Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa
File:                     326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa (raw, json)
Hash identifier:          8ZwaDz2DRspX+YYGujeR/2ziaGnQzS0WFOXS+bEh/ss=
Subject key identifier:   4E:80:0D:AA:EE:D3:06:36:7B:BF:20:15:91:80:11:43:01:8E:94:01
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       304B5C3F9081F97E4252838FF2140F472957FCB4
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa
Signing time:             Thu 20 Jun 2024 05:23:48 +0000
ROA not before:           Thu 20 Jun 2024 05:18:48 +0000
ROA not after:            Thu 19 Jun 2025 05:23:48 +0000
asID:                     199108
IP address blocks:        2a13:c007:801b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4b:5c:3f:90:81:f9:7e:42:52:83:8f:f2:14:0f:47:29:57:fc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:48 2024 GMT
            Not After : Jun 19 05:23:48 2025 GMT
        Subject: CN=4E800DAAEED306367BBF201591801143018E9401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:e2:c5:bc:56:f1:35:2a:22:43:c2:b8:4a:
                    4f:43:c1:3b:6c:f2:07:52:dd:2a:c7:b0:11:a5:5f:
                    e9:fa:98:31:a4:c9:07:67:76:c4:d9:29:e9:99:c6:
                    e5:a0:f7:dc:ca:7f:16:4a:f3:a0:50:a5:d0:0e:c8:
                    5d:bf:bd:16:b0:c4:d0:cd:86:6d:94:56:29:93:41:
                    cb:3c:90:1d:82:af:06:94:a3:18:e2:ca:a0:df:65:
                    d8:07:b2:1e:f4:19:f8:59:74:31:03:80:2d:20:22:
                    49:2b:27:b3:83:43:db:ab:b6:2c:2a:90:20:35:0b:
                    b8:e7:16:95:e3:04:f5:0d:49:bd:a9:d7:03:63:97:
                    01:b4:87:55:fe:8e:e9:88:78:92:5c:b7:58:99:93:
                    9f:a8:75:5a:a7:8b:b4:0c:3d:7c:51:8d:44:22:b0:
                    39:38:56:9a:05:74:67:c1:c1:14:3a:01:4e:97:f6:
                    76:a2:50:2f:f3:1d:17:60:77:d0:2d:4d:cd:7a:85:
                    67:8d:a6:9b:60:ea:19:e7:a6:c7:57:b2:ac:73:bd:
                    68:8a:d7:e2:5e:d5:74:f2:4c:ad:06:e6:a6:50:50:
                    06:1a:65:c6:be:88:b6:cf:74:56:6f:18:61:63:6b:
                    45:fc:9e:a1:36:02:29:2a:2d:42:c4:aa:c6:9c:39:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:80:0D:AA:EE:D3:06:36:7B:BF:20:15:91:80:11:43:01:8E:94:01
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031623a3a2f34382d3438203d3e20313939313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:b1:f9:4d:1f:59:ac:c7:47:2b:04:fb:2d:51:51:9a:94:8e:
         37:3f:e7:d0:10:db:02:1c:7d:0d:2b:dc:e9:0f:d8:5f:53:d6:
         50:61:72:05:81:7a:86:b8:9b:ce:4c:0b:db:27:82:52:4f:2b:
         99:c9:97:cb:a9:2a:bf:96:20:46:91:f3:08:3d:f1:08:91:19:
         57:3c:9d:78:ab:53:77:71:05:42:d7:be:ef:f6:cb:6e:ba:ed:
         38:f7:06:32:7e:3d:e8:5e:87:cd:e8:19:14:20:25:3a:82:b5:
         db:62:64:5c:8c:0f:70:45:9b:7d:31:94:30:7f:70:47:94:3f:
         78:c3:0e:e4:a0:79:0e:16:b7:46:66:de:ee:cc:93:cb:ac:8d:
         2f:d5:34:3b:04:51:d2:b2:69:96:04:39:49:b6:84:d1:e7:74:
         c6:fc:24:de:27:74:95:bb:18:3f:05:cc:7c:38:c0:51:df:ca:
         5d:3a:11:a1:a0:58:3f:0b:70:42:86:a6:a3:93:f1:7f:77:c5:
         dc:4b:57:52:86:53:34:0b:32:f2:58:da:84:bf:7e:60:87:b1:
         91:b3:e7:f5:5e:43:27:5f:bd:34:43:45:b4:07:ed:87:a7:46:
         1e:87:53:63:80:d5:08:d1:28:5e:50:2c:1d:3d:17:67:9d:2e:
         bb:7e:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----