Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CK5OuhbSuBFLTWzhrdk8SEaqVXg.roa
File:                     CK5OuhbSuBFLTWzhrdk8SEaqVXg.roa (raw, json)
Hash identifier:          xgsZOxR/kFavodgMXFcZ3R85ijWN1YZaDnbZKDd/zEs=
Subject key identifier:   08:AE:4E:BA:16:D2:B8:11:4B:4D:6C:E1:AD:D9:3C:48:46:AA:55:78
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       1B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CK5OuhbSuBFLTWzhrdk8SEaqVXg.roa
Signing time:             Tue 11 Oct 2022 09:28:16 +0000
ROA not before:           Tue 11 Oct 2022 09:28:16 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        124.109.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:28:16 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=08AE4EBA16D2B8114B4D6CE1ADD93C4846AA5578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:c6:fa:b8:4e:10:7c:8b:27:22:01:2f:62:
                    fa:b5:66:72:92:a8:b2:f9:b9:24:81:fc:ff:a7:dc:
                    d6:06:c4:f3:a9:85:27:8e:9f:50:42:bc:c1:2e:13:
                    b5:a5:11:4e:49:4b:d3:c7:e0:53:3b:53:44:c5:33:
                    6a:6f:a6:15:71:57:26:06:6e:b5:bd:41:9c:9a:ca:
                    b5:47:f6:74:58:1f:21:d6:ac:fd:d3:8d:53:8f:1b:
                    8c:19:00:c6:f8:a5:38:26:cb:02:2a:c2:60:b7:43:
                    79:42:15:77:e2:75:09:76:85:0e:11:e5:25:96:aa:
                    d2:e3:df:78:2a:6b:04:35:85:fd:af:e4:ee:01:13:
                    9b:c6:af:29:af:9f:16:64:87:e4:14:fc:78:e9:9c:
                    3f:7d:d7:0e:b3:52:8e:7f:28:ec:b4:47:3a:d3:10:
                    af:df:f1:ab:d2:8d:80:7a:4f:90:d9:26:af:8e:68:
                    3d:0c:72:2a:94:df:96:7c:92:a7:9d:b6:bb:92:59:
                    da:33:0d:44:28:e3:62:5e:de:eb:e7:f4:c1:c4:de:
                    5d:86:56:45:5e:5b:e8:42:86:a0:11:4a:a2:8b:13:
                    09:4c:20:97:1c:26:9c:5a:b4:59:64:fc:2a:09:f7:
                    86:7e:4a:2b:12:7f:fe:b2:09:55:3b:d4:3b:93:d9:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:4E:BA:16:D2:B8:11:4B:4D:6C:E1:AD:D9:3C:48:46:AA:55:78
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CK5OuhbSuBFLTWzhrdk8SEaqVXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:15:cd:40:53:b0:f8:22:f4:25:32:00:2f:27:a4:21:d8:
         a9:a0:5a:0d:24:62:eb:dc:96:1e:20:0a:4a:8d:f4:af:93:aa:
         89:9b:f2:90:1d:06:0b:f9:4a:53:ae:d6:33:b3:a9:ba:48:cf:
         43:df:32:f6:bf:81:1c:11:64:7b:c5:de:53:e0:dd:8e:d8:68:
         a8:0c:15:01:c7:cb:a1:44:35:c5:6b:ac:8b:08:a1:a8:03:48:
         b6:7d:d9:a4:c0:82:68:7a:a6:4f:cb:8d:ef:95:88:6f:c4:0b:
         16:03:b3:58:cc:2f:29:d9:24:6d:79:d0:97:84:c2:2f:45:71:
         96:72:60:6b:6d:ba:42:1d:cf:df:09:68:b5:76:f4:6a:51:89:
         e9:aa:68:cf:f4:b8:9a:ba:56:0e:c0:6f:43:e7:5b:b3:d2:3b:
         6a:8e:b4:93:b7:1a:8f:43:e0:09:83:49:e2:0b:4d:a4:df:2f:
         b7:a0:b4:22:b0:68:07:c8:39:d5:75:60:ad:3d:28:93:b4:92:
         cb:b1:b5:60:c2:89:7b:5c:b0:e7:30:4a:c4:9b:ab:1a:be:25:
         9e:bc:df:c1:b0:0c:5a:b6:a3:f2:26:e1:18:f8:48:11:bd:72:
         b1:c8:ef:a9:5e:f6:69:8e:60:c2:f4:6b:6e:1c:c1:eb:ef:ea:
         19:ff:cc:44
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MjgxNloXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMDhBRTRFQkExNkQyQjgx
MTRCNEQ2Q0UxQUREOTNDNDg0NkFBNTU3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALl6xvq4ThB8iyciAS9i+rVmcpKosvm5JIH8/6fc1gbE86mFJ46f
UEK8wS4TtaURTklL08fgUztTRMUzam+mFXFXJgZutb1BnJrKtUf2dFgfIdas/dON
U48bjBkAxvilOCbLAirCYLdDeUIVd+J1CXaFDhHlJZaq0uPfeCprBDWF/a/k7gET
m8avKa+fFmSH5BT8eOmcP33XDrNSjn8o7LRHOtMQr9/xq9KNgHpPkNkmr45oPQxy
KpTflnySp522u5JZ2jMNRCjjYl7e6+f0wcTeXYZWRV5b6EKGoBFKoosTCUwglxwm
nFq0WWT8Kgn3hn5KKxJ//rIJVTvUO5PZBN8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQIrk66FtK4EUtNbOGt2TxIRqpVeDAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L0NLNU91aGJTdUJGTFRXemhyZGs4U0VhcVZYZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAB8bbMwDQYJKoZIhvcNAQELBQADggEBAI1sFc1AU7D4IvQlMgAvJ6Qh
2KmgWg0kYuvclh4gCkqN9K+Tqomb8pAdBgv5SlOu1jOzqbpIz0PfMva/gRwRZHvF
3lPg3Y7YaKgMFQHHy6FENcVrrIsIoagDSLZ92aTAgmh6pk/Lje+ViG/ECxYDs1jM
LynZJG150JeEwi9FcZZyYGttukIdz98JaLV29GpRiemqaM/0uJq6Vg7Ab0PnW7PS
O2qOtJO3Go9D4AmDSeILTaTfL7egtCKwaAfIOdV1YK09KJO0ksuxtWDCiXtcsOcw
SsSbqxq+JZ6838GwDFq2o/Im4Rj4SBG9crHI76le9mmOYML0a24cwevv6hn/zEQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org