Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
File:                     323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa (raw, json)
Hash identifier:          7IqnWjaovmt7rqGTjWDarNUYx3ZagowMzLSi4PMgNdg=
Subject key identifier:   33:97:26:1F:22:E8:6D:A6:F6:CC:72:58:9B:DB:A6:54:D5:0F:24:BF
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       786CC7F0ED2E27E4E935FD352D4599EB78A579E5
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
Signing time:             Mon 15 Jul 2024 08:50:15 +0000
ROA not before:           Mon 15 Jul 2024 08:45:15 +0000
ROA not after:            Mon 14 Jul 2025 08:50:15 +0000
asID:                     147071
IP address blocks:        2602:feda:df0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6c:c7:f0:ed:2e:27:e4:e9:35:fd:35:2d:45:99:eb:78:a5:79:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:15 2024 GMT
            Not After : Jul 14 08:50:15 2025 GMT
        Subject: CN=3397261F22E86DA6F6CC72589BDBA654D50F24BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:97:4c:b6:13:eb:df:8a:08:0b:9f:47:0f:
                    52:76:d2:a0:7b:22:cd:2d:44:98:dd:54:97:f8:1b:
                    6c:70:8d:e4:09:40:2a:4f:a8:6f:52:56:f9:4f:4b:
                    55:de:ff:af:95:4f:5f:e5:84:f4:b2:8b:45:25:cb:
                    b0:fc:bc:29:ae:d3:e6:ef:44:55:70:e6:ff:4d:25:
                    1b:82:b1:40:d0:10:48:fe:c1:3c:3e:08:fb:e3:3f:
                    7c:90:4a:ce:36:b5:d5:76:18:9b:21:1b:d5:fc:ab:
                    91:86:5d:1b:cd:fe:fc:fa:66:8c:35:0f:b4:f3:4a:
                    5d:b7:c8:62:c6:cc:d7:f6:1b:33:7e:da:e1:70:84:
                    52:e5:e7:d8:ac:07:b3:b4:d6:4a:6b:36:2e:2b:01:
                    20:2c:d8:33:f3:68:45:d4:64:cf:f4:45:36:fb:92:
                    1c:50:56:3b:73:80:a0:a8:f0:70:29:59:b5:6f:fb:
                    82:bd:6b:e6:ed:91:32:a0:31:46:e8:49:70:03:b8:
                    8f:c7:b1:ce:c1:3e:fa:58:79:25:89:76:73:16:f3:
                    76:f2:54:06:90:c4:34:c2:ea:2c:6e:b0:6c:c5:bf:
                    c9:9b:b1:3a:f8:ce:d4:ee:9c:c2:45:7b:74:44:11:
                    d9:79:86:c3:4f:f0:0b:58:83:4b:8c:4d:44:03:49:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:26:1F:22:E8:6D:A6:F6:CC:72:58:9B:DB:A6:54:D5:0F:24:BF
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:df0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b3:f5:5b:f4:2f:19:e7:7d:26:95:e5:ed:bf:68:5a:c2:ce:b5:
         e1:f5:b4:f6:b7:58:c4:d3:d4:e9:a4:da:09:f3:a4:a6:27:db:
         fe:d9:7d:92:14:e8:c0:34:77:93:d5:9c:58:7c:e4:57:0e:ec:
         7d:8d:ed:93:88:1d:45:16:dd:8e:bf:cd:ad:42:9a:22:cf:92:
         e0:c8:97:b9:e2:95:53:5a:c2:c0:97:6e:23:48:e4:81:7d:3a:
         e3:52:19:2b:ce:e0:21:8e:56:b4:c4:5f:cb:ee:39:50:1e:14:
         7e:e1:c4:6e:49:5c:3c:31:1e:5e:e5:79:68:06:53:ba:07:62:
         a2:65:8b:c9:7a:4c:09:fb:ff:e6:1e:35:0d:e8:15:2c:1c:1a:
         4f:9a:1f:4d:6f:a3:f5:b1:f6:08:e2:ab:d3:70:db:bb:9e:ae:
         24:8a:59:f0:3f:b2:df:ac:c3:42:64:98:31:64:62:d4:06:4e:
         55:39:ff:b7:9c:73:1d:6f:0e:8d:55:db:d6:40:cb:c6:fd:34:
         78:52:7f:b9:84:8d:22:45:9f:7d:a8:72:33:88:88:08:a8:bc:
         68:a7:90:c6:c1:e3:6f:9a:41:7d:44:2e:8a:72:c3:4b:e8:78:
         2b:5d:b3:06:00:2a:07:11:59:c8:dc:68:b5:8d:54:46:3b:4d:
         e5:13:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----