Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e20343031313131.roa
File:                     32332e3135302e382e302f32322d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          Kt2iM/373SeTC5Shzz4u81bXFAOmK5e1JzxEH/LNYAc=
Subject key identifier:   F4:56:43:27:94:3B:27:4C:5E:8C:8F:E3:A5:60:6B:6E:A3:C1:F0:B5
Certificate issuer:       /CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Certificate serial:       5612BEE5638F3BE6F046EA48356FBE0298BD468E
Authority key identifier: D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
Authority info access:    rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e20343031313131.roa
Signing time:             Wed 11 Sep 2024 12:17:12 +0000
ROA not before:           Wed 11 Sep 2024 12:12:12 +0000
ROA not after:            Wed 10 Sep 2025 12:17:12 +0000
asID:                     401111
IP address blocks:        23.150.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:be:e5:63:8f:3b:e6:f0:46:ea:48:35:6f:be:02:98:bd:46:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
        Validity
            Not Before: Sep 11 12:12:12 2024 GMT
            Not After : Sep 10 12:17:12 2025 GMT
        Subject: CN=F4564327943B274C5E8C8FE3A5606B6EA3C1F0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:ac:f0:44:c5:eb:75:23:11:1c:2b:a2:3a:
                    a9:74:8c:9f:02:b4:bb:99:ca:35:a8:23:1f:97:b8:
                    81:22:be:1c:50:c4:8e:77:e1:19:97:09:5c:9f:4c:
                    61:19:23:cb:54:1a:37:f6:57:7e:82:b7:5a:15:d1:
                    78:53:d1:d3:77:d9:e6:40:d9:96:29:85:62:af:9d:
                    a3:f6:16:e6:39:b4:a8:95:6a:1b:b1:13:24:7b:59:
                    21:2b:46:67:a6:49:73:61:12:ff:00:e0:16:2e:30:
                    72:0a:bd:99:e9:be:1e:af:b3:e4:59:ed:b6:6e:11:
                    44:3b:b5:78:2d:df:31:71:7d:0f:de:9b:23:66:35:
                    ac:48:52:54:80:3f:88:26:d6:a9:5e:75:de:0c:c8:
                    3b:03:22:26:b4:39:e5:f1:79:36:2c:ec:70:95:53:
                    b2:07:3c:e6:8f:6f:60:4c:bc:d7:15:b3:5a:ff:85:
                    f9:c1:18:1d:99:79:61:68:ac:59:fc:aa:d9:70:dc:
                    e9:99:b4:04:1f:a9:84:84:60:44:09:b9:97:25:24:
                    50:e9:2a:d4:f6:0c:d6:fb:1c:a0:78:68:4d:6f:b7:
                    7d:1e:48:ab:f7:b3:b2:3a:b3:33:fd:8a:3c:c6:a2:
                    21:4b:e2:de:cf:5e:f1:82:ed:67:96:98:b5:c9:dd:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:56:43:27:94:3B:27:4C:5E:8C:8F:E3:A5:60:6B:6E:A3:C1:F0:B5
            X509v3 Authority Key Identifier:
                keyid:D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:74:ac:27:7c:5b:c3:61:ab:81:d7:01:80:b1:11:d0:77:
         1c:70:7c:71:a4:5a:18:ce:13:8d:bb:fe:7a:e6:d1:b2:71:48:
         10:95:6e:df:a8:66:c8:0a:3a:8d:20:a0:96:a8:50:c2:c7:1e:
         42:48:10:5c:00:32:77:9c:ee:33:57:e2:a5:f0:d6:96:d7:58:
         a8:4c:89:eb:84:ef:dc:e2:6c:9d:c4:9e:77:3e:c7:1c:ae:ab:
         4d:de:19:46:94:1b:78:83:53:08:e5:b2:fb:de:26:ed:a0:c0:
         52:2c:43:fa:cd:8c:76:c5:d0:c3:d3:54:27:e2:f9:fc:31:31:
         2b:be:66:fc:56:58:a0:c8:c9:64:d5:2c:c9:23:5e:67:7b:0e:
         41:4e:ee:50:22:d0:39:39:3c:16:f9:43:3a:46:11:8f:ad:44:
         58:ff:33:6d:f3:f3:e8:15:ba:4f:68:55:c0:d4:36:42:ae:c8:
         f0:ec:bd:f2:8e:03:88:b3:3d:2f:4d:30:61:00:38:a3:c5:20:
         ee:5d:8c:39:c4:67:89:b9:7b:19:de:31:7e:49:24:1b:2a:7d:
         72:45:16:ca:13:86:77:1d:2f:ac:9a:ff:a6:34:d0:7a:8d:38:
         e2:f5:23:ae:02:87:6c:51:79:8f:12:34:77:dd:d2:10:c6:f4:
         b2:d6:6a:d8
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUVhK+5WOPO+bwRupINW++Api9Ro4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE4QzMwRkQ3QzNFODExNEI3MzZFQkREMjdGRTkzQzA2
NzYzQkRDNjAeFw0yNDA5MTExMjEyMTJaFw0yNTA5MTAxMjE3MTJaMDMxMTAvBgNV
BAMTKEY0NTY0MzI3OTQzQjI3NEM1RThDOEZFM0E1NjA2QjZFQTNDMUYwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxqzwRMXrdSMRHCuiOql0jJ8C
tLuZyjWoIx+XuIEivhxQxI534RmXCVyfTGEZI8tUGjf2V36Ct1oV0XhT0dN32eZA
2ZYphWKvnaP2FuY5tKiVahuxEyR7WSErRmemSXNhEv8A4BYuMHIKvZnpvh6vs+RZ
7bZuEUQ7tXgt3zFxfQ/emyNmNaxIUlSAP4gm1qledd4MyDsDIia0OeXxeTYs7HCV
U7IHPOaPb2BMvNcVs1r/hfnBGB2ZeWForFn8qtlw3OmZtAQfqYSEYEQJuZclJFDp
KtT2DNb7HKB4aE1vt30eSKv3s7I6szP9ijzGoiFL4t7PXvGC7WeWmLXJ3VJLAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQU9FZDJ5Q7J0xejI/jpWBrbqPB8LUwHwYDVR0j
BBgwFoAU0Yww/Xw+gRS3NuvdJ/6TwGdjvcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvOS9EMThDMzBGRDdD
M0U4MTE0QjczNkVCREQyN0ZFOTNDMDY3NjNCREM2LmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzkvRDE4
QzMwRkQ3QzNFODExNEI3MzZFQkREMjdGRTkzQzA2NzYzQkRDNi5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC85LzMyMzMyZTMxMzUzMDJlMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDMw
MzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIXlggwDQYJKoZIhvcNAQELBQADggEBAFsCdKwn
fFvDYauB1wGAsRHQdxxwfHGkWhjOE427/nrm0bJxSBCVbt+oZsgKOo0goJaoUMLH
HkJIEFwAMnec7jNX4qXw1pbXWKhMieuE79zibJ3Ennc+xxyuq03eGUaUG3iDUwjl
svveJu2gwFIsQ/rNjHbF0MPTVCfi+fwxMSu+ZvxWWKDIyWTVLMkjXmd7DkFO7lAi
0Dk5PBb5QzpGEY+tRFj/M23z8+gVuk9oVcDUNkKuyPDsvfKOA4izPS9NMGEAOKPF
IO5djDnEZ4m5exneMX5JJBsqfXJFFsoThncdL6ya/6Y00HqNOOL1I64Ch2xReY8S
NHfd0hDG9LLWatg=
-----END CERTIFICATE-----