Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa (raw, json)
Hash identifier:          8u+AdfDhqUVQ7Ks3c84YjCud++PPV3MI8g/AnHYm+KA=
Subject key identifier:   2A:81:B7:5D:68:8A:7B:93:DA:8B:35:3E:52:41:CD:1F:64:3D:9B:E9
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       444D59DD4DAF8413AA2E1575B659E47EA0690C98
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa
Signing time:             Sun 16 Jan 2022 06:50:02 +0000
ROA not before:           Sun 16 Jan 2022 06:45:02 +0000
ROA not after:            Sun 15 Jan 2023 06:50:02 +0000
asID:                     7721
IP address blocks:        2602:feda:be0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4d:59:dd:4d:af:84:13:aa:2e:15:75:b6:59:e4:7e:a0:69:0c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Jan 16 06:45:02 2022 GMT
            Not After : Jan 15 06:50:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:3e:e7:af:e3:98:7c:39:0b:35:bb:5f:63:
                    8e:a4:25:90:88:4a:59:cf:fa:23:b4:5f:17:61:74:
                    5f:71:d3:fb:ae:0d:46:3a:46:64:20:11:c2:df:27:
                    6a:23:36:c0:a0:8d:4a:72:6e:00:95:19:90:a2:9c:
                    9f:1b:2f:bb:6e:6d:33:90:c7:db:37:b2:3b:76:0f:
                    f9:4e:1b:08:15:cb:34:63:9a:a4:6a:e4:b8:c4:f8:
                    a0:13:30:51:57:6c:06:11:c9:d7:51:7e:e0:f1:05:
                    82:86:d3:7a:84:ed:0a:3a:eb:37:81:a7:ad:76:6f:
                    77:ac:1e:a6:b2:a4:1f:f6:c6:46:60:48:99:46:8f:
                    3e:bb:b7:1e:35:10:18:b1:57:83:58:17:d4:bc:37:
                    fd:83:35:d9:f7:3d:6d:e6:8b:0f:36:f4:ee:bb:88:
                    26:4f:a2:dc:dd:38:c6:35:53:93:0c:28:73:5b:76:
                    42:7d:07:ba:0e:f8:82:91:b4:f0:e0:2c:3a:35:a7:
                    61:e9:f6:46:50:13:0d:1d:47:98:eb:41:de:80:4f:
                    59:d1:73:29:89:1c:90:91:df:5e:1f:a7:c5:ef:15:
                    6c:fc:63:4f:19:fe:e2:46:51:7a:33:8c:7a:9f:f9:
                    d6:5a:bd:a2:41:df:b9:b4:f8:11:d6:b3:1b:c8:83:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:81:B7:5D:68:8A:7B:93:DA:8B:35:3E:52:41:CD:1F:64:3D:9B:E9
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:92:90:6f:5f:a2:3c:98:ad:e2:57:6d:ed:2c:62:cb:e2:82:
         64:91:36:03:0f:dd:3a:2f:ae:e6:d0:e9:78:29:11:73:59:aa:
         59:ec:c0:4e:01:1b:77:73:c6:14:39:a0:2d:90:0b:2c:b4:ac:
         d3:78:b3:8f:47:91:d8:84:e8:b6:9f:77:90:e4:47:06:bf:07:
         a4:e5:22:c2:5d:40:b7:2d:a5:14:4b:60:c2:41:22:a8:98:1f:
         77:6f:aa:28:c4:a7:39:f5:69:37:b2:6f:62:57:f7:f7:64:0b:
         27:78:e9:07:c9:0d:09:64:72:33:67:83:9c:d0:f2:41:6a:c5:
         e6:8b:81:fa:9b:a6:8c:dd:d4:1a:ab:00:df:46:e7:18:83:ab:
         22:d2:5a:6c:16:f9:d2:06:57:c1:64:6c:56:aa:16:fd:12:63:
         3f:7d:73:8f:88:61:30:81:3d:32:8c:2c:d8:de:de:45:ab:61:
         33:68:f9:e6:be:cb:69:fe:07:ac:be:52:4e:8b:90:1d:e8:79:
         43:ff:bc:7d:6f:82:d3:0e:11:2d:ed:4f:a0:30:38:30:80:1a:
         df:1c:79:48:ca:32:b7:c4:0a:ab:82:eb:d0:1e:21:ee:2f:ea:
         73:44:e6:0f:09:cc:0f:7c:6e:bb:df:7d:b9:68:b5:a1:e4:ca:
         eb:44:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org