Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa
File:                     7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa (raw, json)
Hash identifier:          J6XZprOqZ4Am+IygrBs4oZdn0iE/ZwFUUy1LgmM2XaM=
Subject key identifier:   EC:20:EC:6E:AF:D2:02:F2:7C:39:74:1A:F6:ED:A6:06:9B:D3:6E:E1
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0129
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa
Signing time:             Sun 01 Oct 2023 01:30:43 +0000
ROA not before:           Sun 01 Oct 2023 01:30:43 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:43 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EC20EC6EAFD202F27C39741AF6EDA6069BD36EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:10:87:0a:99:a7:49:a5:84:51:eb:6c:a7:
                    ba:b3:fe:0e:7f:e8:42:96:25:1d:f8:dd:5a:46:65:
                    bd:51:3b:1c:a9:58:c7:94:f6:4e:0c:7f:d7:6f:5c:
                    78:35:ba:8e:04:60:58:a8:39:b2:39:3b:08:1e:7e:
                    85:28:ac:74:e3:88:fc:78:cc:49:14:74:46:a5:e1:
                    a6:86:1e:50:25:5a:ad:36:ec:2b:e6:7e:42:92:70:
                    fb:07:14:1a:d7:c8:eb:bd:1c:25:cf:98:03:23:91:
                    97:17:e2:ca:af:ff:cf:5c:ad:92:54:3f:1c:3f:5a:
                    1d:13:e2:a0:4e:df:a2:54:a1:03:5e:c9:fa:0e:f1:
                    39:cd:29:18:81:e7:b3:5f:e3:88:be:a6:be:79:a8:
                    23:b2:2d:c0:24:41:28:43:fb:ed:ff:a6:29:6c:ae:
                    b2:35:3e:98:2f:44:6a:45:d6:b5:6b:8e:78:f9:91:
                    71:0e:b0:2e:d1:fe:cc:29:94:be:ab:33:07:3a:39:
                    8b:5e:c6:33:75:b8:89:c6:9c:30:fe:9e:25:3f:6e:
                    49:e7:09:d9:b5:32:4b:a9:87:00:29:2c:30:60:00:
                    86:10:c2:14:1c:ab:d2:f3:94:bd:1c:f2:5c:8d:9d:
                    09:24:46:45:0b:ce:8b:cc:c9:1d:72:67:80:85:98:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:EC:6E:AF:D2:02:F2:7C:39:74:1A:F6:ED:A6:06:9B:D3:6E:E1
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:c0:38:79:8e:43:8a:b0:59:9e:6b:7c:ce:cc:5c:40:17:
         0c:2d:4c:4f:2b:34:98:28:1f:54:63:ee:7b:96:65:1a:2a:92:
         2f:eb:b9:70:1a:04:e7:d3:8e:d3:23:79:d2:01:d1:63:fa:34:
         6a:b8:93:eb:02:33:b1:f6:40:92:86:df:00:fb:48:a8:12:df:
         be:e5:a3:85:02:44:fb:36:7f:9c:3d:77:96:8e:e1:1b:d7:f5:
         7d:a9:c9:0e:82:2e:58:b6:15:9d:e9:0a:69:9b:03:84:17:17:
         96:d3:a9:97:4c:5a:40:2c:93:eb:42:30:d0:1b:3b:e5:f8:18:
         88:34:ad:f1:80:67:80:ab:74:0c:d2:e9:c4:51:8d:07:af:83:
         cb:f9:0a:f1:bd:aa:f8:53:ca:73:8a:31:2b:b5:7a:3c:a1:01:
         82:45:99:9c:a5:ba:9b:fb:3e:71:66:17:4e:93:39:2f:c2:e4:
         8f:bd:b7:ad:b6:a3:8a:5f:9d:be:a9:6b:18:2e:93:c4:34:e1:
         9a:50:53:6a:9a:11:19:c5:18:16:40:eb:28:36:32:60:ae:a6:
         55:3a:ce:e9:78:c9:6b:3e:cc:91:47:3c:d8:16:fa:fb:a2:9c:
         04:f6:e9:82:99:4b:97:28:4d:5d:98:28:93:c7:63:72:ef:2c:
         40:81:a3:fe
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICASkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNDNaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVDMjBFQzZFQUZEMjAy
RjI3QzM5NzQxQUY2RURBNjA2OUJEMzZFRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC95RCHCpmnSaWEUetsp7qz/g5/6EKWJR343VpGZb1ROxypWMeU
9k4Mf9dvXHg1uo4EYFioObI5OwgefoUorHTjiPx4zEkUdEal4aaGHlAlWq027Cvm
fkKScPsHFBrXyOu9HCXPmAMjkZcX4sqv/89crZJUPxw/Wh0T4qBO36JUoQNeyfoO
8TnNKRiB57Nf44i+pr55qCOyLcAkQShD++3/pilsrrI1PpgvRGpF1rVrjnj5kXEO
sC7R/swplL6rMwc6OYtexjN1uInGnDD+niU/bknnCdm1MkuphwApLDBgAIYQwhQc
q9LzlL0c8lyNnQkkRkULzovMyR1yZ4CFmPJLAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU7CDsbq/SAvJ8OXQa9u2mBpvTbuEwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny83Q0RzYnFfU0F2SjhPWFFhOXUybUJwdlRidUUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0wezMA0GCSqGSIb3DQEBCwUAA4IBAQCL4cA4eY5DirBZnmt8zsxc
QBcMLUxPKzSYKB9UY+57lmUaKpIv67lwGgTn047TI3nSAdFj+jRquJPrAjOx9kCS
ht8A+0ioEt++5aOFAkT7Nn+cPXeWjuEb1/V9qckOgi5YthWd6QppmwOEFxeW06mX
TFpALJPrQjDQGzvl+BiINK3xgGeAq3QM0unEUY0Hr4PL+Qrxvar4U8pzijErtXo8
oQGCRZmcpbqb+z5xZhdOkzkvwuSPvbettqOKX52+qWsYLpPENOGaUFNqmhEZxRgW
QOsoNjJgrqZVOs7peMlrPsyRRzzYFvr7opwE9umCmUuXKE1dmCiTx2Ny7yxAgaP+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org