Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/7iMktROl69Hcaj6rxokuLbpwBko.roa
File:                     7iMktROl69Hcaj6rxokuLbpwBko.roa (raw, json)
Hash identifier:          nNXRlUkFEo8a0Rzo1y7o/VCsNwV5p67rCQ3bY+oPqww=
Subject key identifier:   EE:23:24:B5:13:A5:EB:D1:DC:6A:3E:AB:C6:89:2E:2D:BA:70:06:4A
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       6F
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/7iMktROl69Hcaj6rxokuLbpwBko.roa
Signing time:             Thu 31 Oct 2024 01:31:05 +0000
ROA not before:           Thu 31 Oct 2024 01:31:05 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7514
IP address blocks:        210.166.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct 31 01:31:05 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=EE2324B513A5EBD1DC6A3EABC6892E2DBA70064A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:84:18:c3:92:81:ae:fa:ea:6e:bd:75:59:
                    68:20:05:87:e4:d7:87:27:d8:04:3a:f6:24:3f:60:
                    dc:41:b5:2a:e9:51:b4:bd:d7:9e:89:4f:21:af:63:
                    63:7d:e8:91:e4:59:83:82:11:0d:82:47:18:c0:3e:
                    4b:cc:51:66:7a:6b:3f:b3:14:af:1e:d8:5e:e8:9a:
                    e6:99:1c:9b:21:62:cc:ec:f4:3c:2c:0d:1e:17:32:
                    36:8c:24:14:64:a4:1e:54:1f:e9:fb:5e:42:8d:fb:
                    1a:76:6f:47:4c:5c:32:a1:35:98:c0:ab:98:71:2d:
                    62:70:d5:c5:be:84:d4:e0:4c:ce:31:4b:1c:0b:25:
                    13:78:c6:c2:d9:9c:f1:62:4c:bf:05:96:36:8b:2b:
                    3a:be:a4:55:4f:59:e7:ca:aa:c3:08:1e:f1:95:c0:
                    f0:49:4e:a8:6f:81:7c:db:d3:5d:25:b8:2a:98:95:
                    02:fd:a1:a7:07:4e:85:20:73:3e:bf:98:aa:01:00:
                    58:c8:8c:a8:34:56:aa:8c:e7:b9:aa:f7:a8:77:31:
                    01:83:1a:d3:98:eb:d8:2d:3a:5e:6d:13:40:44:d8:
                    a5:e3:fc:48:96:19:67:5d:24:d0:ac:88:2e:2a:75:
                    44:82:18:43:48:cc:2c:9d:ba:b6:c7:f5:7d:69:1f:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:23:24:B5:13:A5:EB:D1:DC:6A:3E:AB:C6:89:2E:2D:BA:70:06:4A
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/7iMktROl69Hcaj6rxokuLbpwBko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:38:9f:c7:e7:21:f2:0c:dc:64:10:4b:85:d7:e1:f8:2a:48:
         06:81:a5:7c:90:42:68:a7:94:c7:eb:fc:7c:62:2c:ff:f3:c1:
         c8:b4:8a:6a:66:46:b3:81:4d:8e:17:86:f9:d1:34:bd:44:ea:
         6a:8b:41:97:6e:38:86:42:75:57:a2:4e:86:05:97:63:ff:9e:
         68:6c:a3:0d:42:e2:9f:b3:ab:5f:71:d4:c1:ff:55:76:5b:9b:
         ec:49:3f:a2:6f:0e:cd:6e:49:4d:6a:a4:43:60:9b:93:1c:1f:
         96:42:08:24:94:64:5f:8c:4e:6c:e4:27:5d:80:1d:3a:aa:3d:
         69:8f:6e:97:58:0e:b2:72:56:55:b7:ed:39:01:15:45:af:72:
         34:c2:67:a5:76:73:dd:34:8d:7d:53:ae:b3:51:60:da:44:49:
         7f:2e:22:fb:ca:06:46:6f:f5:4d:17:dd:3a:6f:ce:30:b3:a8:
         3e:3b:62:5f:3e:a4:06:bf:55:42:95:ab:dc:0f:b9:d2:41:3b:
         e6:95:0b:13:d6:8e:1b:46:a8:9b:48:a0:75:7f:1b:86:5d:aa:
         19:62:d9:8d:6f:e3:b8:76:a7:fe:d1:44:1a:a4:71:6d:46:5b:
         a8:9f:f8:55:48:f8:9d:85:84:dd:31:f7:f6:a3:4c:83:86:dc:
         2d:1e:26:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:19 2025 by rpki-client