Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
File:                     326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa (raw, json)
Hash identifier:          hz0VEzFT8JKOjTi1nP/3bA23nmUS/IltfrBUO5GzHmY=
Subject key identifier:   48:60:73:2C:1D:9F:0B:10:7A:6C:79:58:07:B5:59:76:96:82:D0:A5
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       64FC42F465A84462CCB811EEE5796174B3E17211
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
Signing time:             Tue 16 Jul 2024 20:47:51 +0000
ROA not before:           Tue 16 Jul 2024 20:42:51 +0000
ROA not after:            Tue 15 Jul 2025 20:47:51 +0000
asID:                     197609
IP address blocks:        2a12:dd47:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fc:42:f4:65:a8:44:62:cc:b8:11:ee:e5:79:61:74:b3:e1:72:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jul 16 20:42:51 2024 GMT
            Not After : Jul 15 20:47:51 2025 GMT
        Subject: CN=4860732C1D9F0B107A6C795807B559769682D0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:15:05:ad:1f:eb:84:46:60:cb:be:5e:13:
                    d0:43:48:17:7d:8a:09:0a:96:92:6a:93:a4:77:ac:
                    be:e2:40:90:21:fb:2d:c9:83:75:c5:ec:c2:4b:b7:
                    0a:46:ba:05:90:00:b2:1a:5b:61:d4:61:f0:33:26:
                    85:96:37:88:d5:fe:ac:cc:af:3e:78:e1:2f:33:2c:
                    70:51:a4:b4:dc:f2:74:a8:39:dc:02:ca:b1:f2:ba:
                    7e:14:4d:04:a8:12:0d:ae:09:d4:ca:0a:03:ca:63:
                    aa:af:b9:96:52:74:94:c0:b6:96:c5:22:43:5b:61:
                    21:3c:03:60:cb:bd:47:21:8e:f5:91:37:b0:24:48:
                    c9:c3:98:ce:e2:31:70:03:f9:36:b7:b5:50:5d:10:
                    35:ed:48:e0:8c:d6:87:26:cd:13:eb:97:18:53:8f:
                    e2:f6:e5:1a:89:f1:4e:12:ff:ac:63:fe:55:af:7b:
                    b6:aa:d4:ae:6c:53:32:17:33:06:95:c5:c8:ba:12:
                    88:68:a4:bf:3d:17:fa:2f:be:35:45:52:5e:3d:aa:
                    ec:77:f0:d0:8a:31:7f:cd:43:47:af:d1:9b:47:70:
                    39:ae:34:62:0b:29:df:de:17:5a:29:4c:65:21:99:
                    f5:c9:8b:9f:c8:5b:de:b0:5e:e0:0a:c1:9c:26:b1:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:73:2C:1D:9F:0B:10:7A:6C:79:58:07:B5:59:76:96:82:D0:A5
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:e3:11:e0:eb:f4:6d:84:e3:ea:4f:6e:90:2d:50:4b:a3:
         28:7c:ce:f5:19:c1:39:5d:61:0b:78:fb:18:15:09:56:e0:53:
         b2:e8:9a:be:ca:4b:d4:63:1a:92:01:31:17:0d:4f:02:89:14:
         a4:47:af:ca:cb:c0:e6:7d:77:8f:f2:31:a7:89:1c:ae:69:38:
         85:77:28:c6:b8:6e:a2:69:d7:b4:94:98:87:52:3e:ff:2f:46:
         40:ff:84:da:a3:1f:a9:fd:79:8d:eb:f4:ce:e7:ba:8b:df:09:
         d8:4b:d4:ca:0f:88:a5:db:db:f5:22:33:23:95:c8:6a:cd:eb:
         8a:00:e2:b6:ec:6c:42:d8:ce:48:cb:f5:98:42:88:b5:f5:1b:
         a5:66:3f:aa:0d:60:ce:6a:a2:43:f6:ba:0c:8e:65:62:72:8d:
         25:6e:63:14:8f:9d:39:ee:49:60:fa:29:e1:eb:10:84:02:64:
         ae:c3:b3:de:22:71:0a:12:e3:d2:b5:42:f0:b9:6a:44:d6:75:
         54:7d:ef:67:b2:04:a5:98:fc:df:1f:22:2a:45:80:89:04:fb:
         ce:9a:16:31:4a:08:7f:b4:4f:f5:b8:fb:18:0c:fa:5b:ab:47:
         75:07:ce:da:9b:ca:41:d0:cf:8d:94:aa:c9:19:3d:04:30:0c:
         db:11:b4:33
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUZPxC9GWoRGLMuBHu5XlhdLPhchEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA3MTYyMDQyNTFaFw0yNTA3MTUyMDQ3NTFaMDMxMTAvBgNV
BAMTKDQ4NjA3MzJDMUQ5RjBCMTA3QTZDNzk1ODA3QjU1OTc2OTY4MkQwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96RUFrR/rhEZgy75eE9BDSBd9
igkKlpJqk6R3rL7iQJAh+y3Jg3XF7MJLtwpGugWQALIaW2HUYfAzJoWWN4jV/qzM
rz544S8zLHBRpLTc8nSoOdwCyrHyun4UTQSoEg2uCdTKCgPKY6qvuZZSdJTAtpbF
IkNbYSE8A2DLvUchjvWRN7AkSMnDmM7iMXAD+Ta3tVBdEDXtSOCM1ocmzRPrlxhT
j+L25RqJ8U4S/6xj/lWve7aq1K5sUzIXMwaVxci6EohopL89F/ovvjVFUl49qux3
8NCKMX/NQ0ev0ZtHcDmuNGILKd/eF1opTGUhmfXJi5/IW96wXuAKwZwmscMxAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUSGBzLB2fCxB6bHlYB7VZdpaC0KUwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgaoGCCsG
AQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzODIw
M2QzZTIwMzEzOTM3MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdRwEwDQYJKoZIhvcNAQEL
BQADggEBAE5N4xHg6/RthOPqT26QLVBLoyh8zvUZwTldYQt4+xgVCVbgU7Lomr7K
S9RjGpIBMRcNTwKJFKRHr8rLwOZ9d4/yMaeJHK5pOIV3KMa4bqJp17SUmIdSPv8v
RkD/hNqjH6n9eY3r9M7nuovfCdhL1MoPiKXb2/UiMyOVyGrN64oA4rbsbELYzkjL
9ZhCiLX1G6VmP6oNYM5qokP2ugyOZWJyjSVuYxSPnTnuSWD6KeHrEIQCZK7Ds94i
cQoS49K1QvC5akTWdVR972eyBKWY/N8fIipFgIkE+86aFjFKCH+0T/W4+xgM+lur
R3UHztqbykHQz42UqskZPQQwDNsRtDM=
-----END CERTIFICATE-----