Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/4/323630363a623063303a3a2f33322d3438203d3e20393435.roa
File:                     323630363a623063303a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          3AslHuGXgNxFzZoQDeE2NcWZhgwUTJIw9sF+Ha0UxaA=
Subject key identifier:   CB:1F:CF:77:EF:C4:78:2D:AD:15:D7:76:EB:A1:FF:BC:ED:AA:E9:69
Certificate issuer:       /CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Certificate serial:       7FC204DC510FAEA8C01ACD91C2A94B604DCFD1C5
Authority key identifier: 47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Subject info access:      rsync://dev.tw/rpki/August/4/323630363a623063303a3a2f33322d3438203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:22:34 +0000
ROA not before:           Tue 17 Oct 2023 16:17:34 +0000
ROA not after:            Tue 15 Oct 2024 16:22:34 +0000
asID:                     945
IP address blocks:        2606:b0c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c2:04:dc:51:0f:ae:a8:c0:1a:cd:91:c2:a9:4b:60:4d:cf:d1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
        Validity
            Not Before: Oct 17 16:17:34 2023 GMT
            Not After : Oct 15 16:22:34 2024 GMT
        Subject: CN=CB1FCF77EFC4782DAD15D776EBA1FFBCEDAAE969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:3d:6b:77:c4:fe:e5:e2:a4:b7:ab:43:8c:
                    a1:1d:3a:3b:cf:8a:6d:bd:b7:4f:3c:66:d1:a3:ec:
                    20:45:cf:d3:96:80:59:3d:3b:c4:95:4e:36:45:0b:
                    5c:91:56:7b:6d:85:3c:ae:93:5b:f5:3c:64:af:82:
                    af:f1:f1:94:1f:11:5f:db:bb:97:7c:ae:53:83:65:
                    e1:61:41:0c:73:83:13:15:dc:4e:3c:5b:f1:fc:2c:
                    77:ae:ea:cf:87:53:98:4b:71:2e:ed:f8:d8:69:68:
                    53:ae:7f:86:6a:d6:bb:3c:7c:75:84:41:32:5c:54:
                    fc:4f:0d:6d:f7:a1:bc:ed:de:af:b4:1b:61:0f:58:
                    ed:b7:e1:d9:cd:2a:c6:94:97:c4:41:91:6d:63:91:
                    7f:1f:a6:68:98:55:b6:c9:50:0f:d9:a8:7d:2f:ee:
                    2a:b7:04:30:cf:77:8a:8a:95:86:78:77:97:06:b1:
                    c4:eb:8f:a0:c6:9b:81:b7:cc:41:ff:4b:9d:4c:64:
                    70:7a:c6:77:9b:7d:66:59:9d:e6:b9:ea:81:a7:a9:
                    60:40:a5:ff:ef:18:40:df:e8:5c:72:e6:a6:05:38:
                    0b:b6:0d:ed:69:35:9b:c6:5b:d8:da:d2:37:d4:82:
                    8b:5d:8f:91:ef:a9:75:3c:6c:7b:c4:72:70:f4:c0:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:CF:77:EF:C4:78:2D:AD:15:D7:76:EB:A1:FF:BC:ED:AA:E9:69
            X509v3 Authority Key Identifier:
                keyid:47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/4/323630363a623063303a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:99:76:54:62:0d:9e:6f:b9:8b:31:6f:f9:eb:76:e8:c1:ff:
         2a:19:d5:24:f7:da:06:77:9c:20:64:f5:2a:54:69:97:65:88:
         10:67:59:6a:22:8e:2b:12:5f:66:aa:d5:1a:c2:79:3c:44:68:
         39:7e:63:f8:a1:4b:a9:a4:ca:0e:51:de:f6:1b:12:d3:9d:4c:
         44:3f:b2:95:91:05:4b:86:0b:71:99:f9:fd:c5:57:97:fc:ef:
         58:8e:5d:aa:a4:b7:70:44:80:0f:d9:7d:34:b1:a3:c8:b4:de:
         bd:9d:56:2e:5e:91:0b:46:b6:6b:42:6f:0f:8f:08:e2:3a:c2:
         00:d4:4d:cd:76:03:21:16:ea:bd:1f:97:0e:70:44:7e:42:ac:
         3d:8e:b2:81:9a:56:d1:e5:6f:b6:bb:b0:0f:07:4e:8d:d4:df:
         c2:7f:20:d7:76:76:4e:4f:60:b4:98:04:c4:06:08:5c:46:af:
         4d:40:57:bc:9f:76:c6:12:4f:a1:1b:06:c3:04:85:0f:01:08:
         a7:f5:c7:e1:a9:7a:50:76:a7:1f:2d:cc:ed:77:e0:f0:22:bc:
         e9:76:a1:58:9c:66:9d:6e:e5:eb:f2:c2:04:ac:8a:e9:ed:5d:
         01:53:0d:66:c2:30:7a:2b:fc:95:f1:87:d4:12:bd:99:2a:8e:
         f9:a0:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----