Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/10/32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa (raw, json)
Hash identifier:          Xqdy7ID3lP1tOkm9uFqmUEWE285Lu9DCDbc85fuE6tU=
Subject key identifier:   B4:D5:EE:41:75:4C:13:E9:98:87:A4:32:BD:71:9B:E9:25:C9:C0:2F
Certificate issuer:       /CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
Certificate serial:       55DC830D22CFD27A628EF830AC335E05A3E725FE
Authority key identifier: 7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/10/32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa
Signing time:             Mon 10 Oct 2022 12:43:18 +0000
ROA not before:           Mon 10 Oct 2022 12:38:18 +0000
ROA not after:            Mon 09 Oct 2023 12:43:18 +0000
asID:                     203453
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dc:83:0d:22:cf:d2:7a:62:8e:f8:30:ac:33:5e:05:a3:e7:25:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
        Validity
            Not Before: Oct 10 12:38:18 2022 GMT
            Not After : Oct  9 12:43:18 2023 GMT
        Subject: CN=B4D5EE41754C13E99887A432BD719BE925C9C02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:5d:62:8c:4c:7f:2e:9f:9f:8c:bf:a2:de:
                    69:61:cc:ea:ce:9c:62:1f:c1:fb:f7:d2:82:46:3c:
                    17:c3:45:34:99:41:96:11:8f:30:2a:a3:ef:78:1a:
                    66:c4:01:01:9d:3a:75:d4:52:87:3b:e1:a0:86:81:
                    ac:c6:2a:d7:57:61:02:c4:c0:98:8a:9c:b2:ed:ae:
                    35:46:f1:86:1a:e1:5f:23:04:22:fa:85:0f:2d:93:
                    26:e4:a4:ef:8c:a1:12:eb:44:e7:ce:d1:fe:05:14:
                    d4:4d:b4:48:18:e0:06:2c:71:dd:36:75:2b:98:17:
                    cc:ab:1b:94:da:c2:df:10:d3:dc:14:7e:2b:48:40:
                    14:79:07:a6:ae:4c:96:a5:4e:91:36:80:bc:18:04:
                    8e:1f:27:4b:a8:79:0d:8e:e1:70:e7:21:39:fd:08:
                    00:4b:2a:3f:fc:83:43:91:6a:aa:b0:ca:8e:c7:35:
                    1d:36:d8:cf:4e:ca:93:69:b3:8c:c5:f4:7b:60:63:
                    e1:63:bd:8c:75:5b:78:60:bb:5c:18:fe:71:14:fa:
                    5f:6a:30:a0:30:ca:a5:38:71:82:e1:3f:3b:95:b6:
                    c9:f8:0f:73:95:ab:89:04:dc:99:7b:da:8b:9d:c1:
                    46:b7:71:59:28:ee:2f:01:78:48:23:de:6b:79:4c:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:EE:41:75:4C:13:E9:98:87:A4:32:BD:71:9B:E9:25:C9:C0:2F
            X509v3 Authority Key Identifier:
                keyid:7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/10/7A988BFDDF3EBDC12A6626E2E2D69FA3205501D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/10/32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:05:e6:6f:94:17:72:ae:e6:c7:9c:69:d5:44:40:dd:9a:b0:
