Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa
File:                     3134312e3139332e32312e302f32342d3234203d3e203436393937.roa (raw, json)
Hash identifier:          X3fQN2hgOqZ+ezBCKNGHkh8c019xstzYZU5+ok9bvrM=
Subject key identifier:   43:1B:D6:63:CB:13:25:3F:8A:D7:AA:66:B0:23:39:72:57:A3:50:58
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       504B0DDA3B2DC81F0109EF76D9EDB981B248F93A
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa
Signing time:             Mon 15 Jul 2024 08:50:10 +0000
ROA not before:           Mon 15 Jul 2024 08:45:10 +0000
ROA not after:            Mon 14 Jul 2025 08:50:10 +0000
asID:                     46997
IP address blocks:        141.193.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:0d:da:3b:2d:c8:1f:01:09:ef:76:d9:ed:b9:81:b2:48:f9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:10 2024 GMT
            Not After : Jul 14 08:50:10 2025 GMT
        Subject: CN=431BD663CB13253F8AD7AA66B023397257A35058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:02:56:31:fa:3f:52:0a:df:6b:eb:63:c9:
                    56:45:d6:7c:97:56:98:fd:11:c7:10:e0:2f:25:46:
                    48:82:0f:05:49:45:27:46:33:6c:62:fe:12:b3:55:
                    24:c2:34:65:3d:f9:12:b6:42:c3:48:d3:0e:66:d1:
                    5b:aa:84:d0:5e:67:64:d6:d2:98:79:07:0a:27:6f:
                    97:01:56:c7:7a:9e:9d:d6:14:51:ca:46:f1:db:70:
                    11:93:24:fc:3a:92:76:c9:1c:fe:80:75:37:1c:38:
                    ab:e7:2e:3c:a0:26:db:47:32:0f:7d:1f:d0:45:5d:
                    62:0a:eb:66:a7:e2:a9:b7:cd:ff:38:29:28:a4:61:
                    c8:e0:ae:ad:14:17:d5:35:89:ae:92:3c:b8:2b:7a:
                    f2:bc:79:03:75:a3:47:49:73:1e:0a:8e:18:32:7c:
                    2f:5b:00:dd:69:8d:b3:29:bf:fd:a4:86:e5:0b:67:
                    be:98:d8:89:e6:fc:d9:04:d7:da:39:de:b7:a0:63:
                    8e:43:4f:65:c5:01:f3:e0:f6:f4:f7:80:1b:e4:26:
                    da:a8:63:37:13:6c:20:b5:e9:ef:73:1e:79:fe:a5:
                    f6:31:cf:30:f8:41:a1:f1:41:d0:af:d3:08:a5:9f:
                    6e:bc:7e:b0:90:16:67:12:30:8b:d5:f0:40:20:71:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1B:D6:63:CB:13:25:3F:8A:D7:AA:66:B0:23:39:72:57:A3:50:58
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:1d:09:4f:e5:26:80:0b:32:5b:da:16:23:01:26:8a:0b:40:
         94:ee:85:d1:0f:dd:06:4c:a4:07:6c:31:56:a7:26:8c:8b:18:
         5d:b2:e7:65:85:84:69:51:7e:25:0f:b1:df:39:c2:d1:14:6d:
         53:9c:01:6b:5f:dc:19:f3:d6:99:e4:09:4a:12:f2:1b:58:48:
         37:a4:ea:f0:9a:49:02:fc:ec:e8:db:b5:7d:b6:e0:e4:89:a0:
         19:e2:3a:bc:84:28:91:48:4d:29:7f:e5:bb:49:e0:13:a2:68:
         0c:89:dc:50:7c:1d:f8:9a:11:f4:42:b8:1f:01:0b:32:24:3f:
         ac:4c:ad:ca:07:9c:09:70:da:5c:d5:d7:14:b8:2d:2c:94:04:
         54:64:f9:78:f7:27:e3:90:29:1e:5a:30:95:6c:76:1a:65:52:
         ca:a1:2d:37:3e:70:0e:4d:0d:51:c1:b3:76:19:f9:8e:ed:23:
         e8:34:cc:42:84:c0:ae:9b:8d:bd:45:2f:1b:bb:e3:37:0b:f4:
         00:77:7c:da:36:d7:c8:a8:93:c4:a4:1f:3d:f4:f8:cc:da:0a:
         6d:6d:38:de:d0:d9:e4:05:30:aa:c4:f0:db:eb:f2:0d:22:ae:
         aa:13:18:10:b8:fd:08:0c:9a:d5:df:96:9d:fa:ba:9f:43:d5:
         89:f1:e4:42
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUEsN2jstyB8BCe922e25gbJI+TowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEwWhcNMjUwNzE0MDg1MDEw
WjAzMTEwLwYDVQQDEyg0MzFCRDY2M0NCMTMyNTNGOEFEN0FBNjZCMDIzMzk3MjU3
QTM1MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs30CVjH6P1IK
32vrY8lWRdZ8l1aY/RHHEOAvJUZIgg8FSUUnRjNsYv4Ss1UkwjRlPfkStkLDSNMO
ZtFbqoTQXmdk1tKYeQcKJ2+XAVbHep6d1hRRykbx23ARkyT8OpJ2yRz+gHU3HDir
5y48oCbbRzIPfR/QRV1iCutmp+Kpt83/OCkopGHI4K6tFBfVNYmukjy4K3ryvHkD
daNHSXMeCo4YMnwvWwDdaY2zKb/9pIblC2e+mNiJ5vzZBNfaOd63oGOOQ09lxQHz
4Pb094Ab5CbaqGM3E2wgtenvcx55/qX2Mc8w+EGh8UHQr9MIpZ9uvH6wkBZnEjCL
1fBAIHEQ5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEMb1mPLEyU/iteqZrAjOXJX
o1BYMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzEzNDMxMmUzMTM5MzMyZTMyMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcEV
MA0GCSqGSIb3DQEBCwUAA4IBAQCxHQlP5SaACzJb2hYjASaKC0CU7oXRD90GTKQH
bDFWpyaMixhdsudlhYRpUX4lD7HfOcLRFG1TnAFrX9wZ89aZ5AlKEvIbWEg3pOrw
mkkC/Ozo27V9tuDkiaAZ4jq8hCiRSE0pf+W7SeATomgMidxQfB34mhH0QrgfAQsy
JD+sTK3KB5wJcNpc1dcUuC0slARUZPl49yfjkCkeWjCVbHYaZVLKoS03PnAOTQ1R
wbN2GfmO7SPoNMxChMCum429RS8bu+M3C/QAd3zaNtfIqJPEpB899PjM2gptbTje
0NnkBTCqxPDb6/INIq6qExgQuP0IDJrV35ad+rqfQ9WJ8eRC
-----END CERTIFICATE-----