Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2k5nfEQOK3F8xstvWYfFl7EBKl4.roa
File:                     2k5nfEQOK3F8xstvWYfFl7EBKl4.roa (raw, json)
Hash identifier:          SVvsHhNV5JAQAMhT7utruldJMejQQkhO6n/1cv8j+UE=
Subject key identifier:   DA:4E:67:7C:44:0E:2B:71:7C:C6:CB:6F:59:87:C5:97:B1:01:2A:5E
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       DE
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2k5nfEQOK3F8xstvWYfFl7EBKl4.roa
Signing time:             Fri 01 Sep 2023 01:30:57 +0000
ROA not before:           Fri 01 Sep 2023 01:30:57 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        202.164.64.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:57 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=DA4E677C440E2B717CC6CB6F5987C597B1012A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:40:2f:d1:1a:95:7a:af:1a:7f:9e:09:74:
                    4e:d2:f9:0c:8a:3c:00:87:d8:4e:08:8e:9b:89:70:
                    1d:6d:55:19:b9:ac:b2:07:ad:a2:4a:5c:de:ff:a4:
                    b3:52:4a:7d:83:9b:c9:01:39:98:72:4c:7e:6b:13:
                    6a:02:40:f8:ba:ef:6e:2a:ba:fc:20:ad:e3:fb:aa:
                    f5:40:52:a2:b3:3c:2b:72:8f:7e:ee:48:fa:79:ee:
                    f5:95:ab:32:b9:fe:14:6d:a7:8b:45:ef:28:d0:f7:
                    78:5b:7d:ee:db:81:44:d1:07:65:78:6f:f3:71:3d:
                    bb:ed:18:36:00:e0:3a:a7:ec:b5:28:6f:02:58:ce:
                    9a:4a:0a:8c:8c:c1:8a:e1:99:b8:77:ba:17:cb:eb:
                    06:15:7a:04:de:af:47:fc:7c:96:50:72:7c:c5:c9:
                    67:a5:42:fe:63:e8:7e:a3:b8:87:a3:fd:98:b1:8f:
                    34:1c:f5:c9:86:fe:31:65:d8:11:f4:f9:aa:f1:6b:
                    27:88:b1:ac:33:14:5d:e3:aa:dd:78:da:ae:84:e8:
                    56:5f:53:40:b9:9d:f2:75:55:b6:f1:b6:30:4b:65:
                    4b:0d:d8:df:6c:d7:92:83:21:78:3d:ad:ab:8d:ca:
                    2f:d4:bd:97:90:cb:8c:32:24:c4:e6:87:84:f9:3a:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:67:7C:44:0E:2B:71:7C:C6:CB:6F:59:87:C5:97:B1:01:2A:5E
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2k5nfEQOK3F8xstvWYfFl7EBKl4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.164.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:18:92:01:59:fc:2b:d6:f9:ac:74:dd:7c:cd:9e:7c:97:
         a0:83:81:b0:e3:97:7c:22:15:dc:7c:6a:74:7b:a2:f6:09:fa:
         ff:ff:4b:eb:85:56:82:3f:4a:42:6d:e2:a3:ed:f2:79:9b:93:
         0b:a8:9b:e2:8f:85:b2:c6:cd:3e:c7:be:df:80:dd:9b:e9:95:
         5b:db:22:de:23:2a:00:9c:bf:86:32:49:ce:6a:47:f9:7d:31:
         29:c4:06:e5:c4:ff:98:52:09:f3:6b:15:a7:0f:19:d8:44:56:
         0e:0b:1c:11:c8:5d:5c:74:f0:57:ba:33:16:67:48:6a:e5:80:
         57:88:7c:d5:2d:e8:14:35:ec:ee:0f:dc:0c:e7:a1:fc:98:b3:
         1c:5f:2e:a7:84:eb:ea:3e:3b:9b:fb:4a:ae:b0:d5:72:d9:33:
         e9:d0:97:d3:c2:02:96:a3:7c:ac:f3:8e:a8:74:7d:8b:73:cb:
         c5:93:ae:ce:77:65:c5:91:90:3f:69:a2:2d:ca:cb:de:ed:cd:
         aa:21:8d:73:15:ea:3d:2f:e6:a9:8a:2e:f6:d3:77:94:6a:a8:
         e6:03:38:75:16:72:c0:6d:24:b9:f6:be:ab:d0:24:e4:c0:1d:
         f1:24:4c:17:3f:af:cd:de:13:23:2c:6b:7e:16:c7:1d:99:d9:
         6c:62:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org