Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GWhv07XAWcbbuO_uWXdIHAVnyak.roa
File:                     GWhv07XAWcbbuO_uWXdIHAVnyak.roa (raw, json)
Hash identifier:          4bJSeR6CTuf5+ZRsDY05gk3PzfQcHao+FaSNG0pd2dI=
Subject key identifier:   19:68:6F:D3:B5:C0:59:C6:DB:B8:EF:EE:59:77:48:1C:05:67:C9:A9
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0127
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GWhv07XAWcbbuO_uWXdIHAVnyak.roa
Signing time:             Sun 01 Oct 2023 01:30:42 +0000
ROA not before:           Sun 01 Oct 2023 01:30:42 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:42 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=19686FD3B5C059C6DBB8EFEE5977481C0567C9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:11:2d:1c:f2:c9:d1:08:15:0c:a8:47:3e:
                    89:05:44:c5:03:b0:1c:0e:57:02:f1:13:9a:1f:48:
                    a5:3e:f2:7a:23:9d:26:46:ea:33:c6:ca:7a:ce:76:
                    51:14:1d:f9:a6:b7:5b:02:fd:76:d2:f9:5c:10:4e:
                    23:4c:a6:8d:c5:76:31:e8:1b:df:ae:6f:e1:5e:97:
                    5e:62:6f:70:37:2c:c3:20:ff:12:f3:7a:ac:e2:2b:
                    eb:34:eb:01:c7:38:5a:61:f7:ef:80:d1:f2:fd:d3:
                    57:d6:77:44:ae:a9:c8:39:1f:3b:d3:05:a5:e6:7c:
                    22:af:01:82:4a:c6:08:64:c2:69:8d:4d:85:70:0e:
                    ec:d0:6a:ec:a8:d1:5a:c9:fa:cf:8a:cc:8f:d4:13:
                    6f:7d:cb:ff:25:5b:29:fe:15:e3:ad:0f:3d:45:4f:
                    5a:fe:36:dd:3a:af:a4:10:56:7c:a4:63:2e:50:dc:
                    e2:76:37:44:18:ac:21:a0:23:01:ee:15:7c:9c:aa:
                    55:78:b5:74:e9:3c:16:27:3f:64:68:da:6b:c3:9a:
                    70:3f:a2:ae:f0:40:22:2a:0d:9a:fd:1b:1b:34:d3:
                    80:40:09:a1:85:1a:fe:b2:70:13:5b:96:06:b3:36:
                    6a:16:d8:13:1d:01:20:c5:fb:9f:ec:dc:71:eb:49:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:6F:D3:B5:C0:59:C6:DB:B8:EF:EE:59:77:48:1C:05:67:C9:A9
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GWhv07XAWcbbuO_uWXdIHAVnyak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:23:79:08:cc:2b:2d:f9:cd:53:ba:ab:e7:f9:99:58:07:
         3c:75:02:73:89:8b:35:0f:94:0d:71:fc:44:2e:6f:d7:ce:5b:
         49:28:82:86:23:60:a1:aa:61:cf:78:39:5b:a4:2a:6b:0b:93:
         a9:20:50:d6:6e:c8:69:46:65:81:54:ba:ae:c2:04:31:e4:d8:
         eb:4e:37:e5:6a:0d:74:c2:de:44:60:1a:93:9b:6b:fc:09:7c:
         fb:2d:c2:1c:c9:24:9e:93:76:e6:f3:f8:07:7b:36:8e:7e:2e:
         c9:7e:96:88:a1:9e:fc:fb:25:bc:7c:de:5e:49:f7:f5:62:a2:
         b9:25:81:2e:95:e7:37:30:03:f8:73:73:56:6d:c1:cc:6c:59:
         bf:42:cf:89:ce:ef:53:7c:7c:e8:69:cd:39:c7:01:04:5b:b0:
         7b:23:75:37:5a:0c:a5:ba:2b:24:8d:51:f7:4a:fd:b2:db:a5:
         91:a1:8a:82:0d:7b:e0:e6:41:66:6a:f9:d7:d1:f0:e4:60:cd:
         4c:6c:ec:69:3b:1c:44:7b:f4:94:98:8d:b3:a1:9b:82:16:81:
         f4:e2:da:a9:38:91:b4:c0:d5:a2:03:3d:6d:c4:09:94:2c:06:
         45:31:77:4a:f7:f7:9b:d0:84:7b:1f:b0:13:65:15:c3:af:03:
         8e:e6:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org