Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS199956.roa
File:                     AS199956.roa (raw, json)
Hash identifier:          3fCehd+uhAk8T65IPUMrF+cJEUm7sgz5jH16B7p2vcA=
Subject key identifier:   17:00:1C:2C:72:34:04:30:31:06:69:23:8A:74:8D:BF:0D:68:AA:A9
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7BF26BBBF50CE5ECDDB52C8DC1B3E0DF750D92C7
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS199956.roa
Signing time:             Tue 17 Oct 2023 16:03:14 +0000
ROA not before:           Tue 17 Oct 2023 15:58:14 +0000
ROA not after:            Tue 15 Oct 2024 16:03:14 +0000
asID:                     199956
IP address blocks:        2a12:dd47:5d00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:6b:bb:f5:0c:e5:ec:dd:b5:2c:8d:c1:b3:e0:df:75:0d:92:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 15:58:14 2023 GMT
            Not After : Oct 15 16:03:14 2024 GMT
        Subject: CN=17001C2C72340430310669238A748DBF0D68AAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:3b:9d:7e:82:29:0c:eb:7d:a0:d0:d7:82:
                    a5:c7:71:05:46:b8:a6:c3:14:72:21:1e:ae:2e:29:
                    0f:06:21:e0:bb:c9:fa:b1:12:1a:16:5a:fc:1f:54:
                    b1:f6:f8:d2:58:0f:f7:17:78:5b:09:47:65:10:87:
                    3b:83:5b:f9:62:c0:74:fb:5b:88:34:35:6b:d1:4c:
                    a0:95:51:8b:6f:c3:30:b5:ae:90:ad:a5:d4:64:1a:
                    60:9c:ad:6b:63:d3:78:e3:7b:71:d7:9f:23:86:f3:
                    67:f8:c9:e1:2b:02:94:a9:9f:64:16:9e:81:59:22:
                    7a:50:7c:f4:85:aa:3e:07:fb:34:8c:d1:87:e5:a6:
                    6e:7e:58:bb:a2:cb:dc:b8:c8:40:e3:8c:7d:dd:cc:
                    bb:5e:0f:af:f1:f6:3e:f7:d2:12:40:08:44:31:7b:
                    81:d9:5b:d8:7d:c1:a7:47:1e:6c:0c:0d:d3:18:ef:
                    80:ee:17:00:f9:21:07:3f:6e:80:f0:c7:c9:17:70:
                    36:c0:cb:05:3d:8f:a3:5a:fa:c8:8c:e2:12:98:ef:
                    ca:6a:ef:e7:18:b9:86:47:1c:71:28:69:7d:b3:7c:
                    f7:35:18:e4:18:2d:9b:e1:4c:2a:4c:e9:f8:85:84:
                    9d:a3:58:de:e5:6f:d7:ae:1f:7b:91:04:66:9a:f4:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:00:1C:2C:72:34:04:30:31:06:69:23:8A:74:8D:BF:0D:68:AA:A9
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS199956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:46:68:48:5e:25:ab:a0:3d:8d:7f:f2:40:25:e2:f8:65:
         8a:63:ee:55:06:71:91:4e:2c:37:31:03:9a:91:f0:93:33:a9:
         e5:6c:46:f4:10:db:5f:bf:f6:67:c0:fc:8d:6f:c5:c1:fc:80:
         5d:0e:e3:24:15:46:87:f5:52:e3:d1:a0:0e:e6:f8:c1:44:e6:
         8c:72:2b:ee:96:29:87:37:4a:b6:99:4e:79:dc:fd:28:fd:02:
         5e:11:7c:6b:c0:1d:cd:b0:3a:04:79:cf:dd:1b:92:b1:a7:c0:
         48:92:b8:41:22:b8:21:17:aa:e0:7c:52:e0:0b:47:4d:c5:14:
         63:48:d9:3f:8f:3e:82:3c:26:bb:4e:08:70:ce:c7:06:46:76:
         6c:42:fa:45:70:e9:c1:1d:f7:ea:b0:37:2c:fe:89:2c:0c:5a:
         9f:81:4a:be:12:b7:82:58:32:9f:ca:6d:e5:db:7f:56:2e:e8:
         93:fe:91:08:3f:da:69:87:3a:09:3d:e0:fc:b6:b7:b5:40:0e:
         ee:f7:81:4e:71:f4:38:35:76:a9:a1:6f:03:e7:35:d4:a0:b5:
         61:b1:a5:e4:ec:aa:a6:b4:5c:da:2e:6c:08:e0:cb:58:b4:67:
         99:79:a3:bb:d0:17:0e:39:ea:be:0b:6b:5d:3d:8c:a2:15:6d:
         e8:e8:32:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----