Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GeUtzTuObylZI8KqtrBpOywIdd8.roa
File:                     GeUtzTuObylZI8KqtrBpOywIdd8.roa (raw, json)
Hash identifier:          j5iwYf/z/euiSW9ZYPfgrzAfES/bVxIzuL5njd1Iok8=
Subject key identifier:   19:E5:2D:CD:3B:8E:6F:29:59:23:C2:AA:B6:B0:69:3B:2C:08:75:DF
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       013B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GeUtzTuObylZI8KqtrBpOywIdd8.roa
Signing time:             Sun 01 Oct 2023 01:33:14 +0000
ROA not before:           Sun 01 Oct 2023 01:33:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=19E52DCD3B8E6F295923C2AAB6B0693B2C0875DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:61:7a:d1:63:0e:1b:f7:9e:a1:fd:22:59:
                    24:0f:4d:a6:d8:97:eb:91:d5:98:9a:df:08:14:46:
                    1b:0e:77:6d:ee:45:71:e3:19:93:82:c3:d3:1d:8a:
                    fc:c2:13:b4:17:7c:85:5a:c7:72:b5:f8:8c:0e:b6:
                    9a:ad:9d:3b:e1:b2:ef:54:7e:01:d5:14:78:8d:e9:
                    17:c9:6d:ac:96:5c:3f:26:f3:ee:72:20:2e:6b:0f:
                    8d:f2:8f:90:ab:69:cb:aa:6a:a6:45:a9:81:60:cc:
                    e4:b5:4c:75:e4:2a:0d:94:4c:00:ce:0c:e9:af:9c:
                    a4:6c:e7:a6:d8:05:2e:77:44:8f:0f:48:df:de:1d:
                    04:32:39:1b:22:4c:13:81:a0:11:c6:c1:fe:95:39:
                    49:9f:4f:b0:bf:28:01:83:bd:fb:54:2a:64:8e:2a:
                    29:8e:77:71:2c:0e:95:ee:36:64:9b:52:45:25:5c:
                    8a:34:b2:85:a0:00:6f:4b:6b:38:ac:37:33:01:be:
                    ce:e1:ff:60:3b:c9:2a:a2:36:83:54:c5:e8:16:43:
                    6b:35:e9:b5:da:17:5f:a4:34:e3:95:c1:8b:9d:bc:
                    49:43:79:7b:59:54:4f:ac:7a:fb:e8:81:6f:d3:a9:
                    9a:29:66:d0:75:30:d1:b2:06:aa:98:0f:29:e7:92:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:2D:CD:3B:8E:6F:29:59:23:C2:AA:B6:B0:69:3B:2C:08:75:DF
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GeUtzTuObylZI8KqtrBpOywIdd8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:e5:f5:db:45:ee:37:9a:b4:6a:ca:e8:9b:26:83:eb:e4:bf:
         30:d4:fa:7b:f0:6d:65:3f:a7:e6:55:80:9e:73:26:78:3a:ad:
         9f:ea:7e:ba:0b:02:a0:d1:74:4b:54:d0:84:d2:69:a7:53:f5:
         24:f1:7a:a3:3f:f4:7a:de:21:6b:83:49:08:2d:42:28:c9:a9:
         cb:b0:64:ff:d6:51:81:25:8b:c9:1e:f6:fe:ee:5e:ef:1d:53:
         01:e7:ce:93:ef:79:dc:51:b8:d7:47:e0:51:94:49:a7:54:0e:
         8d:95:eb:be:f3:4f:e5:96:49:a6:04:06:b9:c5:28:fa:5b:5d:
         33:1b:5d:4c:6a:f1:86:4e:1c:8f:74:e8:28:95:fb:da:2d:09:
         e2:c4:1f:6e:55:df:b9:28:e1:18:58:21:ac:11:7a:d0:4b:23:
         e8:15:18:1d:5a:e1:1c:01:6e:af:93:61:52:53:8d:a2:91:fe:
         6d:0e:b6:d5:3f:38:6e:57:c8:cc:8a:de:7b:3b:1c:64:0d:43:
         f0:a9:d4:9c:0b:3c:98:4e:86:a3:94:89:a2:51:7b:ea:df:b2:
         7d:53:d2:91:da:f6:07:fc:f8:37:ca:51:84:77:aa:78:dd:aa:
         90:b5:20:01:c4:46:ea:62:50:dc:e7:a5:9e:9d:7d:c4:6c:56:
         70:87:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org