Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa
File:                     323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa (raw, json)
Hash identifier:          lvc9h1weYG3idesUihKIsOHfDuMwxW5OC03IslwykzQ=
Subject key identifier:   FB:9D:0D:B4:EA:7E:70:E2:D7:27:0D:E4:8F:5A:31:62:69:F9:C8:E2
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       632E85A4D5976067565DBA1EB72E5D76FAEFB3CC
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa
Signing time:             Mon 11 Mar 2024 04:13:47 +0000
ROA not before:           Mon 11 Mar 2024 04:08:47 +0000
ROA not after:            Mon 10 Mar 2025 04:13:47 +0000
asID:                     57401
IP address blocks:        2602:fc23:110::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2e:85:a4:d5:97:60:67:56:5d:ba:1e:b7:2e:5d:76:fa:ef:b3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:47 2024 GMT
            Not After : Mar 10 04:13:47 2025 GMT
        Subject: CN=FB9D0DB4EA7E70E2D7270DE48F5A316269F9C8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:f2:7e:bf:e0:65:7d:6a:12:b0:42:12:91:
                    79:d8:f5:b2:aa:39:e7:0a:aa:17:f1:1f:85:67:ce:
                    19:3e:f3:53:2c:f9:c3:7f:52:27:de:19:c6:76:ae:
                    9d:6d:b4:c6:c9:1e:c4:30:aa:61:3e:bc:fe:5a:3b:
                    56:b3:c9:84:78:a7:8e:d8:fa:4e:7b:62:43:11:dc:
                    39:9e:e1:d5:9a:8a:28:3a:4d:55:a9:8e:21:9a:ca:
                    13:03:4e:44:55:24:fe:95:79:68:eb:38:66:95:4f:
                    4a:21:f1:68:f2:23:f3:2f:c5:b1:5d:18:c7:81:7a:
                    db:87:e6:8b:b6:8a:d9:84:a4:8b:30:32:62:90:93:
                    69:df:a9:3f:45:90:2b:4c:df:d7:2b:4e:b1:87:2e:
                    89:25:aa:28:db:c6:b6:04:24:96:a1:8f:35:69:ce:
                    db:63:a6:2a:65:22:ab:b8:1e:75:44:2a:3e:7d:d2:
                    a6:ea:c0:56:0c:79:c2:68:20:08:e3:2b:14:ad:ba:
                    72:d5:3b:cc:0c:0c:ca:08:65:e5:f9:9c:92:53:62:
                    98:31:ec:e3:27:47:4a:ad:d0:c7:b5:30:b8:97:5b:
                    e2:a6:e4:ab:5c:e4:5c:73:52:8d:ae:61:a7:3e:64:
                    2f:d4:20:a6:28:11:f1:12:7f:ab:44:65:42:b4:8f:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9D:0D:B4:EA:7E:70:E2:D7:27:0D:E4:8F:5A:31:62:69:F9:C8:E2
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:c4:38:e9:e9:db:b9:4c:93:0a:08:46:c5:07:e4:db:f1:
         9b:ca:b0:91:fb:e4:5f:b1:11:68:8c:da:d1:0a:95:78:79:76:
         5e:c1:a2:8f:d3:73:b9:b5:71:cd:91:ea:95:3b:45:19:67:a3:
         ac:08:55:cd:77:ef:a7:a0:5b:9e:f8:52:5e:f1:34:d1:9a:21:
         8f:f7:18:80:7d:61:08:27:9e:26:e9:ac:54:92:1f:01:1f:e8:
         63:39:8b:a2:78:66:33:7a:51:d6:72:3b:56:bc:26:8f:8a:2c:
         f6:75:15:f2:dd:66:90:2e:96:38:81:a4:b0:8f:80:6d:00:56:
         50:c6:56:e2:c4:a0:91:7f:ef:74:45:e3:41:f4:af:6b:4f:a7:
         80:a1:4d:05:f3:73:9b:23:a9:4c:06:88:4f:53:ec:c1:b4:59:
         ed:04:f9:b0:3d:a3:a8:7d:b0:52:92:6a:63:1c:7c:23:27:47:
         5d:d3:1a:a3:38:b5:2e:33:c8:3b:58:bc:38:f7:e4:37:e5:0e:
         93:ce:82:62:e1:a5:e2:0f:1b:55:59:84:d0:c6:ff:bc:56:d4:
         dd:d4:d4:64:cb:a6:7d:68:09:c3:5c:71:56:bc:11:7c:bb:2d:
         04:21:47:42:24:0c:75:57:e6:eb:26:2c:57:18:8d:73:fd:63:
         fa:de:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----