Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e2037373139.roa
File:                     32332e3135302e382e302f32322d3234203d3e2037373139.roa (raw, json)
Hash identifier:          DFhBt3JC7U8TAhKIKlGA4f4o9pP6amgzJOeXXwOcpes=
Subject key identifier:   E0:96:48:CE:12:EA:4C:94:48:A6:20:8F:49:07:54:B7:87:7F:D2:21
Certificate issuer:       /CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Certificate serial:       6BD39EFA9F749663F745EBACC09301C522C66B91
Authority key identifier: D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
Authority info access:    rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e2037373139.roa
Signing time:             Tue 10 Sep 2024 15:01:01 +0000
ROA not before:           Tue 10 Sep 2024 14:56:01 +0000
ROA not after:            Tue 09 Sep 2025 15:01:01 +0000
asID:                     7719
IP address blocks:        23.150.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d3:9e:fa:9f:74:96:63:f7:45:eb:ac:c0:93:01:c5:22:c6:6b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
        Validity
            Not Before: Sep 10 14:56:01 2024 GMT
            Not After : Sep  9 15:01:01 2025 GMT
        Subject: CN=E09648CE12EA4C9448A6208F490754B7877FD221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ee:1a:80:67:cb:21:f2:7a:e1:ad:46:c6:68:
                    89:59:2f:69:79:55:47:0a:8e:42:99:85:e3:20:e8:
                    11:8f:82:ba:dd:be:99:c9:b6:e3:a9:92:2d:8a:63:
                    88:dd:9c:b7:74:71:81:60:c5:61:f8:17:81:51:3b:
                    03:b4:7a:29:29:23:26:d5:79:b0:7a:db:8d:79:19:
                    e3:32:26:33:01:72:59:a7:4b:86:77:4c:1d:65:64:
                    7b:39:fb:2c:f8:d2:f0:29:5a:c6:ba:6a:1f:e7:89:
                    0b:54:8c:72:88:67:d5:88:f2:b4:4a:b3:a0:b5:17:
                    ce:4a:94:86:6a:96:1e:7c:75:1e:17:bf:5e:32:a5:
                    e3:99:77:c9:66:63:3f:a5:6f:38:03:ae:97:20:8f:
                    53:2c:c4:10:c4:ec:fb:e8:04:a5:83:82:fa:29:60:
                    98:2d:71:f3:0c:83:37:18:63:a3:bd:f7:cd:41:5d:
                    45:e9:cb:3c:93:8d:1e:53:ec:3f:e0:5e:35:1f:de:
                    eb:2e:49:97:f6:d5:48:72:dd:82:6c:31:2f:cd:19:
                    42:cc:19:d2:20:59:d7:ab:1d:b1:54:ee:1a:8e:ca:
                    c1:34:a5:1f:08:ff:79:36:1b:9f:52:63:f2:3b:00:
                    42:ff:42:8f:a0:08:15:4c:45:72:4a:74:ab:42:f6:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:96:48:CE:12:EA:4C:94:48:A6:20:8F:49:07:54:B7:87:7F:D2:21
            X509v3 Authority Key Identifier:
                keyid:D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:29:ce:01:b3:61:c3:6a:fa:eb:a9:e3:7a:97:e9:3c:8b:14:
