Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-5vTr5FhGNEnewX37QuMI4c2qtw.roa
File:                     -5vTr5FhGNEnewX37QuMI4c2qtw.roa (raw, json)
Hash identifier:          1hlxUshGHt41EpCER2HivXNPKj/0miKLChJoer/Tk1k=
Subject key identifier:   FB:9B:D3:AF:91:61:18:D1:27:7B:05:F7:ED:0B:8C:23:87:36:AA:DC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       C9
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-5vTr5FhGNEnewX37QuMI4c2qtw.roa
Signing time:             Fri 01 Sep 2023 01:30:49 +0000
ROA not before:           Fri 01 Sep 2023 01:30:49 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:49 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=FB9BD3AF916118D1277B05F7ED0B8C238736AADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:72:2b:c8:d6:58:80:52:11:0b:a3:67:90:
                    e4:bb:a2:bc:aa:57:6a:a2:8e:3e:59:e3:a4:7f:ec:
                    ab:8c:dd:31:aa:52:63:24:ef:81:fd:7d:e9:ac:6e:
                    7c:d7:20:7c:25:b7:a5:38:2f:25:86:6e:b0:9d:51:
                    f6:1c:9a:43:ac:b4:b4:ad:2b:d3:a9:03:50:db:4d:
                    c2:b2:89:b1:8b:53:3c:51:bb:39:ef:2c:3a:82:7e:
                    be:8e:14:90:25:03:63:78:8c:33:34:48:39:11:39:
                    31:16:39:04:81:70:ef:ef:33:c9:c9:13:6c:b4:77:
                    04:71:98:63:40:80:8a:4a:1c:cd:75:60:00:97:2a:
                    18:ab:29:d0:bb:37:e4:31:4b:65:0a:02:9e:01:21:
                    dc:fb:e2:84:85:3b:ed:65:5c:09:be:a6:04:37:9d:
                    5c:15:93:93:20:37:55:ba:e7:13:0e:0a:b3:cd:5a:
                    bb:da:27:84:ac:cd:ea:37:53:67:9c:fa:d1:02:ae:
                    df:87:2c:aa:38:f3:93:13:5b:3e:d5:1b:c5:cc:c6:
                    84:17:b1:e8:5c:78:c8:a1:30:60:82:2b:32:7d:da:
                    ed:12:65:a3:78:bb:6e:3e:bf:45:6e:5b:03:3d:07:
                    44:c5:5d:af:1e:8f:64:5f:7d:2f:5a:e3:c5:74:3a:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:D3:AF:91:61:18:D1:27:7B:05:F7:ED:0B:8C:23:87:36:AA:DC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-5vTr5FhGNEnewX37QuMI4c2qtw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:be:27:17:41:f9:37:4f:05:ab:00:a4:91:a4:17:1e:f0:
         d0:ea:46:36:e0:c2:9e:9a:2d:1a:72:1c:e9:12:c4:1e:c1:c9:
         7f:8d:98:8d:a8:64:33:60:72:92:fd:51:14:45:da:57:5d:67:
         08:db:17:33:15:dc:4a:33:ed:ce:a5:39:3b:a7:76:62:09:a6:
         b2:0d:6a:e4:e0:c1:b5:a2:ec:bc:bb:c2:ea:e9:ae:45:b2:a2:
         22:e0:cb:17:2a:ae:69:fb:f2:f9:5d:1a:d3:5c:44:9d:b4:74:
         46:38:54:e4:9d:c3:74:e2:24:36:ef:a0:10:a2:88:04:a6:64:
         7a:b3:bd:ca:cd:eb:35:bd:18:ea:71:8a:8e:7b:df:62:28:f1:
         16:5d:40:13:fd:f4:ef:9c:e1:f5:7e:9b:7e:e3:47:fb:e9:49:
         46:56:e0:93:26:82:d9:f9:7b:4d:a5:41:82:cd:25:e2:18:d5:
         99:fb:45:55:97:82:bd:f8:3d:55:76:94:64:04:86:c1:78:e2:
         5f:78:b4:df:0d:6f:c9:f7:7a:66:ae:7e:20:21:9a:13:19:94:
         62:fe:cd:7c:5a:0d:f6:9b:0a:ca:be:be:b5:32:0a:b9:71:fc:
         a7:5e:a3:38:2e:b3:38:f5:73:5d:e2:6f:47:1a:66:70:c6:9d:
         00:91:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org