Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CabLmOsmHFyglRoMXaLLYC5bmyA.roa
File:                     CabLmOsmHFyglRoMXaLLYC5bmyA.roa (raw, json)
Hash identifier:          RD6rHF/4eQRJ4Ptvp+gMYuP93wc0eocH6L6VCIR2FHM=
Subject key identifier:   09:A6:CB:98:EB:26:1C:5C:A0:95:1A:0C:5D:A2:CB:60:2E:5B:9B:20
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       016A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CabLmOsmHFyglRoMXaLLYC5bmyA.roa
Signing time:             Sun 01 Oct 2023 01:35:51 +0000
ROA not before:           Sun 01 Oct 2023 01:35:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.9.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=09A6CB98EB261C5CA0951A0C5DA2CB602E5B9B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:e0:d9:45:43:80:09:fb:05:5c:2c:92:d9:
                    71:40:87:e4:f2:8f:a8:5f:52:6a:d0:0d:af:f8:66:
                    90:1a:bb:d2:ef:3a:98:ba:92:7a:5b:da:9d:34:46:
                    ef:bf:9c:92:25:e2:7c:52:30:eb:09:32:42:ef:43:
                    f7:90:d8:81:d7:19:59:12:f8:b6:84:26:fd:53:e4:
                    15:78:9e:81:11:54:17:96:50:b9:1c:79:2d:3b:3d:
                    b4:52:b7:04:47:01:1d:29:7c:0d:41:2c:3d:a2:0b:
                    8c:0d:a0:29:a7:fb:5a:c4:0a:a8:85:a4:5a:3d:a6:
                    9b:b0:29:b1:96:06:9b:6b:2e:64:76:d9:09:ef:0b:
                    b9:02:2b:5a:f4:df:fa:36:6c:77:4a:27:d1:36:fd:
                    be:68:be:65:8a:d8:ab:ea:d7:80:75:db:1c:7f:d5:
                    c7:da:e2:bf:ec:00:5d:fb:c2:3e:35:50:d2:fb:5f:
                    1f:cc:3f:4e:89:30:dd:b9:48:62:67:2e:df:d5:a1:
                    85:c7:e2:3b:61:97:be:a8:19:22:11:46:76:1d:ab:
                    e1:9a:50:56:1a:4e:ee:6a:a5:1b:9b:8b:b1:49:63:
                    7a:fa:5d:b9:70:56:a6:0d:16:1d:7e:09:3e:1e:f1:
                    0d:8b:ed:0b:d7:90:9e:bd:a7:d6:c8:0f:29:ae:ab:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:CB:98:EB:26:1C:5C:A0:95:1A:0C:5D:A2:CB:60:2E:5B:9B:20
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CabLmOsmHFyglRoMXaLLYC5bmyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:28:e4:e5:71:4f:95:a6:09:b4:c4:36:7f:fe:ca:ce:ee:
         cb:b1:74:8c:ff:1f:13:22:37:9c:83:cc:ee:7f:3c:54:69:09:
         b4:8e:b8:61:69:aa:ba:3d:5e:c7:cb:3a:d9:3d:e3:f1:43:9a:
         10:3b:0e:8b:67:86:f1:e1:17:0c:20:ef:73:11:23:0c:ef:ad:
         73:ae:01:a7:53:bb:5f:b6:ef:bc:4b:7e:d0:5c:79:c9:59:48:
         2a:99:cd:ec:04:53:19:95:86:e9:e0:1c:00:64:16:69:b7:ba:
         c9:cf:67:f7:0a:b6:fe:78:49:83:46:34:b4:7f:0f:b3:0f:ff:
         e6:e3:51:27:96:9d:92:7a:02:68:67:50:76:71:6a:4a:30:f9:
         55:5d:b1:f2:3d:46:1f:89:58:57:b8:40:96:88:6b:8e:9d:85:
         3d:39:1e:95:1f:ba:54:dd:ac:ef:17:ed:0d:e5:fc:c2:bc:3d:
         27:4b:0e:f1:a6:88:d0:21:6d:e4:37:e2:08:0f:5e:90:cf:e5:
         ef:97:81:93:e5:ea:8c:49:31:f2:f2:0d:a7:00:01:d2:e1:6c:
         df:34:ed:a3:c4:c1:ff:dd:2a:44:e7:2b:28:c2:1c:e7:e4:7f:
         05:ba:22:70:b0:5e:4b:52:bb:d9:9a:8a:53:7b:12:1c:d5:16:
         4d:e0:ef:66
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTM1NTFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDA5QTZDQjk4RUIyNjFD
NUNBMDk1MUEwQzVEQTJDQjYwMkU1QjlCMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6jODZRUOACfsFXCyS2XFAh+Tyj6hfUmrQDa/4ZpAau9LvOpi6
knpb2p00Ru+/nJIl4nxSMOsJMkLvQ/eQ2IHXGVkS+LaEJv1T5BV4noERVBeWULkc
eS07PbRStwRHAR0pfA1BLD2iC4wNoCmn+1rECqiFpFo9ppuwKbGWBptrLmR22Qnv
C7kCK1r03/o2bHdKJ9E2/b5ovmWK2Kvq14B12xx/1cfa4r/sAF37wj41UNL7Xx/M
P06JMN25SGJnLt/VoYXH4jthl76oGSIRRnYdq+GaUFYaTu5qpRubi7FJY3r6Xblw
VqYNFh1+CT4e8Q2L7QvXkJ69p9bIDymuq99JAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUCabLmOsmHFyglRoMXaLLYC5bmyAwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9DYWJMbU9zbUhGeWdsUm9NWGFMTFlDNWJteUEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQG0wmAMA0GCSqGSIb3DQEBCwUAA4IBAQCmOyjk5XFPlaYJtMQ2f/7K
zu7LsXSM/x8TIjecg8zufzxUaQm0jrhhaaq6PV7HyzrZPePxQ5oQOw6LZ4bx4RcM
IO9zESMM761zrgGnU7tftu+8S37QXHnJWUgqmc3sBFMZlYbp4BwAZBZpt7rJz2f3
Crb+eEmDRjS0fw+zD//m41Enlp2SegJoZ1B2cWpKMPlVXbHyPUYfiVhXuECWiGuO
nYU9OR6VH7pU3azvF+0N5fzCvD0nSw7xpojQIW3kN+IID16Qz+Xvl4GT5eqMSTHy
8g2nAAHS4WzfNO2jxMH/3SpE5ysowhzn5H8FuiJwsF5LUrvZmopTexIc1RZN4O9m
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org