Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/7/323630323a666332333a3a2f33362d3438203d3e20393435.roa
File:                     323630323a666332333a3a2f33362d3438203d3e20393435.roa (raw, json)
Hash identifier:          h6Xf46QwaqaoOS7eK+gQdO/748xqQRN33eESvrwPHfU=
Subject key identifier:   60:9D:EF:51:9A:E5:53:05:A8:CD:AE:F8:E2:D2:4F:14:21:33:6B:F5
Certificate issuer:       /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial:       3AC307773C36CFC153EFAFFF0CD4B78ED063B5D4
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access:      rsync://dev.tw/rpki/August/7/323630323a666332333a3a2f33362d3438203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:22:51 +0000
ROA not before:           Tue 17 Oct 2023 16:17:51 +0000
ROA not after:            Tue 15 Oct 2024 16:22:51 +0000
asID:                     945
IP address blocks:        2602:fc23::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c3:07:77:3c:36:cf:c1:53:ef:af:ff:0c:d4:b7:8e:d0:63:b5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
        Validity
            Not Before: Oct 17 16:17:51 2023 GMT
            Not After : Oct 15 16:22:51 2024 GMT
        Subject: CN=609DEF519AE55305A8CDAEF8E2D24F1421336BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:78:42:eb:36:9a:98:9f:bb:80:71:58:b0:
                    6d:a2:e1:61:26:87:49:4e:2a:d2:32:07:93:1e:a5:
                    8b:07:12:94:65:3f:b1:26:23:8c:f3:d5:81:48:41:
                    99:69:4f:31:67:80:47:cd:6f:0e:01:3b:86:9e:cd:
                    b5:67:83:9f:82:b7:53:49:b4:f5:da:4b:8d:d4:ab:
                    8a:9b:cb:ce:0f:88:49:f6:38:96:27:7d:c9:99:16:
                    25:a0:9f:72:23:58:fd:3c:6d:f2:a8:46:37:ba:db:
                    ad:a3:20:be:b2:92:90:d3:96:9c:bf:63:8e:71:19:
                    fe:14:c7:7f:7f:d7:51:eb:35:a3:55:0c:0d:51:c1:
                    a7:10:86:c0:d8:54:dc:f5:af:e6:d1:b3:b3:ef:fd:
                    14:e1:41:30:5c:ef:6a:a5:76:c3:10:bf:2d:bc:50:
                    78:92:e4:8a:0b:f7:7e:b2:c2:5b:f5:e6:6e:a4:0d:
                    c1:0a:17:51:8e:07:9f:ae:c3:a9:6d:d2:e7:5f:57:
                    ed:47:73:97:19:82:c3:6f:39:11:d7:8a:39:a4:ac:
                    6c:c0:72:48:82:05:ce:69:b9:d1:77:77:45:93:ff:
                    a9:26:61:97:31:94:e6:b5:24:6f:12:cd:46:8b:e1:
                    1d:e9:be:08:52:77:12:13:f9:a6:6a:45:c6:9b:f4:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9D:EF:51:9A:E5:53:05:A8:CD:AE:F8:E2:D2:4F:14:21:33:6B:F5
            X509v3 Authority Key Identifier:
                keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/7/323630323a666332333a3a2f33362d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:65:f0:24:19:dd:8b:c6:e7:7e:1c:92:0f:7a:5a:db:54:
