Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa
File:                     323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa (raw, json)
Hash identifier:          e5xSJKxZs9gCLsU6Nt2ta+6tUACyCIb3ioJ4cNh+MB8=
Subject key identifier:   44:D0:6B:ED:D9:D3:1B:71:2A:5A:ED:32:08:69:ED:62:CD:C0:47:86
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       6AD3E0556ED17F8F22ACAEEBC6FDC57C18CD489D
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa
Signing time:             Mon 28 Feb 2022 01:00:04 +0000
ROA not before:           Mon 28 Feb 2022 00:55:04 +0000
ROA not after:            Mon 27 Feb 2023 01:00:04 +0000
asID:                     212237
IP address blocks:        2602:feda:d20::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d3:e0:55:6e:d1:7f:8f:22:ac:ae:eb:c6:fd:c5:7c:18:cd:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:04 2022 GMT
            Not After : Feb 27 01:00:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:12:04:25:41:71:2f:8e:d5:86:91:33:e4:
                    7c:1e:69:09:06:e2:0d:b4:62:00:e1:fd:01:1d:42:
                    78:9d:4e:75:e0:b0:33:e1:47:b5:af:0d:e2:26:f6:
                    fb:75:2b:2d:38:c8:a7:02:e7:ed:3a:5b:6a:42:41:
                    b7:99:92:ee:71:99:ac:cb:70:02:65:e0:fb:b1:a5:
                    31:2a:e0:70:87:cf:63:fd:72:ca:0d:5e:ef:42:64:
                    90:f6:79:10:71:d3:67:94:9a:79:04:50:b7:a7:2c:
                    89:91:ae:7c:5f:4e:2e:07:59:ee:3f:a0:47:31:91:
                    07:a2:76:08:34:07:a9:c9:c8:78:81:c4:d6:6b:2b:
                    2b:8d:a0:62:94:81:4a:a0:15:06:5b:a1:92:8a:8b:
                    18:a2:6a:c0:2c:41:6e:13:77:3b:59:56:e4:dc:5d:
                    83:f5:13:17:a6:69:e5:1b:ec:40:64:d1:0a:da:88:
                    17:a9:0a:aa:50:33:1e:09:4b:63:4a:2e:ba:c2:da:
                    a3:e4:ff:f4:22:f7:6e:b2:d8:bd:88:96:f8:76:3a:
                    96:c6:7d:e4:85:d5:3a:4c:b8:f5:d8:9e:82:71:f3:
                    69:2b:26:90:dd:a7:35:ea:64:ae:a5:8a:ff:72:fd:
                    a7:75:91:4f:89:c4:13:1b:8a:a1:a5:f3:75:ec:bd:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D0:6B:ED:D9:D3:1B:71:2A:5A:ED:32:08:69:ED:62:CD:C0:47:86
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d20::/45

    Signature Algorithm: sha256WithRSAEncryption
         84:76:30:6e:5e:4a:21:94:09:33:7a:f1:3b:7f:cf:4a:6b:bb:
         74:9c:31:da:52:e5:d1:8e:9a:61:a4:33:e6:5b:da:53:5e:c1:
         37:1c:41:84:57:c8:40:89:cb:b2:8f:0f:11:ed:d9:ac:24:87:
         c0:6e:7f:01:d6:4f:03:17:ef:3a:0a:b0:6c:0a:63:c8:5b:84:
         de:16:06:0e:6b:30:77:f0:d6:9b:3b:cb:4f:51:91:d3:09:52:
         20:14:58:15:d0:99:0b:35:23:d5:98:63:43:99:be:0e:24:0a:
         68:88:86:5e:02:a6:45:20:ab:5a:0e:a9:3f:77:2a:da:e7:c5:
         15:9e:65:c4:19:b3:bc:11:06:2e:3f:bb:e1:12:8e:9d:b8:a8:
         83:e6:1c:63:59:e5:21:8c:82:80:5e:cf:5e:0a:b9:a8:5a:26:
         6e:4e:70:47:cb:b0:48:41:ae:54:4e:30:63:29:6e:10:ae:fe:
         da:59:a2:25:61:69:ab:f4:9a:cd:ef:74:bf:05:92:9f:d3:96:
         da:4c:29:30:cf:e4:6d:9b:4d:82:a7:7a:40:00:d1:55:ae:a3:
         a5:83:f6:7d:05:33:55:7a:3b:ae:0c:b4:1d:bd:73:2f:48:dc:
         ff:68:49:c5:d9:80:85:f7:22:b0:54:88:f1:69:fd:05:b5:14:
         80:0a:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----