Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
File:                     323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa (raw, json)
Hash identifier:          KmjlQ3kIP+OamWj9PfSStmP/NSCISe8kr0H/JTrhdyE=
Subject key identifier:   41:CB:0F:6D:AE:56:7C:31:B9:DA:A5:AD:AB:56:3E:5D:C3:3B:81:13
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       71D9A6FD38C8A011212A9EC883DCFA5C95643470
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
Signing time:             Mon 15 Jul 2024 08:50:08 +0000
ROA not before:           Mon 15 Jul 2024 08:45:08 +0000
ROA not after:            Mon 14 Jul 2025 08:50:08 +0000
asID:                     147048
IP address blocks:        2602:feda:f010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:a6:fd:38:c8:a0:11:21:2a:9e:c8:83:dc:fa:5c:95:64:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:08 2024 GMT
            Not After : Jul 14 08:50:08 2025 GMT
        Subject: CN=41CB0F6DAE567C31B9DAA5ADAB563E5DC33B8113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:79:ad:f5:e0:75:0d:bf:bc:00:14:e6:af:08:
                    9f:b0:a0:a0:c2:f5:c9:24:46:20:8e:02:50:66:99:
                    75:c1:8a:83:96:63:57:16:aa:53:98:9b:3b:40:34:
                    b6:3c:86:c1:ed:bc:2b:6c:cc:a0:fe:45:da:40:0f:
                    b8:a9:29:17:e3:5a:28:59:7f:53:73:d7:2e:96:67:
                    22:05:11:83:13:f5:1d:a7:20:a7:23:ea:f8:8b:c4:
                    3f:7e:81:5a:34:9e:4d:8a:01:40:81:9c:f0:30:b5:
                    ae:a7:97:ad:02:6b:ba:66:5d:17:99:5d:26:4c:ca:
                    13:ba:b3:76:2e:56:6f:b3:c8:28:3e:75:b6:b0:fd:
                    4e:6b:7a:30:ab:10:08:2e:49:c3:45:39:b0:5d:36:
                    ed:1f:68:68:29:22:6e:23:3b:6f:d1:77:7b:4c:26:
                    a9:8d:56:aa:f2:dc:8e:04:f3:d3:12:02:68:01:91:
                    cd:a6:8e:c4:ec:c8:49:91:65:80:3c:aa:e3:25:00:
                    bd:78:c8:81:98:4a:14:8c:53:b0:c3:1c:9d:9f:61:
                    7d:dc:83:02:1d:fc:95:57:75:f8:36:84:15:18:35:
                    93:2b:bc:26:14:09:a8:3b:ff:aa:80:df:8c:e8:e7:
                    ac:c2:db:b6:b9:0a:38:5c:6f:c8:c4:77:b2:19:16:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:0F:6D:AE:56:7C:31:B9:DA:A5:AD:AB:56:3E:5D:C3:3B:81:13
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f010::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:07:bd:79:f8:19:04:1b:52:d9:6e:16:03:b8:88:83:83:ae:
         fd:a0:93:ba:7a:24:84:ef:5c:e5:ad:b6:86:f5:1f:06:0b:af:
         40:30:dc:02:0d:6f:e2:1a:73:02:c7:e0:42:0c:c1:06:bf:19:
         6e:45:e0:de:bc:fe:9f:74:3c:d1:04:7c:85:4b:4e:7c:2e:d4:
         1d:f2:51:75:f7:c4:c3:d5:6b:c5:1b:0d:30:96:1b:41:4b:df:
         d6:a3:c5:76:c2:b5:65:8b:73:a6:50:9d:cf:9a:2f:d2:ad:80:
         c7:05:35:a0:02:87:67:73:92:d3:8f:4f:76:27:6b:c3:43:2d:
         6f:4b:89:ac:99:af:06:4f:c2:da:57:e9:5f:5f:38:a9:e4:94:
         e6:4a:8a:55:52:12:da:53:6e:67:35:c1:ee:88:3e:9e:8f:d1:
         f6:f8:38:dc:d0:e3:97:72:53:93:ad:66:dd:45:9b:50:33:2b:
         88:15:bd:15:e7:ac:56:64:8c:a3:66:74:02:c8:02:17:9a:64:
         b4:cc:89:b9:e3:5b:d6:2f:7c:52:40:d5:26:2c:15:be:dc:c9:
         1d:7d:c8:1c:ef:8d:18:a8:38:5c:e2:2d:46:9e:26:80:8c:06:
         c4:c4:7b:3a:ab:74:d7:8e:6b:7e:7f:78:d8:bf:de:be:fd:ee:
         3d:02:16:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----