Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/G3gZ5t98Yrk7ZanslRO-v7U2_oI.roa
File:                     G3gZ5t98Yrk7ZanslRO-v7U2_oI.roa (raw, json)
Hash identifier:          53gYbaMcqXIN5+QD3DWPRP52BY005zZuA215oMRm9+4=
Subject key identifier:   1B:78:19:E6:DF:7C:62:B9:3B:65:A9:EC:95:13:BE:BF:B5:36:FE:82
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       DF
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/G3gZ5t98Yrk7ZanslRO-v7U2_oI.roa
Signing time:             Fri 01 Sep 2023 01:30:58 +0000
ROA not before:           Fri 01 Sep 2023 01:30:58 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:58 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=1B7819E6DF7C62B93B65A9EC9513BEBFB536FE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:9d:ae:21:cc:6b:2f:2c:5f:12:d5:04:80:
                    c9:b3:1d:96:8f:e4:97:77:0f:22:13:31:4f:ce:06:
                    f4:ac:50:f4:35:b6:af:59:ce:6f:c2:b1:47:83:b1:
                    f7:b6:a2:a4:05:00:a3:de:86:03:ba:f2:b6:3f:5c:
                    90:65:ba:e9:01:23:c9:84:fb:0a:0a:d9:c8:f6:9f:
                    5e:86:83:c5:97:ae:93:45:a7:39:07:7e:f9:11:b9:
                    4b:87:ba:e8:76:a6:01:c3:3d:75:60:62:c2:fe:2c:
                    fe:d2:c9:6c:42:02:cc:43:ae:86:2b:64:d0:9c:b4:
                    1b:4e:e9:7c:71:51:47:43:55:5f:82:b3:fc:1a:54:
                    9d:b5:48:67:f8:2e:47:e8:31:b9:52:1f:f3:13:b9:
                    95:86:e2:4c:b8:77:4b:38:39:9f:5c:b0:d5:eb:94:
                    ef:2b:27:63:ba:d7:e0:66:4c:56:6f:04:bb:5a:d2:
                    ed:6e:d0:08:b8:27:a6:b7:19:62:a6:e8:05:ec:2d:
                    ac:b2:f5:ce:cb:ba:8f:1f:c1:3e:65:19:ec:06:24:
                    dd:20:88:79:db:a7:03:59:52:32:6c:77:32:38:2f:
                    03:3d:59:64:8d:33:8b:74:d0:02:3f:ad:b1:da:d7:
                    bd:d4:4a:44:ec:4c:b8:7e:a6:40:ff:42:11:51:f8:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:19:E6:DF:7C:62:B9:3B:65:A9:EC:95:13:BE:BF:B5:36:FE:82
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/G3gZ5t98Yrk7ZanslRO-v7U2_oI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:37:d7:d7:d4:07:fa:88:b2:c7:2f:a6:11:bc:12:2d:de:
         76:89:29:65:a4:51:fb:1e:c4:1a:c2:98:43:83:76:49:6d:6e:
         fd:ef:38:d4:4c:7f:76:b6:fd:b4:96:3a:58:be:60:88:2f:b0:
         21:7b:a4:e4:91:9f:93:8f:1a:77:1b:d2:df:75:91:4b:d1:65:
         f0:a1:91:58:cc:dd:94:97:db:02:1c:95:db:f9:11:41:50:16:
         e4:cd:ea:68:3b:8a:b9:68:b5:b4:1d:6d:e9:b7:62:ea:49:b8:
         c9:79:a1:90:d3:48:ca:77:ff:1c:01:ce:67:7a:00:24:f7:1f:
         07:3b:b6:4f:19:49:fa:2e:f6:6f:0f:9a:38:95:ea:05:a1:ad:
         21:b0:39:19:6a:23:be:89:07:21:95:e6:d5:9c:49:c0:c8:31:
         e6:19:4b:62:c9:9d:ba:df:6d:f4:ff:d8:7c:f2:90:84:7d:94:
         09:ba:ea:71:ff:dc:54:01:84:73:bf:68:22:09:38:4b:ea:6b:
         c6:b2:fa:ef:bd:36:f5:81:44:60:87:08:09:6b:cd:3f:44:ed:
         48:6d:81:45:20:b9:3b:3c:b7:fb:ac:05:26:cf:c2:2f:41:9b:
         62:aa:1b:49:22:76:b2:a0:57:a1:1c:2d:d4:cb:22:d8:e4:13:
         e5:d6:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org