Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GivIbbLigU_4NwRrNNQ7gMiIexA.roa
File:                     GivIbbLigU_4NwRrNNQ7gMiIexA.roa (raw, json)
Hash identifier:          weWUHAZq27XMMFWuajsn6MH4hw6ZyiLJfIZE15fZY6U=
Subject key identifier:   1A:2B:C8:6D:B2:E2:81:4F:F8:37:04:6B:34:D4:3B:80:C8:88:7B:10
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0120
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GivIbbLigU_4NwRrNNQ7gMiIexA.roa
Signing time:             Sun 01 Oct 2023 01:30:39 +0000
ROA not before:           Sun 01 Oct 2023 01:30:39 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:39 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1A2BC86DB2E2814FF837046B34D43B80C8887B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:9f:5b:31:4f:04:d6:45:64:7a:0f:a4:c8:
                    1d:25:9a:10:ab:c3:99:77:2e:b4:f2:de:71:40:5b:
                    bc:a5:8c:ce:7a:4f:72:67:d0:c6:28:91:9c:16:38:
                    d9:2e:f0:89:37:29:67:30:8a:91:69:cd:0e:23:8d:
                    91:a5:62:52:56:99:83:86:b2:3b:63:c4:81:7b:fb:
                    d1:84:f3:15:8b:bc:9e:f9:93:6c:58:ab:4c:83:c5:
                    cf:60:19:1f:11:b0:1b:8f:fc:76:d4:7a:91:cd:5f:
                    38:19:0f:f3:49:97:1a:ef:d7:8e:91:86:b5:03:95:
                    fb:46:b6:20:3f:25:1f:2e:8e:53:a6:58:6a:fa:4b:
                    c2:e8:48:24:f1:d5:f2:ae:c6:ad:fc:c5:ab:85:9f:
                    cc:77:15:04:8b:37:4d:ee:3e:e9:a2:8f:84:90:e5:
                    4e:90:c8:2e:5a:a1:9c:6f:d8:22:36:10:a2:43:d0:
                    b0:b1:15:0e:82:95:d0:7b:65:a8:44:b0:d2:12:22:
                    15:3d:c4:70:ca:79:3e:b6:99:10:99:67:42:56:b8:
                    91:a6:94:6b:04:a6:b0:89:76:5b:7b:14:44:bb:f2:
                    54:32:96:86:1d:1d:62:d9:e3:bf:1a:75:23:70:a8:
                    3a:5b:d5:4f:f5:1d:68:fa:65:f7:e4:6b:f2:3d:e2:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2B:C8:6D:B2:E2:81:4F:F8:37:04:6B:34:D4:3B:80:C8:88:7B:10
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/GivIbbLigU_4NwRrNNQ7gMiIexA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ac:7c:2a:3e:97:56:51:68:a0:58:5e:67:8f:f9:2d:c6:69:
         32:64:a1:2d:3b:81:e5:5e:8f:7b:77:1d:e2:a4:1c:5d:3e:14:
         81:0b:7c:f7:b0:4d:82:fe:00:b0:49:bf:8d:c5:b1:e5:4b:3c:
         fc:ec:41:f9:00:c3:4b:19:4a:cc:3a:10:2d:83:95:e9:ef:ca:
         61:5b:41:28:58:c1:db:14:c3:7f:62:c0:ba:e1:38:af:5d:9f:
         23:7c:0b:c7:ab:92:46:cd:3f:d9:47:0e:e1:b2:14:25:98:24:
         6d:27:a3:5f:ff:a5:ba:96:4a:fb:3b:e5:1f:a4:b2:34:f1:b4:
         c1:2c:dc:9f:53:79:e4:ab:8c:39:c0:3c:e4:7e:a3:5d:95:3d:
         0a:15:f8:59:b0:8f:0b:42:fa:91:f4:72:7b:32:65:1f:46:36:
         19:72:f2:39:44:b4:77:7e:06:c3:d0:72:1e:4e:d0:b5:f7:55:
         9a:be:99:d1:ad:6d:3c:b2:d0:7a:2f:db:be:6e:ac:53:08:b3:
         53:eb:8b:90:61:69:c0:6c:d1:21:6f:2a:58:72:8e:d6:f5:6f:
         47:a3:5a:37:63:56:35:99:a1:38:d0:8e:c1:b5:62:f2:bd:77:
         e5:83:a9:cc:f1:16:27:14:63:e3:c9:93:47:85:02:3c:af:ec:
         cb:0e:2e:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwMzlaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDFBMkJDODZEQjJFMjgx
NEZGODM3MDQ2QjM0RDQzQjgwQzg4ODdCMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRuZ9bMU8E1kVkeg+kyB0lmhCrw5l3LrTy3nFAW7yljM56T3Jn
0MYokZwWONku8Ik3KWcwipFpzQ4jjZGlYlJWmYOGsjtjxIF7+9GE8xWLvJ75k2xY
q0yDxc9gGR8RsBuP/HbUepHNXzgZD/NJlxrv146RhrUDlftGtiA/JR8ujlOmWGr6
S8LoSCTx1fKuxq38xauFn8x3FQSLN03uPumij4SQ5U6QyC5aoZxv2CI2EKJD0LCx
FQ6CldB7ZahEsNISIhU9xHDKeT62mRCZZ0JWuJGmlGsEprCJdlt7FES78lQyloYd
HWLZ478adSNwqDpb1U/1HWj6Zffka/I94vGfAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUGivIbbLigU/4NwRrNNQ7gMiIexAwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9HaXZJYmJMaWdVXzROd1JyTk5RN2dNaUlleEEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0weLMA0GCSqGSIb3DQEBCwUAA4IBAQABrHwqPpdWUWigWF5nj/kt
xmkyZKEtO4HlXo97dx3ipBxdPhSBC3z3sE2C/gCwSb+NxbHlSzz87EH5AMNLGUrM
OhAtg5Xp78phW0EoWMHbFMN/YsC64TivXZ8jfAvHq5JGzT/ZRw7hshQlmCRtJ6Nf
/6W6lkr7O+UfpLI08bTBLNyfU3nkq4w5wDzkfqNdlT0KFfhZsI8LQvqR9HJ7MmUf
RjYZcvI5RLR3fgbD0HIeTtC191WavpnRrW08stB6L9u+bqxTCLNT64uQYWnAbNEh
bypYco7W9W9Ho1o3Y1Y1maE40I7BtWLyvXflg6nM8RYnFGPjyZNHhQI8r+zLDi5w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org