Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa
File:                     323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa (raw, json)
Hash identifier:          5N9xABogSiVu9oLj8opHWxx4IvgOKBcvDLdUWR2AiAQ=
Subject key identifier:   5A:42:2F:6A:B8:3C:2D:C5:BD:2C:2C:D8:7B:85:C8:A3:DA:F2:32:1A
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       4405072BD3E518927449CCF3617E3756738EF2AF
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa
Signing time:             Mon 28 Feb 2022 01:00:04 +0000
ROA not before:           Mon 28 Feb 2022 00:55:04 +0000
ROA not after:            Mon 27 Feb 2023 01:00:04 +0000
asID:                     41255
IP address blocks:        2602:feda:ae4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:05:07:2b:d3:e5:18:92:74:49:cc:f3:61:7e:37:56:73:8e:f2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:04 2022 GMT
            Not After : Feb 27 01:00:04 2023 GMT
        Subject: CN=3082010A0282010100B54141E7BBF805B37E8AA79E8DA07CE6D30DBC292031DDD5AB771380C263D15754212BBE4E63D813048C15319601776581CB546E8C1EF079B002F98FC7DB42C0AA7B14547C34DA88FA22779A900D64FD7A38C963E49F89629EFD4363A4C00BB4005BB176A7277C917ACD725B9E943A9A0EA8B5B18AE82E8CB54F5EBC844CA360F6F6F2770AEF2FB10B6A4F409502B9DDFAF64A0AB5BB22746A1936BDD0EF0C42BD9F013F2204E1D4F41B582CE250A36700158B78B8C115A6021A15E97B48D15DC7F026375F74CDB18266E9D5C33FD0D786E845DD9E8537703DDF5B96809066B66E7E4F74DDDD7CBC7FA34D738B636463B25AB2CA3E2782EE9630BF9A0C8DDA8D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:41:e7:bb:f8:05:b3:7e:8a:a7:9e:8d:a0:
                    7c:e6:d3:0d:bc:29:20:31:dd:d5:ab:77:13:80:c2:
                    63:d1:57:54:21:2b:be:4e:63:d8:13:04:8c:15:31:
                    96:01:77:65:81:cb:54:6e:8c:1e:f0:79:b0:02:f9:
                    8f:c7:db:42:c0:aa:7b:14:54:7c:34:da:88:fa:22:
                    77:9a:90:0d:64:fd:7a:38:c9:63:e4:9f:89:62:9e:
                    fd:43:63:a4:c0:0b:b4:00:5b:b1:76:a7:27:7c:91:
                    7a:cd:72:5b:9e:94:3a:9a:0e:a8:b5:b1:8a:e8:2e:
                    8c:b5:4f:5e:bc:84:4c:a3:60:f6:f6:f2:77:0a:ef:
                    2f:b1:0b:6a:4f:40:95:02:b9:dd:fa:f6:4a:0a:b5:
                    bb:22:74:6a:19:36:bd:d0:ef:0c:42:bd:9f:01:3f:
                    22:04:e1:d4:f4:1b:58:2c:e2:50:a3:67:00:15:8b:
                    78:b8:c1:15:a6:02:1a:15:e9:7b:48:d1:5d:c7:f0:
                    26:37:5f:74:cd:b1:82:66:e9:d5:c3:3f:d0:d7:86:
                    e8:45:dd:9e:85:37:70:3d:df:5b:96:80:90:66:b6:
                    6e:7e:4f:74:dd:dd:7c:bc:7f:a3:4d:73:8b:63:64:
                    63:b2:5a:b2:ca:3e:27:82:ee:96:30:bf:9a:0c:8d:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:42:2F:6A:B8:3C:2D:C5:BD:2C:2C:D8:7B:85:C8:A3:DA:F2:32:1A
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:1d:69:0b:27:dc:85:f4:9e:16:75:de:86:fa:6b:c4:ed:
         91:34:84:ff:72:a2:3c:2b:b3:c3:23:2d:a9:04:a3:39:ee:85:
         f3:d5:f1:cb:b7:38:2d:4c:0f:39:5a:ca:a9:c7:61:46:f1:09:
         01:ae:96:2e:c3:63:f7:df:a2:e2:17:68:1b:1a:eb:6d:df:48:
         0a:66:9e:6c:64:d7:a3:ff:f2:ad:b6:34:bf:46:bd:c4:32:27:
         28:64:43:57:59:27:38:e4:06:0e:de:4a:d8:fa:f2:98:30:04:
         d2:8a:f1:b6:eb:3a:ac:30:e0:79:23:44:40:2d:57:7c:ea:1d:
         b4:23:b9:92:46:2c:36:b5:36:73:cb:9d:b4:d4:3a:89:81:a9:
         61:7f:1e:58:cd:f9:41:da:5e:33:08:59:f8:72:51:c3:fe:1b:
         86:81:d0:0d:10:5f:5e:ea:f2:a0:da:e2:29:9b:39:ea:32:80:
         e1:90:78:18:36:6d:19:82:83:fc:a0:6c:87:9e:5e:8a:54:18:
         d1:63:a3:dc:4c:21:d7:6a:5c:e1:ed:c6:85:3d:15:9d:9f:64:
         33:b1:12:60:b1:96:ab:cd:c3:53:ba:b0:99:b2:be:69:ac:e8:
         b2:e0:70:0a:1f:9b:0a:f9:51:16:0a:82:92:b0:df:df:64:3a:
         a5:cf:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org