Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa
File:                     326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa (raw, json)
Hash identifier:          dw7pux0LKjMvItmaQI0i210PaLlWC9hjk/r9u/Hx9No=
Subject key identifier:   1D:33:0A:B9:82:E5:87:57:74:F0:BB:37:D6:05:1F:D9:4E:99:85:7E
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       0C6F65AA333FACDAE5FD560999CC0AC79827EC9C
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa
Signing time:             Thu 20 Jun 2024 05:23:44 +0000
ROA not before:           Thu 20 Jun 2024 05:18:44 +0000
ROA not after:            Thu 19 Jun 2025 05:23:44 +0000
asID:                     199266
IP address blocks:        2a13:c007:8014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6f:65:aa:33:3f:ac:da:e5:fd:56:09:99:cc:0a:c7:98:27:ec:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:44 2024 GMT
            Not After : Jun 19 05:23:44 2025 GMT
        Subject: CN=1D330AB982E5875774F0BB37D6051FD94E99857E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:26:8f:91:25:c7:32:aa:61:e0:94:eb:51:
                    26:8a:f0:f1:96:10:e1:e8:d0:dd:10:d1:8e:2d:a1:
                    14:6b:ff:8f:5a:48:e7:93:f7:24:37:51:cd:fa:c2:
                    6d:23:6e:9c:18:03:0b:cc:1b:dd:e8:ce:5e:68:8b:
                    36:7c:b9:91:8a:e6:98:fc:ae:6d:50:12:42:3a:36:
                    7d:41:f8:7c:d8:94:95:b2:8a:06:a2:ad:e8:0c:c9:
                    a9:b3:29:49:32:81:06:60:99:24:b2:ff:4d:95:fc:
                    00:8f:83:0f:e8:02:41:df:94:ab:fd:e4:51:36:0f:
                    af:c4:ac:9f:b9:89:8a:43:f6:01:46:69:10:30:c4:
                    0e:f9:f2:12:df:ac:75:a6:d4:6c:47:16:fd:83:8d:
                    87:a7:63:4e:a6:9e:3f:e5:13:af:8b:12:36:17:02:
                    1f:0f:22:ff:6b:26:69:9a:e9:65:56:fa:ae:35:be:
                    2f:6f:63:fd:77:31:6e:90:40:f1:14:d6:ec:7d:24:
                    30:e5:12:97:93:b5:12:37:f2:42:e2:ee:b7:13:a6:
                    37:5b:70:8d:92:05:fa:5a:0a:47:90:ef:54:f0:73:
                    4f:de:2d:02:bf:af:c4:87:e6:63:2a:e0:41:aa:47:
                    3c:89:e3:95:ce:7d:87:42:08:75:6b:4e:66:8a:f5:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:33:0A:B9:82:E5:87:57:74:F0:BB:37:D6:05:1F:D9:4E:99:85:7E
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031343a3a2f34382d3438203d3e20313939323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8014::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:be:48:00:f8:8c:be:9a:be:c9:fb:45:f2:70:6a:96:c8:
         7f:64:cb:01:95:87:10:84:46:02:ea:8b:b4:de:f9:ea:c3:b6:
         2f:c1:1e:ff:da:a2:4d:af:0b:bf:76:fe:80:80:fc:81:0a:a0:
         c6:9e:d3:42:54:2a:a0:cc:65:db:ff:82:ea:0c:ee:ce:1a:54:
         10:2b:c8:18:33:c0:5c:f9:e0:95:c4:25:78:0f:d5:14:9e:52:
         39:60:44:8a:35:30:e7:a3:af:f2:f6:2c:e9:fb:bc:6b:b3:3d:
         d7:3f:70:32:f9:b4:3e:4e:82:1a:3a:79:60:58:df:21:23:a2:
         8a:84:ba:c9:42:dd:e4:ab:17:fe:73:b1:94:22:9e:6b:52:77:
         9a:ee:5c:47:02:69:7d:76:65:ff:ea:3b:95:2b:da:7d:14:66:
         ef:d5:6f:b0:1d:5d:9f:90:7a:46:1f:e0:46:85:7f:26:05:8d:
         21:16:f5:96:9d:ed:97:33:7b:90:d0:bc:bd:f7:42:49:b8:ae:
         fc:b7:fb:ca:6c:01:32:dc:51:ea:be:c1:8c:cc:bb:77:d0:41:
         f3:2a:cc:f2:a6:c0:24:ab:eb:3d:ad:b3:cc:ae:19:e9:26:f7:
         db:eb:d6:da:2e:8d:8b:f1:e7:03:1d:eb:97:ec:35:df:4a:a1:
         12:f5:21:f1
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUDG9lqjM/rNrl/VYJmcwKx5gn7JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwQ0M3QUQxMDcxMkZEQTJERERDM0NDOTQ1NTA4NzRC
OEE1NkI2MjAeFw0yNDA2MjAwNTE4NDRaFw0yNTA2MTkwNTIzNDRaMDMxMTAvBgNV
BAMTKDFEMzMwQUI5ODJFNTg3NTc3NEYwQkIzN0Q2MDUxRkQ5NEU5OTg1N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqCaPkSXHMqph4JTrUSaK8PGW
EOHo0N0Q0Y4toRRr/49aSOeT9yQ3Uc36wm0jbpwYAwvMG93ozl5oizZ8uZGK5pj8
rm1QEkI6Nn1B+HzYlJWyigairegMyamzKUkygQZgmSSy/02V/ACPgw/oAkHflKv9
5FE2D6/ErJ+5iYpD9gFGaRAwxA758hLfrHWm1GxHFv2DjYenY06mnj/lE6+LEjYX
Ah8PIv9rJmma6WVW+q41vi9vY/13MW6QQPEU1ux9JDDlEpeTtRI38kLi7rcTpjdb
cI2SBfpaCkeQ71Twc0/eLQK/r8SH5mMq4EGqRzyJ45XOfYdCCHVrTmaK9deXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUHTMKuYLlh1d08Ls31gUf2U6ZhX4wHwYDVR0j
BBgwFoAUjAzHrRBxL9ot3cPMlFUIdLila2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNS84QzBDQzdBRDEw
NzEyRkRBMkREREMzQ0M5NDU1MDg3NEI4QTU2QjYyLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzEvOEMw
Q0M3QUQxMDcxMkZEQTJERERDM0NDOTQ1NTA4NzRCOEE1NkI2Mi5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC81LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzMDMxMzQzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM5MzkzMjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE8AHgBQwDQYJKoZIhvcN
AQELBQADggEBAHHQvkgA+Iy+mr7J+0XycGqWyH9kywGVhxCERgLqi7Te+erDti/B
Hv/aok2vC792/oCA/IEKoMae00JUKqDMZdv/guoM7s4aVBAryBgzwFz54JXEJXgP
1RSeUjlgRIo1MOejr/L2LOn7vGuzPdc/cDL5tD5Ogho6eWBY3yEjooqEuslC3eSr
F/5zsZQinmtSd5ruXEcCaX12Zf/qO5Ur2n0UZu/Vb7AdXZ+QekYf4EaFfyYFjSEW
9Zad7Zcze5DQvL33Qkm4rvy3+8psATLcUeq+wYzMu3fQQfMqzPKmwCSr6z2ts8yu
Gekm99vr1toujYvx5wMd65fsNd9KoRL1IfE=
-----END CERTIFICATE-----