Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
File:                     323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa (raw, json)
Hash identifier:          1u3okG6u/BUMkI8jcmzwWvO3NpeqBPAWNHSiJR5h8Zc=
Subject key identifier:   2E:9E:16:3B:7B:99:88:6A:BD:1E:F6:08:BE:2A:0E:A9:CC:C8:51:8F
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       361371B8CA49A716BD92F706C8B4B94AE556777B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
Signing time:             Mon 15 Jul 2024 08:50:12 +0000
ROA not before:           Mon 15 Jul 2024 08:45:12 +0000
ROA not after:            Mon 14 Jul 2025 08:50:12 +0000
asID:                     35251
IP address blocks:        2602:feda:180::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:13:71:b8:ca:49:a7:16:bd:92:f7:06:c8:b4:b9:4a:e5:56:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:12 2024 GMT
            Not After : Jul 14 08:50:12 2025 GMT
        Subject: CN=2E9E163B7B99886ABD1EF608BE2A0EA9CCC8518F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:7a:84:89:39:a2:e3:f7:21:04:87:d2:51:
                    c2:9b:4c:c4:62:0f:a9:63:59:1b:26:3d:42:a1:07:
                    1e:09:7d:45:61:9c:84:cc:a9:25:53:f1:05:b9:5b:
                    46:3d:72:8e:6a:1b:15:22:fc:f4:f5:93:44:1f:28:
                    2b:41:26:e8:7c:13:c1:c0:d4:77:fa:3f:e8:4d:2b:
                    f4:ee:9d:bf:7e:87:a7:77:b1:4b:63:4d:11:c5:11:
                    cb:3c:3b:04:b1:57:72:28:c7:d2:fc:b1:75:ea:61:
                    db:33:b5:a7:1f:d5:2c:8d:0e:af:48:5a:fc:05:55:
                    8f:62:21:dc:e7:f7:c3:91:38:6c:83:28:a8:5c:3f:
                    33:42:71:bd:6c:c2:8f:98:81:66:2d:95:69:24:7d:
                    05:81:62:d9:0f:48:43:f3:0c:d3:69:52:5c:b0:b2:
                    22:4f:b3:66:26:95:cd:cb:dc:35:d9:18:d6:c4:7f:
                    7d:93:87:a1:74:95:63:c4:d8:e4:26:50:1a:84:2c:
                    28:21:61:53:52:18:4c:f9:8e:a0:52:93:c9:6e:ee:
                    96:ab:e8:f0:91:af:c6:37:5f:99:d7:ee:1e:ca:fb:
                    7e:e2:db:42:2c:cd:0d:d5:1b:53:eb:95:e9:38:58:
                    96:e1:6a:2c:0b:5d:29:49:89:39:78:1c:a7:98:90:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9E:16:3B:7B:99:88:6A:BD:1E:F6:08:BE:2A:0E:A9:CC:C8:51:8F
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:a9:1f:b2:f2:22:3f:b9:b9:23:80:db:d0:96:29:f8:37:1b:
         8e:3a:a7:85:09:8c:0b:14:25:d1:bf:39:df:bc:72:c5:75:ad:
         ec:bd:7c:ed:6c:87:3e:99:16:f9:40:42:ed:7c:36:f1:fc:f4:
         bc:f8:3c:7e:b6:3e:65:93:91:70:dd:70:80:3a:0e:2b:3b:95:
         0a:dc:74:f1:9b:a8:4f:93:88:11:25:50:79:7d:82:78:b7:8a:
         74:5d:f5:cc:6f:07:12:fb:16:ef:63:14:8a:e4:6e:be:e9:8e:
         75:69:8a:8f:d0:a2:1d:5a:3f:cc:f0:75:da:c9:9e:20:1f:0c:
         9c:56:53:7a:45:33:ec:dc:0e:a8:03:b4:aa:64:f5:ab:ed:13:
         4e:36:37:6c:50:26:81:5f:5c:99:87:43:4e:e4:81:1a:4d:4e:
         fd:03:84:0d:0a:ec:c2:85:c1:96:78:89:6d:20:41:be:37:32:
         b8:ad:c7:57:f3:a2:7f:67:3c:31:6f:e0:e8:5c:7b:32:32:0b:
         18:61:57:52:d2:d2:57:0a:91:ad:f7:24:e6:3f:78:7f:f8:ec:
         f1:97:fd:73:89:21:60:71:84:16:12:1d:68:a6:fb:f0:31:87:
         e1:17:25:d2:e4:9a:c3:53:33:8b:ab:16:7b:0f:d6:d8:30:89:
         5d:e3:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----