a1:
         61:6f:2c:54:e7:f4:c6:27:b9:7f:b2:53:73:b4:fb:f1:1d:4c:
         de:27:a3:2a:72:f6:1a:65:6d:48:d8:45:28:a6:ce:f0:c6:d7:
         d6:f2:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----