Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/479aXTohfDC75WxyN-XAeWA-Dcs.roa
File:                     479aXTohfDC75WxyN-XAeWA-Dcs.roa (raw, json)
Hash identifier:          btZG6uX97h102dNnMzmd71SRygtO0tlGl2xc8lR728o=
Subject key identifier:   E3:BF:5A:5D:3A:21:7C:30:BB:E5:6C:72:37:E5:C0:79:60:3E:0D:CB
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       5A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/479aXTohfDC75WxyN-XAeWA-Dcs.roa
Signing time:             Tue 11 Oct 2022 09:52:21 +0000
ROA not before:           Tue 11 Oct 2022 09:52:21 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:52:21 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=E3BF5A5D3A217C30BBE56C7237E5C079603E0DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:b6:b0:93:39:5b:4f:c5:22:db:bc:48:c9:
                    99:fb:08:f3:6e:ad:90:88:8b:57:ed:36:c3:c4:fe:
                    89:40:3e:e6:1c:a8:70:47:f0:b1:f4:a0:2b:43:20:
                    b8:77:d0:f1:76:b1:7b:62:58:92:db:7e:98:c3:af:
                    76:bb:ba:7b:cc:18:16:80:39:62:65:83:f6:3b:93:
                    bc:89:3c:bb:8e:e8:f9:61:9d:a1:4d:1f:60:d1:73:
                    f2:04:3b:d2:30:8d:c6:d6:47:1d:18:ad:63:05:67:
                    96:68:e2:d0:ea:b3:54:9b:e3:b5:8a:b9:7a:3b:c0:
                    bb:0e:71:49:03:e1:08:67:4d:dd:0c:d6:23:cf:87:
                    ab:dd:1b:15:07:72:13:bc:00:5f:20:c7:5d:f3:be:
                    60:5e:3d:05:46:88:d7:a8:5e:17:21:a5:74:ff:2a:
                    af:77:04:bc:54:ed:49:97:d5:8d:89:73:e4:a4:7e:
                    d0:21:5e:52:3a:55:78:8e:ce:ea:78:8d:a0:a2:c5:
                    c9:22:7c:c7:7a:8b:25:de:65:4c:21:2e:5d:8c:e5:
                    c1:fe:27:2a:51:73:98:62:97:1d:7f:51:28:cd:a6:
                    ad:4e:54:06:ff:f2:a5:c3:6b:6e:72:68:93:98:ca:
                    0c:30:c7:e1:bc:96:09:5c:e0:01:e4:e0:76:32:95:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:5A:5D:3A:21:7C:30:BB:E5:6C:72:37:E5:C0:79:60:3E:0D:CB
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/479aXTohfDC75WxyN-XAeWA-Dcs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:5a:1a:57:c9:7d:94:7e:51:6c:4c:11:a1:61:28:be:4b:
         ce:1e:dc:af:58:cd:94:52:53:f8:3c:33:bf:1e:c1:eb:23:9c:
         cc:72:51:c3:e2:94:40:e3:78:3e:48:c2:19:44:7d:2e:a1:3c:
         76:6e:98:03:4f:39:50:46:e2:f6:88:a3:26:fa:0b:f3:87:de:
         c9:5b:ae:a3:42:f2:6f:a8:51:99:84:c9:5a:38:38:cb:af:eb:
         c6:a0:67:de:ca:e6:c5:94:e6:17:28:99:50:74:ba:f4:93:7d:
         58:d9:f0:1d:57:1b:3e:9f:97:0d:00:ec:57:27:76:38:01:49:
         0b:a6:a3:ba:ed:bd:b4:cf:54:ed:8e:9f:ed:78:62:99:0c:7f:
         c1:a8:b3:34:2e:f5:d3:a1:a5:87:e0:2d:9f:c4:69:ba:86:1f:
         9d:ad:57:e0:7f:9d:86:b9:80:86:da:94:5a:92:91:66:14:2d:
         96:de:16:e8:ff:e1:d1:80:88:d3:ab:d6:9b:c0:3c:0c:29:b9:
         e8:67:5c:bb:a5:30:37:04:1d:66:ff:11:fe:71:ab:8c:5d:63:
         df:4d:57:92:e5:5e:3a:59:87:e9:35:c4:7d:57:4f:ad:86:20:
         c7:09:cd:cd:97:4f:b9:88:36:6c:c0:79:3a:9d:e1:72:1d:70:
         11:18:ef:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org