Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e203133353836.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e203133353836.roa (raw, json)
Hash identifier:          Wwg6aC4958jjRTaStgtASBpqHw21UDYCfIoNpcFET48=
Subject key identifier:   15:61:88:E9:A8:59:AC:3F:10:9C:91:04:EC:2D:E1:D8:F8:62:C5:C3
Certificate issuer:       /CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Certificate serial:       1969DB58B83EB2A7056B7BA40B56A35B61BA5ED2
Authority key identifier: 32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e203133353836.roa
Signing time:             Wed 09 Mar 2022 19:13:20 +0000
ROA not before:           Wed 09 Mar 2022 19:08:20 +0000
ROA not after:            Wed 08 Mar 2023 19:13:20 +0000
asID:                     13586
IP address blocks:        165.140.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:db:58:b8:3e:b2:a7:05:6b:7b:a4:0b:56:a3:5b:61:ba:5e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
        Validity
            Not Before: Mar  9 19:08:20 2022 GMT
            Not After : Mar  8 19:13:20 2023 GMT
        Subject: CN=156188E9A859AC3F109C9104EC2DE1D8F862C5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:ec:86:3c:a4:30:1b:77:cc:a4:d6:97:90:
                    50:d1:54:ce:2b:43:6c:b3:f7:3c:85:00:73:19:4a:
                    67:ad:d4:fd:cd:a8:01:00:a8:3c:90:0a:52:85:b4:
                    d5:a7:e0:82:2c:82:4c:7c:78:70:a9:2e:1f:c7:6f:
                    1a:ab:57:45:e7:49:08:98:9f:c5:02:b7:dc:d5:65:
                    ce:77:81:ec:7a:78:21:f4:32:ca:24:df:de:93:30:
                    a4:3d:70:f8:2e:15:5d:1f:04:01:26:cc:9c:f8:bb:
                    8c:ea:cd:c3:b3:50:51:3d:06:e8:91:42:17:11:89:
                    86:60:a0:16:aa:f5:50:b0:e3:bc:7f:66:de:9d:ac:
                    33:d1:e9:a5:e3:76:71:12:62:af:b2:42:47:39:d3:
                    9e:49:10:b8:59:f7:34:c9:77:e4:d3:04:8f:26:50:
                    33:01:ab:98:2b:55:f7:e6:97:78:99:25:0e:7f:c0:
                    49:e4:7b:93:a7:e2:52:59:d0:c8:b9:07:41:1b:35:
                    1c:7f:99:ed:42:27:9c:27:55:13:65:24:32:4f:5f:
                    e1:53:7d:dd:5f:e9:26:3e:2c:6e:55:c0:fb:bc:28:
                    3f:6e:7e:f3:b3:cd:72:39:b4:17:75:27:42:ac:bc:
                    10:c0:06:ae:d4:f4:35:4e:24:2c:22:53:a0:89:ee:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:88:E9:A8:59:AC:3F:10:9C:91:04:EC:2D:E1:D8:F8:62:C5:C3
            X509v3 Authority Key Identifier:
                keyid:32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/0/32716AA161C2B0D16D116432E37909639E3CA672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e203133353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:d5:e5:2e:37:4b:96:af:9f:b8:71:75:e9:78:88:9d:e9:
         f4:c4:51:04:ad:00:f6:7e:d1:3c:1d:74:08:dd:f5:f8:0e:75:
         39:9a:00:15:18:c4:68:d2:b8:44:4b:fb:ca:d1:25:ba:cc:30:
         75:22:cc:e6:c9:ad:49:f5:70:7e:8a:df:54:3a:c1:7c:f0:27:
         97:19:0f:22:b6:dc:e7:30:32:5e:b3:37:62:9d:57:c9:43:4d:
         04:84:41:5b:65:3b:cb:73:d2:15:92:cf:83:0e:e2:a0:0a:a7:
         a3:8a:dc:32:94:04:00:80:4a:65:01:0d:70:35:ef:52:5c:db:
         e3:44:82:c1:c0:94:17:aa:f9:07:34:99:2a:c7:a3:a4:d9:30:
         ba:91:38:41:c4:91:ee:6b:6b:5a:06:02:02:a9:07:56:fc:93:
         c9:37:b2:62:76:de:d9:17:6a:2c:0a:6b:82:fd:e4:aa:fe:51:
         92:79:44:16:47:ee:c3:0a:2c:fc:e2:9d:77:a5:50:84:60:41:
         38:f1:87:7b:03:dd:70:85:41:ed:99:aa:44:2d:50:b1:6b:07:
         38:4b:01:4b:8b:93:94:e0:93:23:55:1d:de:f4:2e:95:13:91:
         ec:eb:22:08:6e:fe:2a:56:f3:2d:d1:ea:30:7f:e0:ed:8d:16:
         0c:a5:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----