Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa
File:                     326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa (raw, json)
Hash identifier:          dDvAk3c7UxQYjQe3pUXR+SxQW5HHBGXci8ctlF3gWj8=
Subject key identifier:   A9:8D:3A:7E:7A:54:4B:69:D3:8B:32:0B:D3:D1:20:7A:12:F9:94:54
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       60194DD76E986F5EA3C900AFCFBEBA707F5E27ED
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa
Signing time:             Thu 20 Jun 2024 05:23:43 +0000
ROA not before:           Thu 20 Jun 2024 05:18:43 +0000
ROA not after:            Thu 19 Jun 2025 05:23:43 +0000
asID:                     215262
IP address blocks:        2a13:c007:9000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:4d:d7:6e:98:6f:5e:a3:c9:00:af:cf:be:ba:70:7f:5e:27:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:43 2024 GMT
            Not After : Jun 19 05:23:43 2025 GMT
        Subject: CN=A98D3A7E7A544B69D38B320BD3D1207A12F99454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:36:98:ca:b1:9c:a6:77:6f:35:d7:3d:8e:
                    3a:60:73:0e:a7:22:9d:ed:bd:b5:f6:bd:44:d5:da:
                    b2:54:a5:38:a5:44:94:7b:3d:2b:18:53:1d:19:cb:
                    81:15:4d:be:42:b4:cc:54:e5:ee:29:0a:0f:f1:6b:
                    d3:d3:eb:e9:ec:9b:c2:92:65:ac:83:91:60:df:3d:
                    42:a8:83:1b:85:a4:85:7d:e6:3f:f2:a0:25:db:b5:
                    30:f0:d6:16:ff:e2:ca:36:e0:2d:cc:8f:92:24:be:
                    ce:bd:70:1f:02:d9:8a:92:ae:b1:86:c5:9e:42:99:
                    9c:a6:aa:46:cc:bb:93:cd:d2:e1:a9:b3:de:27:a4:
                    a1:d3:4f:5a:bf:b5:e6:84:d7:3e:3d:a4:0f:af:7d:
                    2d:7a:08:da:00:b5:d8:7e:53:59:b6:0a:10:69:0d:
                    27:0d:8a:ac:8e:79:74:b4:88:36:fb:b4:55:3c:46:
                    7c:87:c7:0b:0b:c9:2a:73:fe:35:d5:8b:43:78:22:
                    47:ac:19:c3:31:dc:58:00:5f:61:f0:f5:8a:e8:b5:
                    d4:ad:22:ed:fa:1f:5c:95:b6:31:37:3f:fd:d7:12:
                    e7:24:ed:17:86:7f:70:2d:82:cd:1c:8d:0d:fe:32:
                    a0:08:a4:7a:1e:0a:9b:5f:55:43:bd:cf:c3:89:4b:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8D:3A:7E:7A:54:4B:69:D3:8B:32:0B:D3:D1:20:7A:12:F9:94:54
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a393030303a3a2f34302d3438203d3e20323135323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:39:ed:19:bc:46:09:5b:3d:c4:63:87:5c:3f:3a:e1:4a:9f:
         5b:06:0d:b8:bb:87:bd:50:7f:bd:1f:e1:b3:fa:f8:65:e4:32:
         93:d2:a9:cd:ff:d2:ed:94:aa:bc:89:9f:40:d5:76:0a:c2:16:
         ab:1c:98:00:5d:ef:74:d6:c0:4e:d2:cf:e3:7b:fa:fd:40:76:
         a8:43:cb:4d:d7:ed:03:dd:37:2c:f1:3c:5c:7c:06:66:71:a4:
         b5:c8:e7:14:9b:8b:20:01:4f:17:27:f3:c0:6b:14:fe:61:e9:
         dd:ff:6a:89:51:b1:a9:ec:40:b5:21:9c:32:53:8e:e7:17:ff:
         dc:24:52:ff:64:cb:74:d1:79:fd:f4:03:75:4e:f9:a1:3e:c1:
         10:60:b5:53:d0:78:c4:f4:d0:2d:81:79:ea:6e:56:f2:9f:e7:
         25:7c:4c:2d:3c:8e:bd:36:c3:55:21:85:2c:85:23:32:09:dd:
         1a:41:56:e2:14:df:82:70:21:11:c2:dd:b3:5e:48:57:d3:b8:
         2d:b8:ae:49:f6:ad:a7:d8:7c:fc:87:c9:cb:e5:f2:83:0e:6c:
         9d:ba:8a:5e:e2:6f:a3:10:d4:d5:74:04:24:8d:ae:10:b1:a5:
         3d:f3:86:0a:3b:56:bd:8b:a3:e0:62:39:ed:30:83:95:21:f5:
         dc:c4:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----