Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa
File:                     3134312e3139332e32312e302f32342d3234203d3e203338303233.roa (raw, json)
Hash identifier:          rlMadXXjqHm1nHhUayzM8WcupHEBsFAEmmANvMg+rVI=
Subject key identifier:   87:46:AB:94:88:BC:83:33:7D:B7:0F:73:28:E3:B4:52:F7:A2:1E:CF
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5D9D92E69B385454E591484C902B87F90ABA6775
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa
Signing time:             Mon 24 Mar 2025 22:51:54 +0000
ROA not before:           Mon 24 Mar 2025 22:46:54 +0000
ROA not after:            Mon 23 Mar 2026 22:51:54 +0000
asID:                     38023
IP address blocks:        141.193.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9d:92:e6:9b:38:54:54:e5:91:48:4c:90:2b:87:f9:0a:ba:67:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Mar 24 22:46:54 2025 GMT
            Not After : Mar 23 22:51:54 2026 GMT
        Subject: CN=8746AB9488BC83337DB70F7328E3B452F7A21ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:15:c9:81:8e:91:f2:1b:ef:ea:3b:90:d3:
                    42:a7:7a:20:72:37:5e:8f:61:6a:23:50:ab:10:3c:
                    cc:6b:91:a3:56:a1:2d:29:48:f4:e0:8c:85:f3:40:
                    3a:b7:49:58:f0:4b:78:6c:85:d6:30:37:7f:25:df:
                    e5:2e:a2:da:5b:50:ed:39:1a:3d:46:95:87:a6:45:
                    36:e2:64:ab:7d:73:dc:15:7c:a1:d2:bb:08:ff:01:
                    9e:92:30:74:6e:71:94:f6:5f:99:e2:5b:8d:67:21:
                    25:53:40:3f:92:5f:05:44:21:41:46:1e:c6:a0:ab:
                    77:50:b8:f3:81:29:3d:54:58:20:ce:49:85:51:79:
                    fb:bf:b1:d7:f6:58:9c:b7:a8:ba:02:05:20:6a:76:
                    ff:e0:5e:79:ee:8e:62:59:b0:1d:74:00:c5:c0:0f:
                    69:0b:16:2b:bf:74:35:75:ed:d9:f1:10:c5:aa:40:
                    75:68:7d:85:84:92:75:94:0e:5f:27:aa:98:a1:bf:
                    70:61:a5:b6:e2:6d:86:ca:0e:4b:e0:d6:b9:9b:fe:
                    fe:73:94:d3:e3:7f:9d:43:a2:3b:af:69:4d:b8:0f:
                    0b:c0:fb:b7:57:0e:84:ee:ee:7e:79:1c:10:54:04:
                    09:1b:a9:5b:ee:0f:ed:5b:28:e3:7e:02:6e:5f:db:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:46:AB:94:88:BC:83:33:7D:B7:0F:73:28:E3:B4:52:F7:A2:1E:CF
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203338303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:92:2f:ea:a9:99:55:33:51:1b:10:b9:65:af:bf:44:61:
         a0:1b:bc:6f:d8:79:16:b0:d3:06:7d:50:30:69:1a:77:80:27:
         80:77:a8:84:43:70:92:23:d8:63:b2:58:71:64:58:27:19:11:
         13:36:fe:d9:53:01:5b:d4:63:a2:0d:8f:cd:72:d2:24:87:36:
         b7:2e:b4:14:60:78:8e:5f:a1:0a:a0:55:82:28:05:42:f8:8a:
         2e:b5:ba:2c:ba:e9:c5:2d:e1:60:00:c5:06:79:34:63:77:66:
         5f:5f:12:8c:80:c4:29:fe:ff:f6:89:82:2c:04:0f:2e:b6:67:
         56:b0:fa:4a:92:8c:79:cc:f7:83:6a:6e:24:cb:51:da:c7:27:
         18:e8:98:7c:87:5d:83:0d:e2:aa:c1:20:8c:da:90:b5:e5:c4:
         71:33:37:ea:7a:94:4f:ac:06:cd:d8:d1:b2:3d:3d:1e:e0:7d:
         b1:88:8c:bf:9b:50:3c:92:ec:c6:e1:98:74:77:73:aa:44:49:
         32:4a:3f:10:1a:90:37:e5:ae:74:d4:6f:8d:ea:9e:09:ba:bc:
         11:b2:64:c0:1d:74:ab:61:1c:78:6a:26:ff:09:5f:71:25:11:
         1c:3f:85:97:20:a5:84:56:eb:f8:b4:96:9b:78:6e:19:4b:32:
         7a:ef:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----