Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
File:                     323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa (raw, json)
Hash identifier:          3bOiK7L9vYp2qh+2/gMoONIfX4kj7N8PUcDVWtV9EeE=
Subject key identifier:   A8:5B:B0:3C:F6:90:E6:4B:36:B2:A5:59:22:D2:9E:21:40:DA:E6:B3
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0E2C0E9213C088925BDB318EB3C68F5EEFB84AF4
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
Signing time:             Mon 15 Jul 2024 08:50:09 +0000
ROA not before:           Mon 15 Jul 2024 08:45:09 +0000
ROA not after:            Mon 14 Jul 2025 08:50:09 +0000
asID:                     140913
IP address blocks:        2602:feda:ae6::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2c:0e:92:13:c0:88:92:5b:db:31:8e:b3:c6:8f:5e:ef:b8:4a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:09 2024 GMT
            Not After : Jul 14 08:50:09 2025 GMT
        Subject: CN=A85BB03CF690E64B36B2A55922D29E2140DAE6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:ce:59:9c:ac:bf:ff:e2:eb:e5:61:68:6e:
                    bb:01:0e:d1:e3:61:f0:51:b6:e1:db:10:d1:e2:dd:
                    6c:4c:b6:a6:65:50:53:c9:7f:b7:dd:bf:15:31:c6:
                    56:8e:29:79:ef:10:5a:37:dc:be:e3:18:3e:d0:05:
                    26:45:75:7a:f8:26:e9:56:b8:42:9c:05:51:fd:a5:
                    6d:aa:f6:be:35:1d:d9:e8:0a:91:9f:19:56:7e:87:
                    db:09:7b:61:ff:84:42:ea:3e:77:ba:57:43:b9:fd:
                    c2:6a:8a:df:29:12:ec:22:df:38:41:7b:fc:8b:42:
                    99:b7:67:8b:98:37:35:2c:8b:d0:34:2a:8e:9f:1f:
                    01:53:2c:fb:91:53:66:75:e7:9d:36:76:a7:e7:75:
                    fe:f2:64:ac:5f:e0:1d:f6:19:cf:fb:43:aa:a8:62:
                    92:53:41:bb:f3:b5:5b:7f:71:b5:05:6d:a0:f3:9e:
                    4b:db:46:6b:29:f7:54:72:43:22:19:77:09:e9:16:
                    58:65:ba:bd:ba:73:56:b4:a1:4e:c5:0b:12:b1:82:
                    72:2c:78:db:bf:54:85:ce:0e:6d:09:3b:f3:b2:dc:
                    5c:2c:a0:1a:a8:20:02:87:61:0f:59:e5:75:f4:4a:
                    cc:36:60:ad:cf:5d:e9:6d:0d:12:09:04:18:d3:bb:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:B0:3C:F6:90:E6:4B:36:B2:A5:59:22:D2:9E:21:40:DA:E6:B3
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae6::/47

    Signature Algorithm: sha256WithRSAEncryption
         77:29:5e:ee:18:cd:70:21:33:c9:d3:6c:b7:2a:1e:59:2b:74:
         da:23:db:53:11:5c:9c:be:f3:4d:6a:b9:6e:8e:45:7f:f0:f4:
         6b:a0:f6:97:fd:3b:13:45:29:49:22:c2:84:43:b8:c6:9b:ca:
         18:df:10:a4:45:34:6d:fd:ba:97:81:b0:1f:1f:07:66:0e:ec:
         3c:7e:7f:20:6e:2f:e8:49:41:7b:e0:0e:dd:41:3e:45:ee:a0:
         84:72:dc:a7:d0:56:85:fe:a9:ac:0b:09:6e:59:af:c4:9e:6e:
         39:4c:01:d1:05:b9:23:1e:e0:c1:7a:41:5d:e3:c0:ee:06:ab:
         bc:b3:57:4c:f0:1c:21:a7:76:af:41:3e:b7:e8:ef:21:45:14:
         1c:3e:9f:fd:1b:ae:91:34:94:ff:19:37:8a:79:b1:ed:8a:52:
         5c:74:a1:d8:68:85:95:b5:b8:d1:9c:06:61:c3:dd:58:ba:b0:
         a9:d8:98:0b:45:07:d8:83:20:e5:4f:57:c6:9c:d8:eb:19:43:
         4f:3f:f8:69:7e:e1:4d:da:79:7c:6f:db:62:5d:50:6d:99:e6:
         06:8f:fc:ec:c8:c8:78:d7:d8:64:50:55:df:e9:30:35:9d:9e:
         99:6b:67:27:2c:0b:97:5e:91:30:9b:df:4b:a6:13:fb:74:fd:
         77:c3:d4:3a
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUDiwOkhPAiJJb2zGOs8aPXu+4SvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTA5WhcNMjUwNzE0MDg1MDA5
WjAzMTEwLwYDVQQDEyhBODVCQjAzQ0Y2OTBFNjRCMzZCMkE1NTkyMkQyOUUyMTQw
REFFNkIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDrOWZysv//i
6+VhaG67AQ7R42HwUbbh2xDR4t1sTLamZVBTyX+33b8VMcZWjil57xBaN9y+4xg+
0AUmRXV6+CbpVrhCnAVR/aVtqva+NR3Z6AqRnxlWfofbCXth/4RC6j53uldDuf3C
aorfKRLsIt84QXv8i0KZt2eLmDc1LIvQNCqOnx8BUyz7kVNmdeedNnan53X+8mSs
X+Ad9hnP+0OqqGKSU0G787Vbf3G1BW2g855L20ZrKfdUckMiGXcJ6RZYZbq9unNW
tKFOxQsSsYJyLHjbv1SFzg5tCTvzstxcLKAaqCACh2EPWeV19ErMNmCtz13pbQ0S
CQQY07vTzQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKhbsDz2kOZLNrKlWSLSniFA
2uazMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjE2NTM2M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzEzNDMwMzkzMTMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcBJgL+2grmMA0GCSqGSIb3DQEBCwUAA4IBAQB3KV7uGM1wITPJ02y3Kh5Z
K3TaI9tTEVycvvNNarlujkV/8PRroPaX/TsTRSlJIsKEQ7jGm8oY3xCkRTRt/bqX
gbAfHwdmDuw8fn8gbi/oSUF74A7dQT5F7qCEctyn0FaF/qmsCwluWa/Enm45TAHR
BbkjHuDBekFd48DuBqu8s1dM8Bwhp3avQT636O8hRRQcPp/9G66RNJT/GTeKebHt
ilJcdKHYaIWVtbjRnAZhw91YurCp2JgLRQfYgyDlT1fGnNjrGUNPP/hpfuFN2nl8
b9tiXVBtmeYGj/zsyMh419hkUFXf6TA1nZ6Za2cnLAuXXpEwm99LphP7dP13w9Q6
-----END CERTIFICATE-----