Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa (raw, json)
Hash identifier:          F0v+bk1JGtj5PqkvFplZDzo2+l27KjF8exXsr/dK098=
Subject key identifier:   6A:3B:D6:CC:AA:20:66:7C:8F:D9:67:40:D5:51:D3:72:A5:5E:3C:9D
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5E0C0661D6B5949D69844C17E2AD65B98C98520B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
Signing time:             Mon 15 Jul 2024 08:50:10 +0000
ROA not before:           Mon 15 Jul 2024 08:45:10 +0000
ROA not after:            Mon 14 Jul 2025 08:50:10 +0000
asID:                     47158
IP address blocks:        2602:feda:ab0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0c:06:61:d6:b5:94:9d:69:84:4c:17:e2:ad:65:b9:8c:98:52:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:10 2024 GMT
            Not After : Jul 14 08:50:10 2025 GMT
        Subject: CN=6A3BD6CCAA20667C8FD96740D551D372A55E3C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:c5:7a:64:a1:fe:da:7b:3b:7d:4c:7e:04:
                    f3:6e:58:1a:72:56:42:92:23:2e:7d:47:5e:16:ad:
                    5f:3e:0d:e8:97:d2:05:86:4b:b7:a9:a4:6d:bf:17:
                    fb:ae:b8:65:cf:78:8b:4e:23:8e:a3:7d:7b:9b:59:
                    cc:d2:39:ea:ec:01:28:29:6d:5e:92:af:90:2e:70:
                    be:79:b2:e8:e2:85:05:2d:93:02:a2:fb:0f:a5:f4:
                    65:50:18:54:37:67:f1:bf:44:0f:f3:80:29:a8:0d:
                    7c:aa:48:42:97:48:ed:e6:b9:90:a1:5a:e8:91:b1:
                    1e:51:c4:d0:e1:38:9f:d6:d4:77:ff:a6:75:41:5d:
                    0b:5b:36:ea:43:53:99:ab:3e:4a:17:ac:33:83:52:
                    58:68:ca:08:f5:70:01:73:cb:56:4f:9a:be:05:a2:
                    53:59:bf:e7:d3:6e:31:03:a3:93:46:64:9a:91:ee:
                    31:6a:1e:5d:14:92:41:5c:9f:b2:87:1a:ed:47:ae:
                    4e:ef:4d:b2:05:d8:01:c2:a5:0f:5b:80:06:f4:69:
                    fe:6f:c5:e0:53:0f:30:e1:cc:b9:f5:45:d5:77:99:
                    68:77:62:0f:3f:73:48:75:4a:77:6a:7e:fe:46:df:
                    4c:ee:99:70:54:38:b7:14:78:89:29:6a:be:1f:1e:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:D6:CC:AA:20:66:7C:8F:D9:67:40:D5:51:D3:72:A5:5E:3C:9D
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:86:21:35:a5:21:1c:1a:4a:38:13:1c:5c:1c:ea:ff:1f:d5:
         41:b5:23:50:70:e7:c0:7f:94:c0:7f:f5:72:df:9d:c5:15:6b:
         53:64:d2:64:4f:6a:4e:2f:f3:29:ec:19:ee:14:1c:34:94:e8:
         c6:98:22:fd:08:ea:1c:e4:3f:f2:39:26:6a:6d:de:78:04:95:
         58:b4:07:fb:d5:37:55:15:6f:54:22:20:5d:8c:55:c2:16:d2:
         24:f5:6b:1c:94:df:10:ab:a6:62:49:5b:62:a0:0e:28:23:da:
         2b:23:93:28:57:8c:e6:4d:da:03:77:05:3f:51:bc:62:e3:39:
         be:ec:e9:52:1c:0b:f9:25:80:a7:96:68:6f:41:54:13:8c:78:
         4b:0f:c4:e4:a6:98:47:79:5e:52:b8:70:0b:28:27:43:c7:87:
         7a:14:33:80:8c:83:b4:24:a2:41:c0:d1:ad:70:a6:21:c1:f8:
         63:6e:3b:7a:f9:27:a2:4f:6b:99:91:a4:12:87:c3:6f:8d:5a:
         34:3b:f5:9f:e9:c4:54:04:f9:96:d7:0d:e9:34:8c:af:b3:98:
         7c:0f:c5:b6:d3:0f:27:8a:22:f7:11:82:de:36:3f:e3:ab:51:
         74:4c:ff:0d:5e:7e:f5:77:fe:b7:ca:4d:c6:e3:7f:3c:0a:48:
         90:63:e8:55
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUXgwGYda1lJ1phEwX4q1luYyYUgswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEwWhcNMjUwNzE0MDg1MDEw
WjAzMTEwLwYDVQQDEyg2QTNCRDZDQ0FBMjA2NjdDOEZEOTY3NDBENTUxRDM3MkE1
NUUzQzlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6/FemSh/tp7
O31MfgTzblgaclZCkiMufUdeFq1fPg3ol9IFhku3qaRtvxf7rrhlz3iLTiOOo317
m1nM0jnq7AEoKW1ekq+QLnC+ebLo4oUFLZMCovsPpfRlUBhUN2fxv0QP84ApqA18
qkhCl0jt5rmQoVrokbEeUcTQ4Tif1tR3/6Z1QV0LWzbqQ1OZqz5KF6wzg1JYaMoI
9XABc8tWT5q+BaJTWb/n024xA6OTRmSake4xah5dFJJBXJ+yhxrtR65O702yBdgB
wqUPW4AG9Gn+b8XgUw8w4cy59UXVd5lod2IPP3NIdUp3an7+Rt9M7plwVDi3FHiJ
KWq+Hx7M+wIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFGo71syqIGZ8j9lnQNVR03Kl
XjydMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2
MTYyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM3MzEzNTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEJgL+2gqwMA0GCSqGSIb3DQEBCwUAA4IBAQA5hiE1pSEcGko4ExxcHOr/H9VB
tSNQcOfAf5TAf/Vy353FFWtTZNJkT2pOL/Mp7BnuFBw0lOjGmCL9COoc5D/yOSZq
bd54BJVYtAf71TdVFW9UIiBdjFXCFtIk9WsclN8Qq6ZiSVtioA4oI9orI5MoV4zm
TdoDdwU/Ubxi4zm+7OlSHAv5JYCnlmhvQVQTjHhLD8TkpphHeV5SuHALKCdDx4d6
FDOAjIO0JKJBwNGtcKYhwfhjbjt6+SeiT2uZkaQSh8NvjVo0O/Wf6cRUBPmW1w3p
NIyvs5h8D8W20w8niiL3EYLeNj/jq1F0TP8NXn71d/63yk3G4388CkiQY+hV
-----END CERTIFICATE-----