Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
File:                     323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa (raw, json)
Hash identifier:          GwJ3+jkn0BPJGGtn7ybBP7hYjsshanaQDirku3QcRtk=
Subject key identifier:   87:40:CD:B5:95:57:EB:88:E2:3D:F5:A2:46:BC:DE:62:D1:7C:CD:18
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       675241FB39DD3F37FD75DAD0852925AF714282C4
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
Signing time:             Mon 28 Feb 2022 01:00:06 +0000
ROA not before:           Mon 28 Feb 2022 00:55:06 +0000
ROA not after:            Mon 27 Feb 2023 01:00:06 +0000
asID:                     212360
IP address blocks:        2602:feda:c90::/44 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:52:41:fb:39:dd:3f:37:fd:75:da:d0:85:29:25:af:71:42:82:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:06 2022 GMT
            Not After : Feb 27 01:00:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:93:fc:d8:6b:d0:c2:3a:b5:1b:cf:d7:6a:
                    41:ce:ab:4f:6d:a8:93:51:f2:81:d4:1f:c4:7f:ff:
                    19:39:81:17:93:2d:2d:2f:4e:4b:58:fb:58:52:ce:
                    85:8b:17:79:62:eb:22:8c:26:aa:b6:fc:5c:5f:63:
                    3e:e8:c7:3d:aa:fb:50:82:89:08:ff:7d:86:0b:59:
                    6d:11:9a:ec:3c:c2:15:d0:b6:dd:ed:0f:09:79:5a:
                    f2:88:ff:05:be:32:e3:0a:fb:02:14:36:82:95:28:
                    52:4a:18:f3:7d:6d:cb:99:4c:8a:19:07:0f:67:d5:
                    1b:aa:fd:98:59:36:60:8a:16:35:2c:99:68:92:0f:
                    e0:bf:4c:ba:e6:31:e4:75:42:d4:dd:f3:d5:6b:a9:
                    4f:93:4d:81:8d:7a:cc:32:73:aa:21:2a:38:2a:3a:
                    d0:44:55:1e:7f:a3:9c:90:85:d8:e4:0d:6b:34:7f:
                    f8:b2:e2:f7:51:2b:19:27:62:61:99:b9:60:98:41:
                    7e:0e:a7:d1:7c:f5:b4:99:f3:16:c5:ea:8f:cb:a1:
                    a2:c4:f8:4c:97:17:5d:d5:c7:d9:86:a0:7e:27:4a:
                    7c:15:32:6d:d1:23:5a:70:25:d7:95:f9:66:1e:5d:
                    9b:78:19:f9:f3:27:b0:31:1b:f9:c9:78:63:06:7c:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:40:CD:B5:95:57:EB:88:E2:3D:F5:A2:46:BC:DE:62:D1:7C:CD:18
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:4f:c6:25:af:96:16:c4:fb:2e:8d:e2:d7:7b:1c:cb:17:
         e2:e5:df:cd:a7:79:89:6e:2f:69:40:2e:a7:9f:4f:32:63:94:
         97:c7:7e:2c:b6:4b:fb:8e:24:ce:ac:2a:94:d5:52:7e:55:9f:
         fd:c1:2b:60:a1:48:fa:f0:2a:77:66:69:5d:51:78:26:2a:3c:
         34:b9:f9:00:64:c6:c2:fb:a3:cf:95:0f:2e:8e:35:8e:00:39:
         db:14:9c:18:f3:e3:23:af:c8:97:0b:1e:79:9d:25:8b:11:4e:
         18:70:05:b1:ad:7a:c5:c0:0b:e7:7f:c2:dc:bb:03:81:95:a3:
         7f:e3:c8:2a:1d:26:68:46:f2:86:ff:d0:89:2c:ca:e6:83:8c:
         86:28:2a:a9:6f:50:13:7c:4f:fe:f6:5b:cf:06:64:7e:ea:fc:
         5a:2f:bd:11:15:44:61:15:8d:64:65:43:d7:76:f3:e7:6c:86:
         c6:c5:f7:6f:e2:dc:1d:2c:e0:5a:97:a1:1e:5a:9c:e7:2b:10:
         48:e3:0f:6a:b5:f3:9b:cb:8a:03:4c:2f:f5:3e:d6:f6:d5:3d:
         5b:cd:1c:fc:d2:4b:fa:59:88:c2:de:3c:b8:f6:9f:58:e6:f8:
         8a:e1:30:69:d6:08:d1:93:75:77:97:90:aa:48:6c:75:d2:b7:
         67:c0:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----