         3e:7a:00:dd:9c:0f:61:d7:36:91:df:74:74:ef:17:35:29:30:
         8f:99:c9:fc:96:72:89:54:06:7c:64:a6:11:44:5d:19:7f:18:
         fb:c7:a1:4c:9a:6f:de:b9:b1:6b:94:07:99:53:c1:54:99:81:
         55:fd:80:66:b6:dd:34:0f:79:a8:2a:fd:98:c1:2c:37:c4:c3:
         93:a6:fa:09:a3:ac:63:a7:55:3c:26:e8:c0:37:7f:89:0e:54:
         53:bf:e9:e8:0f:3c:e5:ab:2e:e8:0b:18:45:f9:35:26:dd:73:
         37:58:c0:6e:55:a6:55:55:b3:42:30:d4:82:6b:31:69:f9:34:
         4b:8e:44:3a:61:34:a8:8d:76:fc:92:87:a1:14:b8:ba:13:62:
         8f:d3:62:f5:96:d0:f4:8b:bd:e2:b0:6d:21:6d:6e:cc:ea:74:
         da:4f:02:83:cd:51:7e:d0:21:10:f6:54:a4:e5:83:f1:bc:80:
         c9:94:84:c3:0d:6d:e0:d9:af:12:da:d1:32:40:fc:27:7a:54:
         c0:23:42:d6:50:19:2f:f9:3c:b5:8f:1f:2c:bb:23:49:70:e4:
         09:fd:e3:28:7c:a5:a5:a7:3d:d6:8e:dc:6a:cf:6f:ba:0d:f5:
         56:a6:18:4a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUa9Oe+p90lmP3ReuswJMBxSLGa5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE4QzMwRkQ3QzNFODExNEI3MzZFQkREMjdGRTkzQzA2
NzYzQkRDNjAeFw0yNDA5MTAxNDU2MDFaFw0yNTA5MDkxNTAxMDFaMDMxMTAvBgNV
BAMTKEUwOTY0OENFMTJFQTRDOTQ0OEE2MjA4RjQ5MDc1NEI3ODc3RkQyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7hqAZ8sh8nrhrUbGaIlZL2l5
VUcKjkKZheMg6BGPgrrdvpnJtuOpki2KY4jdnLd0cYFgxWH4F4FROwO0eikpIybV
ebB62415GeMyJjMBclmnS4Z3TB1lZHs5+yz40vApWsa6ah/niQtUjHKIZ9WI8rRK
s6C1F85KlIZqlh58dR4Xv14ypeOZd8lmYz+lbzgDrpcgj1MsxBDE7PvoBKWDgvop
YJgtcfMMgzcYY6O9981BXUXpyzyTjR5T7D/gXjUf3usuSZf21Uhy3YJsMS/NGULM
GdIgWderHbFU7hqOysE0pR8I/3k2G59SY/I7AEL/Qo+gCBVMRXJKdKtC9kSpAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQU4JZIzhLqTJRIpiCPSQdUt4d/0iEwHwYDVR0j
BBgwFoAU0Yww/Xw+gRS3NuvdJ/6TwGdjvcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvOS9EMThDMzBGRDdD
M0U4MTE0QjczNkVCREQyN0ZFOTNDMDY3NjNCREM2LmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzkvRDE4
QzMwRkQ3QzNFODExNEI3MzZFQkREMjdGRTkzQzA2NzYzQkRDNi5jZXIwgZsGCCsG
AQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNkYmRlY2M0ZmE0
LzkvMzIzMzJlMzEzNTMwMmUzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM3Mzcz
MTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCF5YIMA0GCSqGSIb3DQEBCwUAA4IBAQAXKc4Bs2HDavrr
qeN6l+k8ixQ+egDdnA9h1zaR33R07xc1KTCPmcn8lnKJVAZ8ZKYRRF0Zfxj7x6FM
mm/eubFrlAeZU8FUmYFV/YBmtt00D3moKv2YwSw3xMOTpvoJo6xjp1U8JujAN3+J
DlRTv+noDzzlqy7oCxhF+TUm3XM3WMBuVaZVVbNCMNSCazFp+TRLjkQ6YTSojXb8
koehFLi6E2KP02L1ltD0i73isG0hbW7M6nTaTwKDzVF+0CEQ9lSk5YPxvIDJlITD
DW3g2a8S2tEyQPwnelTAI0LWUBkv+Ty1jx8suyNJcOQJ/eMofKWlpz3Wjtxqz2+6
DfVWphhK
-----END CERTIFICATE-----
Generated at Fri Oct 4 08:05:27 2024 by rpki-client on console-ams.rpki-client.org