Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa
File:                     323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa (raw, json)
Hash identifier:          xams/UMT3btvl5U0WqhNInNWg7O/+v69MkBoHv1likQ=
Subject key identifier:   60:ED:41:DA:B3:4F:B5:13:33:46:37:C8:B0:79:16:D9:88:8F:08:E2
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       14A5623214B7C9C0DE5B2125E91B9E884820D418
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa
Signing time:             Mon 15 Jul 2024 08:50:13 +0000
ROA not before:           Mon 15 Jul 2024 08:45:13 +0000
ROA not after:            Mon 14 Jul 2025 08:50:13 +0000
asID:                     200334
IP address blocks:        2602:feda:b8d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a5:62:32:14:b7:c9:c0:de:5b:21:25:e9:1b:9e:88:48:20:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:13 2024 GMT
            Not After : Jul 14 08:50:13 2025 GMT
        Subject: CN=60ED41DAB34FB513334637C8B07916D9888F08E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:5d:c1:03:34:34:28:db:05:10:e5:18:0f:
                    83:d5:31:2e:f8:39:6d:ee:87:c3:c4:41:ed:5f:84:
                    f6:b0:0f:e3:63:0e:73:9b:de:2e:a5:a3:b1:1f:95:
                    4f:11:30:66:bb:ec:9a:b0:e7:fa:6f:85:0d:f1:9e:
                    2b:28:c3:b6:bb:c3:76:03:0a:78:8c:80:16:f4:3d:
                    30:ab:d9:8f:fa:49:a8:1f:a6:6f:4b:c8:4f:b3:93:
                    8d:da:68:49:72:0d:0b:4b:a7:01:05:fa:4f:aa:6a:
                    2d:e7:8c:4a:99:38:97:1b:ef:dc:71:23:fa:87:1f:
                    ec:db:38:55:e4:ed:7f:19:e9:f2:cd:eb:6e:5f:0a:
                    5a:b4:1a:c2:1a:44:d4:d0:bb:bc:71:1a:6b:f6:93:
                    39:27:fd:8b:4f:10:de:d7:2f:3e:2f:b8:6d:7a:d1:
                    11:b3:28:7f:60:cc:1c:e1:63:e7:e9:ad:21:f5:c8:
                    05:51:19:f3:17:ef:19:9f:de:39:e0:43:95:1e:78:
                    6a:7c:17:e8:8c:c3:59:28:7f:6e:92:e4:67:e1:d2:
                    f5:b0:07:70:f2:46:ac:83:9e:94:2b:f5:8e:9f:2c:
                    3a:3c:e6:a3:e2:00:a4:b8:c5:5c:8c:f3:8a:44:79:
                    c4:27:64:64:02:e1:d2:24:75:ec:32:27:27:2b:9a:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:41:DA:B3:4F:B5:13:33:46:37:C8:B0:79:16:D9:88:8F:08:E2
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b8d::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:02:4e:f1:14:46:c0:72:c8:ce:08:0a:d2:57:21:49:85:90:
         a4:22:05:ea:a8:66:e1:c3:21:bb:bd:c6:16:04:dc:de:43:77:
         d4:f1:02:3f:2f:ba:96:2a:45:67:15:2a:b7:92:14:b6:3d:25:
         cd:56:42:43:86:fa:7f:d0:11:22:38:15:61:3c:ad:c6:3a:fc:
         ab:86:11:22:56:60:05:82:8d:f0:86:87:da:ec:d8:a8:84:db:
         11:65:12:cb:c3:d1:d7:56:9f:13:a0:c5:05:ac:d7:bf:20:81:
         18:6d:1b:60:76:1e:5d:1c:7d:de:67:d1:dc:57:77:4c:c3:08:
         57:b5:68:ac:72:f2:d8:bf:81:46:29:31:24:a7:0f:48:aa:ce:
         73:f7:d8:df:28:63:e5:05:e5:c1:fa:f6:34:bd:79:8f:c0:fb:
         46:0c:7a:1a:ea:29:7b:dc:eb:d4:a2:e7:ab:e8:3c:a0:b3:50:
         b5:f0:f6:82:79:28:13:2e:2e:1a:59:1f:50:05:12:06:3b:73:
         a1:d1:b1:c8:d7:0f:cf:4b:0f:2d:7d:c4:d5:ed:65:fc:88:b3:
         1c:86:59:c3:fa:6e:e8:c3:13:ac:f5:e1:59:f4:3c:36:fe:27:
         1d:26:1f:a7:45:b6:c7:99:cd:bb:a8:b3:5f:9e:2e:8e:06:bb:
         35:d6:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----