         6c:ba:fc:cd:b4:0b:8d:19:27:1d:fa:5e:86:cf:57:c3:7b:1c:
         aa:1d:ac:fd:4f:f5:92:6e:d2:0d:2d:d1:98:56:d6:28:7d:30:
         cd:6f:18:61:9b:a2:59:7b:53:c5:32:72:8f:d2:4a:0d:46:05:
         da:9f:5b:32:cf:31:3d:45:68:44:ce:d8:04:e6:94:8e:33:b4:
         3a:8e:9a:75:20:db:94:25:63:f9:66:bc:4f:45:c4:89:43:8d:
         5e:5a:dc:d9:41:4d:72:0f:2f:fa:6c:f8:a1:34:a3:a5:31:ad:
         d8:9b:cf:ea:88:05:f6:7a:38:40:db:99:ea:9d:1c:3a:b9:81:
         33:13:be:4d:35:bf:66:51:13:e3:25:bd:b2:05:c0:eb:f8:69:
         e7:b5:8c:1e:ad:78:d7:f3:3e:87:66:84:31:98:f2:ed:98:d8:
         4c:cf:42:0e:f7:7d:95:1a:5b:63:da:e7:e8:91:5b:5d:0e:c0:
         58:04:e1:6e:8a:79:c4:76:a4:0f:8a:cd:f1:3f:6e:10:c3:b5:
         98:0f:86:9e:78:7e:24:87:66:25:96:26:16:70:09:56:47:2e:
         8a:0b:5c:91:e3:65:d5:e4:97:92:67:82:50:ac:e0:a5:7c:ba:
         7e:0c:cc:cf
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUOsMHdzw2z8FT76//DNS3jtBjtdQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGY4NmVjMTUwNWM1MDY2YjUyNWUwOTEw
NWM1OTQyNmQxN2FkNWJkNTQwHhcNMjMxMDE3MTYxNzUxWhcNMjQxMDE1MTYyMjUx
WjAzMTEwLwYDVQQDEyg2MDlERUY1MTlBRTU1MzA1QThDREFFRjhFMkQyNEYxNDIx
MzM2QkY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYx4Qus2mpif
u4BxWLBtouFhJodJTirSMgeTHqWLBxKUZT+xJiOM89WBSEGZaU8xZ4BHzW8OATuG
ns21Z4OfgrdTSbT12kuN1KuKm8vOD4hJ9jiWJ33JmRYloJ9yI1j9PG3yqEY3utut
oyC+spKQ05acv2OOcRn+FMd/f9dR6zWjVQwNUcGnEIbA2FTc9a/m0bOz7/0U4UEw
XO9qpXbDEL8tvFB4kuSKC/d+ssJb9eZupA3BChdRjgefrsOpbdLnX1ftR3OXGYLD
bzkR14o5pKxswHJIggXOabnRd3dFk/+pJmGXMZTmtSRvEs1Gi+Ed6b4IUncSE/mm
akXGm/SbAQIDAQABo4ICUjCCAk4wHQYDVR0OBBYEFGCd71Ga5VMFqM2u+OLSTxQh
M2v1MB8GA1UdIwQYMBaAFCsh98dsWSF2H6jvWxIXLI5LRbbaMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC83LzJCMjFGN0M3NkM1OTIxNzYxRkE4RUY1QjEyMTcyQzhFNEI0NUI2REEuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEz
NzIyN2U5NzFhYy9mMWFiOGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRmZGQ2NjNmMzcv
NjUwNmE2NmVkMGY4NmVjMTUwNWM1MDY2YjUyNWUwOTEwNWM1OTQyNmQxN2FkNWJk
NTQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvNy8zMjM2MzAzMjNhNjY2MzMyMzMzYTNhMmYzMzM2MmQz
NDM4MjAzZDNlMjAzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvwjADANBgkqhkiG9w0BAQsF
AAOCAQEACKBl8CQZ3YvG534ckg96WttUbLr8zbQLjRknHfpehs9Xw3scqh2s/U/1
km7SDS3RmFbWKH0wzW8YYZuiWXtTxTJyj9JKDUYF2p9bMs8xPUVoRM7YBOaUjjO0
Oo6adSDblCVj+Wa8T0XEiUONXlrc2UFNcg8v+mz4oTSjpTGt2JvP6ogF9no4QNuZ
6p0cOrmBMxO+TTW/ZlET4yW9sgXA6/hp57WMHq141/M+h2aEMZjy7ZjYTM9CDvd9
lRpbY9rn6JFbXQ7AWAThbop5xHakD4rN8T9uEMO1mA+Gnnh+JIdmJZYmFnAJVkcu
igtckeNl1eSXkmeCUKzgpXy6fgzMzw==
-----END CERTIFICATE-----