Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34382d3438203d3e203133353836.roa
File:                     323630323a666564613a6362303a3a2f34382d3438203d3e203133353836.roa (raw, json)
Hash identifier:          zJJHj9j1wsa9PsW11HsiICNTUmr871HYsrNICGZ60Gg=
Subject key identifier:   80:6E:6C:36:81:B2:FE:88:00:A7:1D:7D:C5:45:53:EA:98:9D:27:41
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       DBDFE6A6ACF379B989BF0E34F5ED97B2D0D530
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34382d3438203d3e203133353836.roa
Signing time:             Mon 27 Sep 2021 16:54:38 +0000
ROA not before:           Mon 27 Sep 2021 16:49:38 +0000
ROA not after:            Mon 26 Sep 2022 16:54:38 +0000
asID:                     13586
IP address blocks:        2602:feda:cb0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            db:df:e6:a6:ac:f3:79:b9:89:bf:0e:34:f5:ed:97:b2:d0:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Sep 27 16:49:38 2021 GMT
            Not After : Sep 26 16:54:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7b:95:c2:d4:4a:b9:9a:06:b3:5f:e0:81:94:
                    c5:1c:c9:a9:b1:c6:2e:67:9a:c1:d0:e8:19:06:a7:
                    c2:74:b4:a7:a8:b4:eb:e8:d7:90:71:fc:e2:68:50:
                    dd:d0:f1:43:4a:bd:27:85:4f:cf:8f:ba:dc:23:4b:
                    a9:0f:ef:22:39:4b:3a:c2:dc:9d:b3:57:ae:08:67:
                    1a:ab:10:23:62:f7:1a:34:70:09:af:df:5a:06:27:
                    49:ae:99:32:35:3e:2d:33:5c:5a:cf:ff:e6:25:52:
                    aa:a9:0c:4e:75:43:dd:29:57:33:8b:33:49:ba:3e:
                    97:27:37:7b:73:5c:20:2b:e7:f4:0c:53:5b:ae:1e:
                    0d:b2:11:ac:78:60:37:2e:9b:7b:88:c9:1b:3f:02:
                    0c:49:f9:09:5c:4d:3b:b2:11:a9:95:38:c5:75:18:
                    d2:87:d2:bd:1e:6a:af:91:3f:a7:f0:7e:86:c9:61:
                    c7:5e:99:c8:6f:bc:3f:9c:85:6d:4d:29:38:76:9a:
                    bb:71:9d:67:69:ec:e2:97:64:cf:e7:21:1e:82:f3:
                    13:81:88:79:f9:99:2c:61:7b:f4:28:29:89:9f:1a:
                    03:7b:47:b6:5d:06:03:fd:26:e0:7b:b7:32:f5:50:
                    6f:58:9d:ec:30:c7:1b:c8:2d:90:61:1e:59:47:70:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6E:6C:36:81:B2:FE:88:00:A7:1D:7D:C5:45:53:EA:98:9D:27:41
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34382d3438203d3e203133353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:cb0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:06:59:37:c1:2a:21:21:39:06:c1:b4:a9:62:f2:16:1e:
         f6:00:f3:fe:0f:0e:d1:5b:17:c5:73:98:fd:d1:ec:98:de:15:
         3a:9b:1c:41:a9:b1:0c:ee:55:4c:9a:d7:c9:6b:ff:f8:0f:0a:
         08:1c:8a:fe:08:fe:8b:c5:fe:59:8e:ba:d0:64:47:42:c8:75:
         a2:fc:70:76:28:58:83:42:31:67:b6:10:8d:1a:f2:d0:94:d5:
         15:2e:4c:3a:b6:7d:39:81:0a:17:3f:c0:67:b6:54:62:f2:f1:
         62:79:b0:cf:35:90:4c:82:cf:ca:64:96:76:22:52:ec:d4:fb:
         83:21:34:aa:19:e3:99:16:a7:1f:42:1f:54:91:86:48:3e:78:
         c3:8d:3f:f6:51:b0:a8:97:9a:3c:fc:d1:6b:c6:bb:92:a3:3f:
         f0:6f:cf:85:f7:0b:70:33:be:f2:45:fa:ec:2f:b5:23:75:7b:
         05:cf:6b:45:08:73:86:c1:86:7a:10:e2:c6:16:32:db:f5:c6:
         62:54:4d:e2:2e:be:41:ed:23:52:58:39:42:77:b8:ce:21:f5:
         e6:bb:c1:25:65:e3:2b:0b:49:1f:ef:7f:cb:10:11:e1:1b:d8:
         8f:05:79:26:9d:8e:ad:19:be:ce:02:09:3f:76:09:92:7e:58:
         d7:47:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----