Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
File:                     32332e3135302e382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          wJCqlEEX9Nd8Jlo7XOrHGSoip5MLr6QpBKyEVuIRvhA=
Subject key identifier:   C1:C9:8B:8D:BA:74:9F:75:FA:56:4A:8E:F9:4A:95:99:DB:4D:D7:FF
Certificate issuer:       /CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Certificate serial:       39E5F2ABA65F72DB27AEADE6643DA6BDEC39CE08
Authority key identifier: D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
Authority info access:    rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
Signing time:             Wed 10 Jul 2024 02:22:27 +0000
ROA not before:           Wed 10 Jul 2024 02:17:27 +0000
ROA not after:            Wed 09 Jul 2025 02:22:27 +0000
asID:                     945
IP address blocks:        23.150.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:f2:ab:a6:5f:72:db:27:ae:ad:e6:64:3d:a6:bd:ec:39:ce:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
        Validity
            Not Before: Jul 10 02:17:27 2024 GMT
            Not After : Jul  9 02:22:27 2025 GMT
        Subject: CN=C1C98B8DBA749F75FA564A8EF94A9599DB4DD7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:61:88:cb:51:ed:52:03:6b:9f:86:96:42:24:
                    f1:72:49:e1:b6:56:c6:86:22:e4:79:21:d6:35:45:
                    c6:a2:b8:6b:e3:b8:1b:90:10:42:e3:45:d7:1c:5d:
                    03:ad:a0:ca:98:cb:f7:7e:0a:9d:33:64:67:14:22:
                    97:05:ba:04:5a:c8:6f:30:c0:cc:fb:e2:47:d9:e3:
                    81:cf:df:b1:f5:7d:b7:4c:10:82:a7:f9:f3:e6:67:
                    2c:00:29:d6:c6:06:e8:f4:11:f8:e1:9a:11:b9:80:
                    11:10:65:a2:3a:34:f5:79:7a:b5:b7:41:0b:49:16:
                    67:c9:4e:40:4a:26:df:aa:3c:dc:81:96:63:30:7f:
                    2e:7f:52:c1:39:8b:0e:c6:57:32:d4:f5:00:63:58:
                    67:cd:8b:d9:2e:cc:5d:61:7d:bb:05:71:53:db:6a:
                    3f:e7:0f:aa:de:cb:8f:bd:49:ef:69:80:96:d4:36:
                    46:d0:33:68:4d:94:fc:33:f5:9d:89:fb:dd:9c:dd:
                    22:fc:4a:6e:03:3f:b5:81:c3:b6:9e:01:c5:69:0e:
                    97:83:c8:63:7c:d0:84:0f:74:ba:f4:34:d0:f5:a8:
                    60:84:79:dd:89:d2:97:da:81:cb:a6:c8:cf:57:5e:
                    b2:64:43:ed:ce:e8:51:03:96:df:73:67:22:86:fc:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:8B:8D:BA:74:9F:75:FA:56:4A:8E:F9:4A:95:99:DB:4D:D7:FF
            X509v3 Authority Key Identifier:
                keyid:D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e382e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:5c:9f:31:ea:29:80:40:cf:eb:83:ad:65:fc:b4:ed:5f:2d:
         f7:9f:c3:51:e2:1f:f5:67:96:f3:0a:d0:58:2b:0f:e2:38:8a:
         d6:5b:2c:3b:a3:0a:b7:e9:15:66:c5:44:23:7b:11:f9:81:68:
         51:76:24:19:55:87:85:ba:61:2f:5f:eb:01:7c:53:cb:af:f5:
         e3:23:24:ff:92:20:3e:2b:75:bb:83:67:c7:f6:53:ec:71:fc:
         69:16:5f:68:3d:17:f9:10:b6:ec:38:48:15:38:cf:16:10:55:
         63:35:00:d1:c9:e5:fb:44:7a:ca:3f:05:5d:b0:0c:8f:18:cb:
         c4:02:a6:b8:6d:c3:e1:45:90:67:59:0a:94:ff:90:ab:6f:b4:
         5f:8a:67:92:6f:c6:d8:32:8c:c7:e7:b8:3c:96:4c:1a:9c:3f:
         88:82:e5:17:60:4d:55:01:21:48:08:7a:15:2f:bc:65:44:45:
         be:40:c7:72:5d:86:65:3d:cb:f2:6b:95:8a:30:25:4e:54:27:
         69:04:00:1d:09:5b:6c:18:b9:3e:d3:5d:f2:02:55:60:6c:99:
         c8:ae:ca:a3:6f:15:a4:4f:9a:1f:34:5b:1a:3d:32:98:fc:c2:
         b1:c9:ff:52:66:f6:76:6d:1b:db:d5:46:3f:2e:11:cf:46:5f:
         44:39:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----