Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa
File:                     323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa (raw, json)
Hash identifier:          0Orw206N+xXmUJg1PA3fB5w0mEj6qPpIs4iP/H0EjS0=
Subject key identifier:   92:85:A4:1E:1B:73:2D:1C:6F:50:79:42:4D:D8:0A:AD:47:22:BB:FB
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       1D08093DD2FA3BF993524DE8CF92B38312F0CE1B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     149835
IP address blocks:        2602:feda:e60::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:08:09:3d:d2:fa:3b:f9:93:52:4d:e8:cf:92:b3:83:12:f0:ce:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=9285A41E1B732D1C6F5079424DD80AAD4722BBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:37:70:a3:04:4e:e8:19:0f:51:ae:d0:e1:
                    54:1f:ae:90:de:cb:98:59:0e:76:95:3e:44:80:2d:
                    a3:fd:60:3a:45:6a:6a:97:8f:14:cc:58:f6:12:59:
                    41:27:64:ec:03:9b:b4:75:91:dc:28:9d:db:f4:86:
                    9f:96:fb:08:d7:22:48:73:f7:a1:63:c4:67:1d:21:
                    ad:1a:85:8b:c2:d0:ab:1d:3a:df:81:1f:73:02:25:
                    9f:de:f8:94:30:dc:bb:92:ee:ab:91:e4:3c:97:95:
                    f0:41:4f:88:e7:6c:11:2e:2f:a0:e9:2e:e4:cc:63:
                    6e:8a:72:22:59:3d:87:1e:d0:16:ab:84:0f:44:4c:
                    e5:a6:7e:b6:88:ef:3d:10:d8:a0:36:52:8e:48:55:
                    e6:e1:4a:d0:fc:5d:c9:63:55:5d:ca:53:69:6d:76:
                    c7:b9:99:b4:c5:32:4e:2a:d7:d0:75:9a:25:e0:1a:
                    b7:25:1e:53:b8:2c:1d:33:6f:29:59:cf:85:26:95:
                    50:69:d4:f8:e6:a9:92:64:76:0b:7d:47:7e:24:86:
                    55:f0:c7:6c:a3:de:54:c2:18:40:49:7d:36:fc:1d:
                    e2:6e:e8:d3:e0:3c:b6:0d:20:5e:d7:cc:58:fa:5c:
                    ce:b8:4b:51:ec:69:fd:85:31:10:f4:43:b4:e9:f9:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:A4:1E:1B:73:2D:1C:6F:50:79:42:4D:D8:0A:AD:47:22:BB:FB
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e60::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:25:2c:15:45:4a:ab:7c:b4:9b:be:7e:74:2a:68:63:9e:90:
         08:7c:8d:1a:80:68:8b:eb:1b:ef:1e:d0:ea:45:e8:24:e0:e3:
         f8:b4:1b:93:17:65:55:6f:20:68:aa:04:5f:dc:70:77:07:17:
         22:6c:10:a8:96:bb:cb:6c:f0:2f:e8:44:a0:64:4f:4c:5b:a2:
         71:d7:c6:0e:91:6f:b1:cf:ae:7f:fd:8d:31:bb:89:05:61:0d:
         a7:7b:8f:8a:89:e4:d9:6d:f9:5c:67:1e:f2:d6:99:99:1e:1e:
         54:b4:c3:16:a1:99:bc:37:a8:25:56:27:dc:c3:ab:28:ce:e3:
         0c:ba:d0:55:f8:4c:b6:82:51:a8:fd:36:36:9e:d5:1e:5c:83:
         52:a8:45:dc:50:85:15:43:61:e8:3b:a6:ef:08:87:d5:62:ec:
         2f:15:63:02:f2:a8:14:cc:ff:ae:89:06:08:98:cb:f2:8a:26:
         37:a9:fb:26:92:95:1b:d4:d1:72:3d:00:6d:c8:03:a6:c9:fd:
         32:3f:97:14:f3:a4:13:7c:48:b7:ea:c9:1c:e3:57:5c:9a:45:
         74:34:b0:3f:39:ff:b0:d3:4b:8f:97:38:65:01:80:96:ae:71:
         f4:b2:bd:e2:03:a3:c2:06:ab:a3:1b:71:86:94:44:af:89:d7:
         6e:8d:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----