Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e2038303935.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e2038303935.roa (raw, json)
Hash identifier:          zCyzAOJoGe8a00uwMnwCF6owphs7MZGo31hluem3XVg=
Subject key identifier:   96:79:EE:07:C7:74:14:67:18:7E:46:62:22:EF:8B:12:FA:2F:BE:1C
Certificate issuer:       /CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Certificate serial:       5DF8734A396E83E48420E9351C2B6266DEF6D933
Authority key identifier: 32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e2038303935.roa
Signing time:             Sun 27 Mar 2022 00:37:44 +0000
ROA not before:           Sun 27 Mar 2022 00:32:44 +0000
ROA not after:            Sun 26 Mar 2023 00:37:44 +0000
asID:                     8095
IP address blocks:        165.140.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f8:73:4a:39:6e:83:e4:84:20:e9:35:1c:2b:62:66:de:f6:d9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
        Validity
            Not Before: Mar 27 00:32:44 2022 GMT
            Not After : Mar 26 00:37:44 2023 GMT
        Subject: CN=9679EE07C7741467187E466222EF8B12FA2FBE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:93:36:6f:34:a6:90:87:db:a5:09:2d:11:17:
                    be:1f:d6:bc:cb:4a:b3:7b:e7:ff:21:f2:93:f4:0e:
                    cf:a4:e2:f8:0a:c8:80:8a:42:4c:49:c4:ff:2a:9d:
                    eb:59:13:a4:8d:46:85:a3:de:72:6e:88:91:b0:34:
                    2c:13:8a:cf:8d:33:06:cf:f5:dc:69:cd:50:35:68:
                    ee:dc:19:76:a6:f2:63:eb:c0:17:22:05:72:7b:60:
                    0c:86:3e:6f:e0:52:a6:2e:1e:7d:6a:ab:86:14:ff:
                    7d:7b:82:32:ff:0e:d6:72:c2:ee:ed:25:24:58:8e:
                    d0:98:84:a2:34:1b:ff:48:f0:fa:02:43:ca:f9:e0:
                    2b:39:60:73:42:b0:02:ef:bb:f8:42:b7:f8:36:0a:
                    83:3f:d5:f7:83:65:0c:76:94:fa:fc:14:15:29:30:
                    7d:03:d0:ec:06:b4:3a:a9:e2:e6:53:7a:1d:d4:ce:
                    2b:8f:22:14:ff:e4:84:f5:c9:5b:e6:ef:20:03:84:
                    86:00:33:da:08:80:fc:a8:df:9a:5f:34:d6:d3:2d:
                    9d:23:63:d3:9c:df:aa:cb:46:10:41:f9:5a:5a:b7:
                    26:c3:3d:57:8d:ec:f9:9b:04:17:b4:0d:58:e8:39:
                    09:51:a2:3c:9f:37:3e:3c:92:13:c2:4e:0a:45:65:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:EE:07:C7:74:14:67:18:7E:46:62:22:EF:8B:12:FA:2F:BE:1C
            X509v3 Authority Key Identifier:
                keyid:32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/0/32716AA161C2B0D16D116432E37909639E3CA672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/0/3136352e3134302e3134322e302f32342d3234203d3e2038303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:9f:c6:1b:fe:31:86:41:cc:4a:f2:86:c7:a5:5b:cc:db:
         8f:22:82:77:85:2d:a5:49:7f:8d:c5:fa:97:c6:8e:14:07:9d:
         4a:74:eb:53:a2:f7:96:3a:1f:09:23:ca:b5:e2:43:08:4b:97:
         27:ee:a1:8a:6c:04:26:45:b8:8b:0b:9f:f2:6f:f0:06:15:01:
         ff:c5:c1:13:c2:72:71:44:3e:3e:01:e0:99:46:ef:e8:4b:b2:
         f1:8c:ca:bc:4d:21:f7:f3:ab:48:9d:bf:c4:22:9c:97:ff:20:
         50:ae:56:fa:cd:55:38:4d:ed:23:39:45:8a:13:4d:4b:e6:bb:
         1f:4a:12:3b:05:30:8a:a7:2d:ee:fc:be:48:29:8d:88:fb:79:
         34:44:6f:54:5d:2f:bb:d9:17:c9:70:db:a5:c2:e8:16:2f:bd:
         e8:97:2e:d7:8b:26:5a:2d:02:d7:20:c1:c1:93:c0:23:c4:ac:
         1b:97:68:73:66:2b:84:ca:89:5b:70:6c:67:6d:0c:69:c1:cc:
         30:a1:bc:1d:65:61:90:04:a1:89:18:91:1f:02:4f:26:f5:61:
         73:fa:10:86:d7:f5:99:6d:11:62:4e:7e:fc:6f:fb:8b:5c:04:
         ff:e9:10:78:02:ae:12:f5:39:b0:89:7e:18:0c:88:70:1f:b3:
         1b:23:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----