Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/C741WOqi-MuDn44tvQY03G1ZOTM.roa
File:                     C741WOqi-MuDn44tvQY03G1ZOTM.roa (raw, json)
Hash identifier:          GZMvozOVcgJqWW+DcfTIzDcPpJ14EnRIXtCb+aPA7ag=
Subject key identifier:   0B:BE:35:58:EA:A2:F8:CB:83:9F:8E:2D:BD:06:34:DC:6D:59:39:33
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       015A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/C741WOqi-MuDn44tvQY03G1ZOTM.roa
Signing time:             Sun 01 Oct 2023 01:35:46 +0000
ROA not before:           Sun 01 Oct 2023 01:35:46 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        218.225.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:46 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0BBE3558EAA2F8CB839F8E2DBD0634DC6D593933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:fa:10:fa:09:ef:48:1d:14:98:9a:6d:c3:
                    1f:43:76:4c:f7:c5:d2:d0:5e:cc:7c:80:f7:f0:d0:
                    55:65:3c:8a:57:0f:2a:6b:e2:d1:d8:7f:64:64:f8:
                    12:f3:ac:73:6d:d8:f8:88:fb:ed:e5:99:10:19:cc:
                    8e:d6:4f:59:cf:50:03:b0:de:e5:18:82:9c:75:cb:
                    01:6e:31:15:99:58:64:c6:29:88:13:5a:1a:12:8a:
                    b9:a4:12:9a:58:70:26:d7:4c:48:5d:54:22:18:15:
                    f8:78:9c:0b:ea:f6:a4:24:99:31:87:0a:61:fd:39:
                    7e:a2:15:90:84:7a:20:f2:e4:2c:a0:b7:9d:40:d6:
                    f7:19:61:e0:05:70:e7:a6:3f:55:a4:f5:1f:58:54:
                    03:ee:95:df:4c:36:4e:8a:6e:1b:7f:84:11:8d:6f:
                    bf:54:b6:37:30:07:5e:a5:09:4e:df:9d:dc:39:3d:
                    67:c5:15:dc:c5:9a:fe:0a:e3:74:b0:07:8d:6d:76:
                    fb:40:65:05:4f:41:56:7f:88:05:13:0c:c0:ba:c3:
                    a1:05:99:d2:2e:fb:0b:9a:96:4e:22:52:d3:a5:72:
                    21:a0:0b:85:ef:48:68:3f:c1:ff:54:df:f1:2c:8c:
                    61:9f:8b:3e:ef:70:55:99:1e:a9:6b:3d:5f:c3:9a:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:35:58:EA:A2:F8:CB:83:9F:8E:2D:BD:06:34:DC:6D:59:39:33
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/C741WOqi-MuDn44tvQY03G1ZOTM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:4c:6b:9a:bf:99:a8:ac:5a:a5:1c:36:6e:dd:bd:cd:5b:
         83:a3:c9:e0:18:d7:d7:3f:ae:84:18:e1:81:54:25:b6:a6:4b:
         7b:a9:a5:26:fd:40:cb:5d:5d:02:0d:12:56:36:03:ea:3f:81:
         5e:1a:eb:60:a7:cd:38:61:bc:72:f6:04:7e:08:62:49:9b:94:
         13:cb:89:d4:2e:11:de:d9:d1:ef:8c:82:ed:f4:13:37:ee:7a:
         a0:1c:d0:34:71:8d:9c:a3:86:a7:76:f5:14:e1:08:ca:c0:cb:
         84:36:ff:01:7d:da:ff:fa:62:c3:62:df:67:80:4b:ce:22:cc:
         92:00:ed:88:4e:63:0b:37:0c:51:c6:ad:5b:3d:d9:89:e0:e3:
         50:17:77:95:e9:29:d2:02:b3:ba:99:50:2f:e6:93:0e:15:7f:
         0f:a5:93:e2:9b:e9:87:eb:e7:42:91:f6:d1:fe:c2:27:58:00:
         8c:d5:66:a0:e2:36:20:80:f2:d4:71:ce:4e:84:cb:90:d5:b6:
         95:29:b6:a0:db:8f:2b:d9:47:2c:58:06:74:3f:ff:89:d0:88:
         20:ac:eb:fc:76:65:7a:39:f0:ab:79:3b:5a:5c:56:5a:80:3b:
         53:d9:66:28:f9:60:68:70:26:3f:4d:62:a6:72:1e:17:b4:e0:
         f3:89:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org