         9e:54:81:52:04:c7:d2:56:9c:2c:d2:5a:4c:8b:db:22:fd:00:
         50:3f:44:4b:a5:26:48:a8:6b:1f:84:05:44:79:a4:f0:ae:5e:
         0b:04:d2:df:15:b9:a8:47:e4:fd:bb:67:46:9b:0e:93:e4:bf:
         e0:12:4f:4f:83:77:6b:03:a1:08:1c:6e:fb:67:eb:93:ce:c2:
         02:9c:bb:77:85:b0:c2:7c:4e:e3:c5:3d:a8:d9:07:c0:b7:e2:
         d5:d4:6b:e0:7c:e2:0f:a2:64:0b:17:e7:01:64:12:45:e5:a2:
         be:d4:b2:32:62:db:53:10:cf:a1:6f:0a:fa:03:ea:c9:98:64:
         78:88:a2:af:ed:15:1c:85:b0:46:c8:d0:37:0e:3b:7f:b9:ed:
         4f:92:b4:fe:3e:ff:8e:1f:d8:e1:b0:3e:c8:b9:d6:7a:35:6a:
         98:a7:51:1a:22:7b:97:27:82:df:92:09:4e:30:2c:21:c9:f0:
         42:11:45:ff:bc:3a:44:dd:af:7b:39:e2:92:16:29:8f:9d:4e:
         ce:d9:5e:bb:75:7b:75:d7:6f:ae:8a:0f:bf:d5:bd:0b:e6:63:
         02:d0:82:f7:9e:68:6a:34:59:93:ae:4f:d3:2a:b6:2a:7f:ce:
         af:a4:f2:60
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUVdyDDSLP0npijvgwrDNeBaPnJf4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2U2MzgxY2YzNWU4YzA5MjQ1N2Y5OTgxNjJhNmZlMzky
MzQ0OGMwNTI1ODkyOGM2YWYwHhcNMjIxMDEwMTIzODE4WhcNMjMxMDA5MTI0MzE4
WjAzMTEwLwYDVQQDEyhCNEQ1RUU0MTc1NEMxM0U5OTg4N0E0MzJCRDcxOUJFOTI1
QzlDMDJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy1dYoxMfy6f
n4y/ot5pYczqzpxiH8H799KCRjwXw0U0mUGWEY8wKqPveBpmxAEBnTp11FKHO+Gg
hoGsxirXV2ECxMCYipyy7a41RvGGGuFfIwQi+oUPLZMm5KTvjKES60TnztH+BRTU
TbRIGOAGLHHdNnUrmBfMqxuU2sLfENPcFH4rSEAUeQemrkyWpU6RNoC8GASOHydL
qHkNjuFw5yE5/QgASyo//INDkWqqsMqOxzUdNtjPTsqTabOMxfR7YGPhY72MdVt4
YLtcGP5xFPpfajCgMMqlOHGC4T87lbbJ+A9zlauJBNyZe9qLncFGt3FZKO4vAXhI
I95reUy9MwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLTV7kF1TBPpmIekMr1xm+kl
ycAvMB8GA1UdIwQYMBaAFHqYi/3fPr3BKmYm4uLWn6MgVQHWMA4GA1UdDwEB/wQE
AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vbG9jYWxuYW1lLzEwLzdBOTg4QkZEREYzRUJEQzEyQTY2MjZFMkUyRDY5RkEz
MjA1NTAxRDYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt
NDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMjEwNDMyNy0wOGFiLTRjZmMtODFlZi03
NmNhZjkwZWNkNzAvN2U2MzgxY2YzNWU4YzA5MjQ1N2Y5OTgxNjJhNmZlMzkyMzQ0
OGMwNTI1ODkyOGM2YWYuY2VyMIGBBggrBgEFBQcBCwR1MHMwcQYIKwYBBQUHMAuG
ZXJzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby9sb2NhbG5hbWUvMTAvMzIzMzJl
MzEzMzM4MmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzNDM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAXiugwDQYJKoZIhvcNAQELBQADggEBAL8F5m+UF3Ku5sec
adVEQN2asJ5UgVIEx9JWnCzSWkyL2yL9AFA/REulJkioax+EBUR5pPCuXgsE0t8V
uahH5P27Z0abDpPkv+AST0+Dd2sDoQgcbvtn65POwgKcu3eFsMJ8TuPFPajZB8C3
4tXUa+B84g+iZAsX5wFkEkXlor7UsjJi21MQz6FvCvoD6smYZHiIoq/tFRyFsEbI
0DcOO3+57U+StP4+/44f2OGwPsi51no1apinURoie5cngt+SCU4wLCHJ8EIRRf+8
OkTdr3s54pIWKY+dTs7ZXrt1e3XXb66KD7/VvQvmYwLQgveeaGo0WZOuT9Mqtip/
zq+k8mA=
-----END CERTIFICATE-----