Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa
File:                     323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa (raw, json)
Hash identifier:          kF4T633+E1uWJiPvpCN1FesM2QqRkGL/Lr0m6sWf0+0=
Subject key identifier:   5D:BD:E3:28:C1:51:CD:7A:51:70:33:62:96:6F:4A:35:31:1E:37:DB
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       795309C39825465F9459C10C684507B670CD0C39
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa
Signing time:             Mon 11 Mar 2024 04:13:48 +0000
ROA not before:           Mon 11 Mar 2024 04:08:48 +0000
ROA not after:            Mon 10 Mar 2025 04:13:48 +0000
asID:                     18041
IP address blocks:        2602:fc23:11d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:53:09:c3:98:25:46:5f:94:59:c1:0c:68:45:07:b6:70:cd:0c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:48 2024 GMT
            Not After : Mar 10 04:13:48 2025 GMT
        Subject: CN=5DBDE328C151CD7A51703362966F4A35311E37DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:d8:46:01:5c:42:d6:69:d9:92:6f:2a:9e:
                    83:2c:bb:84:39:2d:a0:cb:6e:68:23:37:86:96:6e:
                    ba:c5:77:3a:bd:3b:5d:c0:f9:22:2d:24:5c:5a:c7:
                    5e:ad:74:6b:ff:90:ff:9e:2d:c4:42:c7:d7:95:5b:
                    43:ac:53:18:40:fc:63:60:50:92:6c:fb:2c:5e:4a:
                    dd:5a:d4:0b:cb:59:b6:5f:50:01:fc:8f:2d:e9:69:
                    e7:88:e1:77:4a:87:37:45:b0:4e:dc:54:10:cd:75:
                    e3:bd:d3:48:8f:52:b8:c1:69:d8:13:59:73:e4:9c:
                    0c:79:b9:55:a5:12:0b:ca:ac:94:26:cf:dd:2d:29:
                    33:d6:ce:ae:c8:d2:0b:77:6f:8e:ae:de:d6:fa:39:
                    34:af:30:7e:8d:ea:a3:ab:91:27:86:cc:1b:12:4d:
                    53:6e:64:d1:bf:31:d6:d1:49:c2:da:95:8d:c1:c2:
                    0b:ad:75:ec:10:de:9b:9d:3c:bb:db:ac:f0:94:d3:
                    29:ed:87:b7:9c:91:9f:c9:e3:a1:f5:68:f8:63:c4:
                    5c:3a:86:b7:da:c0:77:27:a5:2c:cd:ba:c5:43:07:
                    8c:19:c6:4b:50:13:be:b9:ae:14:e4:2a:65:83:03:
                    0c:1b:80:42:ec:a9:5a:bd:ca:b3:a2:95:f5:d4:fe:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:E3:28:C1:51:CD:7A:51:70:33:62:96:6F:4A:35:31:1E:37:DB
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11d::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:5c:64:54:b2:1a:ad:c4:64:33:79:a2:1c:d7:d4:b8:3e:
         86:42:25:d9:4b:cb:3c:d5:cc:1f:2b:82:de:6c:3d:b2:35:1f:
         fa:31:a1:26:bd:19:6c:f4:c4:c3:ea:cb:e5:be:a2:a3:63:f2:
         1b:15:b9:c2:16:9c:e1:61:fb:55:e2:90:13:35:11:88:13:5d:
         26:31:d4:ea:81:84:24:84:14:94:5d:7e:56:24:4e:6d:bb:12:
         cc:65:b0:ac:aa:8b:06:e3:bb:38:84:85:6d:e6:59:b9:69:66:
         6c:a8:b9:ac:51:69:b4:4f:2f:02:a1:5c:1d:ef:fb:0d:d7:af:
         62:6e:bf:e3:a9:11:b2:3f:09:86:4f:a9:f6:f5:fc:a6:0c:2e:
         cb:72:96:a3:b1:be:c7:e1:04:fd:1d:b3:8e:32:69:ab:aa:ea:
         f3:64:34:16:be:a3:92:b8:e3:d7:33:1d:36:4e:e0:ed:ff:bf:
         d1:09:ee:fb:ac:da:58:de:3d:3e:c8:2d:fc:98:b1:b4:23:c7:
         31:96:93:ab:7e:12:0f:71:b7:c1:04:fe:24:80:2d:1f:b5:d5:
         d4:cf:20:78:f5:c7:99:4d:13:31:22:b0:a8:f6:b4:cf:fa:42:
         fe:af:71:d2:54:c1:11:11:a2:8c:ba:0f:03:5c:f0:5f:f8:20:
         de:4c:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----