Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
File:                     326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa (raw, json)
Hash identifier:          oeqCBFYQ80kkwiNVg+xnvupRJI2rrLImF/udkXWlDjU=
Subject key identifier:   44:4D:F8:CA:D2:92:DF:20:CF:FA:82:99:2B:C5:37:E5:F9:86:DC:C9
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       53FC23E120F41DC441CB3AAFA408AF18FE78AE6E
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa
Signing time:             Thu 20 Jun 2024 05:23:47 +0000
ROA not before:           Thu 20 Jun 2024 05:18:47 +0000
ROA not after:            Thu 19 Jun 2025 05:23:47 +0000
asID:                     199186
IP address blocks:        2a13:c007:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:23:e1:20:f4:1d:c4:41:cb:3a:af:a4:08:af:18:fe:78:ae:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:47 2024 GMT
            Not After : Jun 19 05:23:47 2025 GMT
        Subject: CN=444DF8CAD292DF20CFFA82992BC537E5F986DCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:d3:6c:84:90:94:46:bd:97:7d:a1:be:ad:
                    8a:42:59:22:e6:ba:80:ce:9b:31:99:3b:41:2d:0c:
                    f0:d6:ff:60:fe:df:e3:c3:ed:cf:f6:2b:8d:29:e9:
                    c3:86:38:5e:74:ff:95:11:6d:39:0e:c2:7a:15:1e:
                    e1:3f:24:51:f9:14:4c:7b:0d:47:91:e7:c6:44:e1:
                    7d:90:81:c9:da:cb:d4:6e:e8:73:31:4d:05:ff:4e:
                    9d:6d:97:8f:70:c9:32:73:55:1b:97:e6:9f:1f:db:
                    a2:83:03:91:e2:08:e7:2e:d3:1e:2e:b1:47:8e:e9:
                    a9:be:e6:d6:5e:48:96:e7:96:1b:57:c2:b9:97:e7:
                    46:3b:23:a7:1e:90:0c:5c:90:f0:3e:46:2c:39:24:
                    73:57:44:d2:8b:c2:57:e2:bf:b9:7a:f4:0d:01:d1:
                    ab:39:d5:6f:7e:2f:1e:98:b5:45:a3:07:dc:ea:81:
                    b3:ec:09:37:a4:71:f0:76:60:6b:4b:51:58:30:ee:
                    9a:b6:e0:06:9d:d1:41:66:45:b1:2d:b3:ff:18:70:
                    83:71:98:a9:36:e7:cb:0e:b9:e9:4b:1e:9d:65:91:
                    e2:10:5e:6d:81:b5:d5:a7:a0:f8:39:c5:27:03:f1:
                    87:29:a6:52:71:e6:3a:f4:1e:df:1b:b1:aa:3f:b5:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:F8:CA:D2:92:DF:20:CF:FA:82:99:2B:C5:37:E5:F9:86:DC:C9
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383530303a3a2f34302d3438203d3e20313939313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:9b:cd:3a:5e:66:4a:95:f3:1a:de:45:a9:bf:43:38:1f:
         b0:4a:a7:41:30:72:da:f8:01:b3:d6:14:9a:84:bf:d5:7e:4d:
         d5:4b:81:e3:a5:dc:23:cb:7b:c6:f4:ad:58:3a:d7:1e:7e:b3:
         fe:f2:7c:9a:9e:13:b4:1d:7b:20:b6:d5:ae:8d:26:0b:75:1a:
         f6:83:95:ea:51:ce:fa:27:ba:28:40:48:c0:f0:8f:85:62:50:
         fd:6b:da:06:0e:71:e4:ca:8f:33:db:01:54:08:55:f8:b7:16:
         92:d4:bb:19:01:72:72:59:cb:75:b6:ad:86:a5:34:8b:e3:ee:
         4f:d4:97:c7:f6:cc:75:cd:67:4b:2a:15:40:e8:9a:51:59:63:
         f2:5f:c0:a1:90:9b:76:64:42:1f:17:8a:5d:6c:e3:76:4c:ad:
         0a:23:29:fd:0e:b5:72:a2:40:00:62:56:88:9b:6f:26:e6:d6:
         cc:fe:37:03:00:17:05:5e:e2:47:ab:95:29:24:d1:5a:f1:ab:
         3f:b7:a5:98:c1:af:0b:8a:25:2f:97:31:dc:58:cc:55:c0:b8:
         bd:15:12:71:29:27:16:44:d4:84:1c:6f:92:03:34:97:07:34:
         f8:d7:84:e8:3c:ff:73:2d:ab:1b:97:60:3c:3c:a0:84:58:90:
         94:5d:75:05
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUU/wj4SD0HcRByzqvpAivGP54rm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwQ0M3QUQxMDcxMkZEQTJERERDM0NDOTQ1NTA4NzRC
OEE1NkI2MjAeFw0yNDA2MjAwNTE4NDdaFw0yNTA2MTkwNTIzNDdaMDMxMTAvBgNV
BAMTKDQ0NERGOENBRDI5MkRGMjBDRkZBODI5OTJCQzUzN0U1Rjk4NkRDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3dNshJCURr2XfaG+rYpCWSLm
uoDOmzGZO0EtDPDW/2D+3+PD7c/2K40p6cOGOF50/5URbTkOwnoVHuE/JFH5FEx7
DUeR58ZE4X2Qgcnay9Ru6HMxTQX/Tp1tl49wyTJzVRuX5p8f26KDA5HiCOcu0x4u
sUeO6am+5tZeSJbnlhtXwrmX50Y7I6cekAxckPA+Riw5JHNXRNKLwlfiv7l69A0B
0as51W9+Lx6YtUWjB9zqgbPsCTekcfB2YGtLUVgw7pq24Aad0UFmRbEts/8YcINx
mKk258sOuelLHp1lkeIQXm2BtdWnoPg5xScD8YcpplJx5jr0Ht8bsao/tXgXAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQURE34ytKS3yDP+oKZK8U35fmG3MkwHwYDVR0j
BBgwFoAUjAzHrRBxL9ot3cPMlFUIdLila2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNS84QzBDQzdBRDEw
NzEyRkRBMkREREMzQ0M5NDU1MDg3NEI4QTU2QjYyLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzEvOEMw
Q0M3QUQxMDcxMkZEQTJERERDM0NDOTQ1NTA4NzRCOEE1NkI2Mi5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC81LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzNTMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMTM5MzkzMTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8AHhTANBgkqhkiG9w0B
AQsFAAOCAQEAf6+bzTpeZkqV8xreRam/QzgfsEqnQTBy2vgBs9YUmoS/1X5N1UuB
46XcI8t7xvStWDrXHn6z/vJ8mp4TtB17ILbVro0mC3Ua9oOV6lHO+ie6KEBIwPCP
hWJQ/WvaBg5x5MqPM9sBVAhV+LcWktS7GQFyclnLdbathqU0i+PuT9SXx/bMdc1n
SyoVQOiaUVlj8l/AoZCbdmRCHxeKXWzjdkytCiMp/Q61cqJAAGJWiJtvJubWzP43
AwAXBV7iR6uVKSTRWvGrP7elmMGvC4olL5cx3FjMVcC4vRUScSknFkTUhBxvkgM0
lwc0+NeE6Dz/cy2rG5dgPDyghFiQlF11BQ==
-----END CERTIFICATE-----