Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          NYwA1oAyYJJ3zee1KqqIngd2XMVDcOdFG1vG9DVgfFA=
Subject key identifier:   DA:65:BE:39:4F:CA:8A:99:4F:29:DF:B9:AC:61:8E:42:C7:0D:8C:A6
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       796E9381DF97C0135829FB94B31ED09448F66DF9
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Tue 17 Oct 2023 16:00:46 +0000
ROA not before:           Tue 17 Oct 2023 15:55:46 +0000
ROA not after:            Tue 15 Oct 2024 16:00:46 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6e:93:81:df:97:c0:13:58:29:fb:94:b3:1e:d0:94:48:f6:6d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Oct 17 15:55:46 2023 GMT
            Not After : Oct 15 16:00:46 2024 GMT
        Subject: CN=DA65BE394FCA8A994F29DFB9AC618E42C70D8CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:0e:7b:79:9b:17:c4:19:e6:9f:d7:2e:b5:
                    88:e0:ae:e5:ef:63:90:d7:21:04:a9:e6:5f:c8:50:
                    ba:5d:b5:db:94:d8:3b:8a:bb:09:46:06:78:36:07:
                    3f:d1:3a:fd:30:86:6a:ed:21:a9:97:9c:4f:d9:b7:
                    15:92:ac:3a:ad:8f:d1:c6:e8:c3:bf:04:5d:94:29:
                    11:ff:01:ef:8e:88:05:73:d8:93:ab:d3:40:cf:2f:
                    69:21:ad:72:3e:aa:1e:6a:df:d5:57:7a:c4:f8:87:
                    c8:b7:09:0f:41:e1:eb:23:0a:7b:75:0b:7d:31:c1:
                    77:85:a1:a7:55:93:29:7e:f3:a8:0e:99:3f:e9:e2:
                    d6:bb:9e:58:f8:3f:91:17:8e:dc:95:14:b5:ae:ac:
                    89:8f:bc:72:54:90:ba:50:42:9d:b7:56:ab:2e:d6:
                    e9:21:cf:86:21:38:75:1b:fb:56:fb:d0:6e:db:ed:
                    1b:87:96:31:30:df:af:38:c6:3e:93:11:21:ab:2d:
                    30:13:49:4e:f1:20:51:ee:a7:98:a1:a9:67:21:10:
                    00:e4:30:46:21:a9:5b:89:c5:c1:12:6f:4a:1b:a1:
                    a5:a0:e1:f8:3b:51:f2:47:6e:76:b4:95:3c:20:45:
                    07:ea:66:e9:85:e4:9d:5b:42:c3:0e:17:cb:55:fa:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:BE:39:4F:CA:8A:99:4F:29:DF:B9:AC:61:8E:42:C7:0D:8C:A6
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:68:f2:3b:47:3c:1d:82:13:da:54:50:bc:86:3b:7c:3a:
         32:f4:59:3a:cd:c2:dc:76:f1:4a:ea:ff:f9:25:65:98:6f:41:
         27:ca:22:07:9a:67:a7:e3:44:fc:27:1f:ec:82:23:09:aa:f1:
         a2:77:96:8d:6f:03:27:3f:49:1c:58:ef:03:23:80:fe:dc:05:
         03:f6:a8:58:cb:0e:79:1d:25:71:66:8b:5b:1c:c4:65:d5:53:
         72:8e:5b:77:53:d3:19:5e:aa:f2:73:e2:e2:e7:a9:1d:6c:58:
         11:12:08:04:ce:cc:c9:da:8a:7b:1c:1a:59:1a:9c:e8:28:98:
         5b:68:b0:47:f7:c6:52:6d:ce:f8:2c:6e:1b:54:dd:58:49:8d:
         16:8f:e3:0a:e8:eb:a9:c4:cf:74:6d:2a:6d:3e:57:f3:bb:5b:
         76:67:d0:3f:89:87:e1:d9:ab:81:2f:4d:fe:ed:ed:ad:51:f6:
         80:c1:51:1f:16:a2:c2:f6:87:27:bb:e8:49:37:fc:50:ac:1a:
         fa:2a:f4:19:79:b3:64:fe:75:b8:96:ea:dc:c5:75:2e:1f:71:
         79:fa:fa:80:78:31:97:15:c2:aa:75:e7:b3:29:6e:75:0a:1e:
         41:36:de:f6:d2:bb:a0:b5:09:39:53:e8:67:20:38:28:f8:24:
         a2:95:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----