Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
File:                     323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa (raw, json)
Hash identifier:          yqrIyQAj3sSM/FGUQU6AYybaIdOZfyQbMqO9Gvb/wV4=
Subject key identifier:   B7:DD:0B:E5:BE:F9:55:D8:D1:04:A3:E5:92:42:04:BA:E3:72:DC:01
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7D9CF54EF77BFA456CADAA655832587F31DE8C28
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
Signing time:             Mon 15 Jul 2024 08:50:10 +0000
ROA not before:           Mon 15 Jul 2024 08:45:10 +0000
ROA not after:            Mon 14 Jul 2025 08:50:10 +0000
asID:                     142427
IP address blocks:        2602:feda:dc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9c:f5:4e:f7:7b:fa:45:6c:ad:aa:65:58:32:58:7f:31:de:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:10 2024 GMT
            Not After : Jul 14 08:50:10 2025 GMT
        Subject: CN=B7DD0BE5BEF955D8D104A3E5924204BAE372DC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:cb:e7:47:db:31:26:22:b6:ea:9d:d5:59:
                    2a:f8:ee:9e:7b:c4:f9:36:0c:a8:4c:18:dc:68:1b:
                    79:57:c6:41:9a:f6:96:6b:5a:89:08:b4:1c:aa:10:
                    24:27:b1:74:6c:ac:85:bc:65:6a:7f:47:d3:9c:c2:
                    37:e5:b9:27:93:1d:7b:61:bb:d4:d6:6d:98:eb:9d:
                    92:1e:56:ae:2e:2e:36:5b:42:52:92:46:fc:0a:a0:
                    83:c8:69:59:b3:2e:01:fa:55:22:cd:21:6b:15:f8:
                    e0:08:97:7a:b8:49:1c:25:b2:26:73:57:2f:df:88:
                    7d:17:e6:3f:ae:5a:90:dc:2f:85:bb:2a:4c:f2:08:
                    d6:1f:0a:32:20:84:33:be:3b:fb:2b:c1:bd:67:9a:
                    78:a8:a3:4e:38:a9:59:94:8f:67:b0:8e:28:0e:a8:
                    29:98:f6:95:fe:43:68:c0:cd:5c:4a:1b:26:70:a4:
                    ab:a8:3e:68:0b:31:d3:83:3e:5b:10:1d:40:4b:64:
                    32:5c:dc:8f:39:5a:6d:4d:4a:e7:09:0e:80:a9:75:
                    ad:60:65:44:86:58:51:a3:5e:51:6d:a1:9e:17:64:
                    27:8f:24:a4:b5:30:e7:c8:8d:27:ee:04:49:ae:fc:
                    29:65:51:4e:9f:d8:17:bc:6c:16:25:c7:e7:db:ae:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:0B:E5:BE:F9:55:D8:D1:04:A3:E5:92:42:04:BA:E3:72:DC:01
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:dc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:27:e5:e0:e9:17:ee:a6:9a:a8:74:db:35:df:36:b5:4a:02:
         61:a2:d5:e0:fd:8d:68:1e:e4:8f:6d:36:9c:16:cc:51:ee:a7:
         17:72:e2:49:1b:d6:47:a2:27:32:7b:e7:63:88:8e:ca:78:45:
         f4:9c:1d:24:f5:74:f0:69:05:72:d3:75:f5:48:6c:68:60:f6:
         a0:08:16:f3:e3:77:92:f9:16:e2:d5:dc:6d:44:85:08:c0:d7:
         55:33:4e:1b:7a:32:9b:35:06:66:aa:1d:1b:8a:e2:7a:33:77:
         fa:c2:65:bd:54:88:9a:9e:ef:ca:d4:14:e1:f5:7e:c4:a2:cd:
         6c:fc:c2:5e:ca:61:0b:0d:63:00:df:d5:3b:8d:25:63:d4:7a:
         bd:28:74:63:3c:d6:98:8f:ce:30:88:cc:b2:ee:63:7f:e8:4d:
         79:b6:70:09:78:d8:7a:14:28:a3:52:c2:f6:56:31:99:35:b4:
         1f:0e:41:4e:2b:e9:57:42:37:3a:46:94:4d:9e:54:d4:d0:82:
         98:7e:4f:58:fc:93:30:6b:31:b0:38:7b:01:cf:8d:30:99:56:
         45:bb:67:4d:07:fa:82:15:51:9c:93:63:1d:9e:bc:bf:a2:48:
         6c:7c:41:73:d7:87:e2:d6:83:6e:5c:ad:2b:c3:aa:9e:05:df:
         d6:44:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----