Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa
File:                     323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa (raw, json)
Hash identifier:          IpP86EnB/F29XS+TNpGiM+4mEV79FQwp2aVj/uD925k=
Subject key identifier:   B5:99:98:02:BE:F2:19:B9:16:12:E5:2E:D0:1A:1B:EB:94:45:5D:F0
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7EECE9B2E9ECE0129C7D0C46D429074BD26D90C1
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa
Signing time:             Mon 28 Feb 2022 01:00:06 +0000
ROA not before:           Mon 28 Feb 2022 00:55:06 +0000
ROA not after:            Mon 27 Feb 2023 01:00:06 +0000
asID:                     209294
IP address blocks:        2602:feda:c30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ec:e9:b2:e9:ec:e0:12:9c:7d:0c:46:d4:29:07:4b:d2:6d:90:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:06 2022 GMT
            Not After : Feb 27 01:00:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:1e:c8:f0:f6:d2:79:ba:86:e1:f8:a5:4b:
                    ae:b9:81:58:7e:bd:ed:e7:13:5a:cf:11:9b:43:e5:
                    f2:5b:0b:fd:52:2d:b5:4a:fe:7c:2a:d5:43:2a:c3:
                    5a:d0:79:3c:90:9a:ac:06:53:bb:61:f5:8a:79:19:
                    da:14:d3:3d:e8:a9:2a:2f:d7:16:f4:90:ef:c5:67:
                    bb:8e:ff:74:ec:e4:89:8b:f5:33:a1:74:21:9b:82:
                    c1:fc:d1:5c:7a:14:db:7b:bb:6b:07:df:26:82:46:
                    78:96:c7:a0:59:8f:6f:2e:e9:44:16:4e:2c:84:8c:
                    3d:fb:84:2f:16:31:1d:e7:96:cb:0f:80:d0:f5:99:
                    7d:23:d1:8c:38:a2:1a:b9:43:62:af:af:ca:e2:d4:
                    49:c9:24:f5:11:c3:9e:eb:04:0b:1c:4a:8f:db:f4:
                    a4:2c:a9:d4:85:c0:39:74:e3:87:79:8a:67:71:3b:
                    b2:fd:03:f5:91:c3:e7:01:be:db:f4:a4:48:7b:ae:
                    89:54:c7:45:8e:c3:9a:a4:2e:11:13:98:89:67:15:
                    25:59:ff:bf:ae:bf:db:8a:15:eb:04:55:05:8c:d8:
                    83:d3:3a:9a:a8:34:2a:75:8d:f2:b2:cc:a2:b3:3b:
                    0e:60:c9:ce:fd:76:5c:ee:2e:e8:d5:83:40:15:b9:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:98:02:BE:F2:19:B9:16:12:E5:2E:D0:1A:1B:EB:94:45:5D:F0
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c30::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:48:ba:80:a0:32:6f:c6:65:d8:2a:c2:6c:c2:20:e5:ae:ec:
         ee:19:e1:87:80:ed:0f:1b:92:28:7d:38:3e:99:4d:82:16:ea:
         b9:14:1b:f9:23:04:cb:bf:d3:49:88:cb:0a:55:ca:d1:c8:cf:
         38:02:08:f8:10:0e:1b:83:5c:eb:5b:10:95:09:73:9e:c3:b3:
         1f:72:1b:55:72:3f:a3:8f:2e:fc:8a:d6:87:f3:b0:8b:aa:c3:
         95:0a:45:0d:e3:fa:f3:86:b0:ea:15:e7:62:e3:6d:ed:c7:e0:
         62:4f:03:81:ee:5d:70:26:60:93:69:05:ae:25:03:b5:e2:83:
         33:63:f4:80:d4:18:d1:87:f7:ad:f5:ac:a2:42:1a:cc:8b:4e:
         30:56:9a:3c:26:e0:79:c3:4d:ff:7d:e9:c9:50:74:cd:bb:09:
         7f:e4:5f:d5:73:da:2d:38:68:49:c9:d1:ca:69:f9:67:86:0e:
         b1:4d:3e:be:73:cc:e5:d0:fc:ad:37:a0:09:8a:f5:4a:ec:9e:
         ab:50:eb:af:e1:1f:cd:c9:9f:4f:68:a0:be:a1:2c:47:6a:46:
         2e:06:89:7d:b5:b4:31:55:b2:77:fa:49:de:4e:e4:bc:95:1c:
         2e:e9:de:f2:97:fa:b3:dd:2a:e3:1a:f9:a4:b4:99:7c:89:c8:
         81:e4:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----