Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/G6fh9-x9FEMijQNpy98D8KFnbz4.roa
File:                     G6fh9-x9FEMijQNpy98D8KFnbz4.roa (raw, json)
Hash identifier:          dVX4YUwQoccW15oBPsvUNEJBHz0YilEFhZDKG7oPBnU=
Subject key identifier:   1B:A7:E1:F7:EC:7D:14:43:22:8D:03:69:CB:DF:03:F0:A1:67:6F:3E
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0147
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/G6fh9-x9FEMijQNpy98D8KFnbz4.roa
Signing time:             Sun 01 Oct 2023 01:33:21 +0000
ROA not before:           Sun 01 Oct 2023 01:33:21 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.254.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:21 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1BA7E1F7EC7D1443228D0369CBDF03F0A1676F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:db:45:14:11:24:fe:b8:11:e1:53:1d:d4:
                    ca:83:d5:50:4b:8c:f5:c8:95:c6:ed:bd:af:23:b2:
                    3a:f0:44:d9:6e:95:d3:04:ff:a3:b1:d2:ec:16:08:
                    52:75:22:2c:f1:8a:bd:8c:92:d3:fe:29:a8:85:2d:
                    63:e1:f3:15:9b:ed:b9:07:9e:89:a6:90:15:67:bb:
                    e0:d3:09:67:02:31:31:ed:a4:ce:53:1b:7a:3e:1d:
                    ce:cd:52:7e:79:a5:19:9a:7a:4a:c8:86:04:e9:60:
                    2d:b0:6a:43:09:e5:5c:7b:23:d9:5b:70:e8:8d:22:
                    31:57:1c:bd:75:64:bb:17:1a:b9:2c:68:65:50:48:
                    c3:86:bc:70:2f:ae:bd:50:20:c0:e4:a9:6d:8a:de:
                    37:45:a3:8e:81:2a:af:de:7a:07:e3:a3:a7:ed:78:
                    00:3d:aa:6d:d7:b9:ba:da:d9:b9:92:50:48:06:d0:
                    ee:aa:83:90:23:b1:68:62:d8:90:02:50:5b:ac:dc:
                    2c:92:ae:b5:0a:8b:3c:90:c4:f6:a2:35:c7:aa:56:
                    a2:70:6a:3b:a2:23:f0:31:a8:f6:17:38:a2:67:71:
                    4c:f1:cc:36:7d:a3:39:5c:3c:a5:65:b6:f1:eb:d1:
                    24:a3:9b:e9:fd:20:d1:58:09:be:58:a7:f4:e4:eb:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:E1:F7:EC:7D:14:43:22:8D:03:69:CB:DF:03:F0:A1:67:6F:3E
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/G6fh9-x9FEMijQNpy98D8KFnbz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:0c:4d:f2:36:73:6f:c8:9f:b8:5c:3f:6a:d2:63:3e:80:
         14:3d:02:0b:fe:fc:74:6d:b1:bd:22:1d:0d:12:ac:06:b0:52:
         75:44:b0:6c:5c:be:f5:d4:2e:95:45:10:f2:53:12:67:f4:04:
         b2:56:ec:80:34:0a:c6:4a:08:6e:03:11:54:a8:4b:fd:42:8c:
         b1:1b:88:41:72:c6:b2:c2:e2:58:1b:6c:bf:2e:d0:dd:d9:06:
         16:b4:c6:b9:09:01:b0:82:04:d6:d8:5c:9d:0e:3f:9b:d8:bd:
         9a:29:4d:f9:3f:c0:ab:aa:51:32:0d:17:68:b3:4c:23:e9:32:
         76:95:aa:60:d9:43:da:a8:ce:cd:c8:96:de:71:99:94:75:63:
         58:61:e3:68:c5:1d:7c:4d:93:7a:bf:c9:c8:1d:14:10:82:bd:
         d8:b2:2c:5d:10:73:ba:ee:88:cd:51:8c:01:9f:cf:2e:ed:1f:
         19:46:7e:80:4d:ae:5b:9b:98:42:f4:28:66:7e:ea:3c:46:85:
         a7:b6:da:2b:0b:45:a8:85:ef:d9:7c:b5:c0:9c:81:fd:32:a3:
         85:dc:61:bf:1f:ba:26:5a:61:84:da:b4:f7:55:e3:be:ea:b6:
         4c:7e:b1:35:d4:22:1d:03:98:bc:e3:a8:a8:a4:5e:f2:16:51:
         23:37:a3:6e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMzMjFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDFCQTdFMUY3RUM3RDE0
NDMyMjhEMDM2OUNCREYwM0YwQTE2NzZGM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIPNtFFBEk/rgR4VMd1MqD1VBLjPXIlcbtva8jsjrwRNluldME
/6Ox0uwWCFJ1Iizxir2MktP+KaiFLWPh8xWb7bkHnommkBVnu+DTCWcCMTHtpM5T
G3o+Hc7NUn55pRmaekrIhgTpYC2wakMJ5Vx7I9lbcOiNIjFXHL11ZLsXGrksaGVQ
SMOGvHAvrr1QIMDkqW2K3jdFo46BKq/eegfjo6fteAA9qm3Xubra2bmSUEgG0O6q
g5AjsWhi2JACUFus3CySrrUKizyQxPaiNceqVqJwajuiI/AxqPYXOKJncUzxzDZ9
ozlcPKVltvHr0SSjm+n9INFYCb5Yp/Tk67nnAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUG6fh9+x9FEMijQNpy98D8KFnbz4wHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9HNmZoOS14OUZFTWlqUU5weTk4RDhLRm5iejQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0v5OMA0GCSqGSIb3DQEBCwUAA4IBAQBaaQxN8jZzb8ifuFw/atJj
PoAUPQIL/vx0bbG9Ih0NEqwGsFJ1RLBsXL711C6VRRDyUxJn9ASyVuyANArGSghu
AxFUqEv9QoyxG4hBcsaywuJYG2y/LtDd2QYWtMa5CQGwggTW2FydDj+b2L2aKU35
P8CrqlEyDRdos0wj6TJ2lapg2UPaqM7NyJbecZmUdWNYYeNoxR18TZN6v8nIHRQQ
gr3YsixdEHO67ojNUYwBn88u7R8ZRn6ATa5bm5hC9Chmfuo8RoWnttorC0Wohe/Z
fLXAnIH9MqOF3GG/H7omWmGE2rT3VeO+6rZMfrE11CIdA5i846iopF7yFlEjN6Nu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org