Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/6ZIh1gj0LADVOnS9bIxJWkCL5II.roa
File:                     6ZIh1gj0LADVOnS9bIxJWkCL5II.roa (raw, json)
Hash identifier:          Z6tsisjQkd1YHrHbCz2DzE2+XbXXIAjlMviMsp5Np0g=
Subject key identifier:   E9:92:21:D6:08:F4:2C:00:D5:3A:74:BD:6C:8C:49:5A:40:8B:E4:82
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E4
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/6ZIh1gj0LADVOnS9bIxJWkCL5II.roa
Signing time:             Fri 01 Sep 2023 01:31:01 +0000
ROA not before:           Fri 01 Sep 2023 01:31:01 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:31:01 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=E99221D608F42C00D53A74BD6C8C495A408BE482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:3d:c6:c1:40:9a:ea:c6:69:9b:ab:80:3c:
                    6e:bd:fc:4e:dd:22:3d:2e:a1:5b:ed:6c:9e:77:5d:
                    76:eb:c5:65:09:3e:de:de:80:5d:d4:da:3a:04:04:
                    99:0b:15:8c:ab:8e:f5:d1:cb:5c:60:3d:63:96:ca:
                    42:0c:97:d0:7b:7b:17:76:aa:c9:38:22:ea:7e:da:
                    bc:82:c1:53:ab:58:ee:2f:f3:5e:d6:ad:6b:63:30:
                    c8:c5:95:10:ca:f6:e8:77:0f:70:63:73:47:9e:04:
                    cc:b2:d7:ee:5d:ce:35:9a:bf:19:7f:fb:c2:3b:82:
                    52:5e:86:04:5d:a7:1b:7e:06:ac:c6:4e:3b:d0:1b:
                    38:59:1f:e1:95:05:23:68:db:af:a8:6f:08:34:b3:
                    df:6f:55:0b:12:92:60:40:dd:95:6e:e8:0c:66:67:
                    9b:ee:43:d5:d6:c5:ae:0a:7e:fc:78:cd:33:39:f5:
                    72:72:fe:a8:fd:bb:ea:f7:25:89:01:ec:08:e9:14:
                    78:4b:e4:46:a7:0a:9c:51:21:c3:33:63:6a:05:fd:
                    f4:aa:35:8c:f1:12:f1:b4:c1:41:ca:e4:73:23:b5:
                    57:d1:48:06:69:fd:5a:a8:ed:b8:6d:02:b1:72:bf:
                    cb:eb:0c:59:50:50:e8:97:de:c9:71:6a:44:71:07:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:92:21:D6:08:F4:2C:00:D5:3A:74:BD:6C:8C:49:5A:40:8B:E4:82
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/6ZIh1gj0LADVOnS9bIxJWkCL5II.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:25:ff:e2:99:03:aa:42:6b:1d:43:b6:6a:57:1c:1e:f4:9a:
         18:0e:cc:77:d5:8d:9f:fc:3d:22:9a:8c:b5:51:11:c0:c5:46:
         69:d9:1f:8c:c4:46:ac:ec:2c:3d:9e:3b:30:6e:76:89:db:0e:
         be:c7:37:6f:25:a6:d4:b0:9f:b4:55:f4:28:f2:7c:17:72:f6:
         2a:44:c3:ff:7b:e8:a7:1f:41:f7:08:27:e3:3a:15:ed:d5:2b:
         5f:ee:67:f4:4c:8f:57:de:1c:4c:c3:b1:5b:6a:ef:f3:17:bc:
         e1:61:9d:60:0b:87:21:78:ec:62:0a:b3:88:bf:97:a0:f2:9c:
         a4:99:79:74:ca:7c:65:87:db:c5:a1:2a:25:57:f4:9b:51:2a:
         ab:d9:7b:f2:7d:16:f7:74:c5:b3:4a:0a:ac:e7:84:23:c4:9d:
         9c:3c:b0:c7:63:22:c6:02:4a:45:26:9b:ac:c6:da:90:00:65:
         bc:36:cb:1c:3b:82:00:aa:c0:2e:ce:a1:3e:51:20:f4:d7:8e:
         ca:71:77:ed:7c:7d:a4:10:51:de:97:22:a0:32:11:cd:f3:d1:
         98:24:d7:fd:59:de:fc:a5:75:3a:5d:93:49:7a:c8:cc:6b:ea:
         70:3b:9c:0d:79:61:7a:1a:fa:79:f9:28:ad:6f:17:a7:04:46:
         79:df:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org