Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HgAyy7Gh7BCfP9KrjeFjursm4mQ.roa
File:                     HgAyy7Gh7BCfP9KrjeFjursm4mQ.roa (raw, json)
Hash identifier:          OlqhY40VSCa0q/YW0PWnKkouT8kWrIi9FMeauEgRPMw=
Subject key identifier:   1E:00:32:CB:B1:A1:EC:10:9F:3F:D2:AB:8D:E1:63:BA:BB:26:E2:64
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0128
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HgAyy7Gh7BCfP9KrjeFjursm4mQ.roa
Signing time:             Sun 01 Oct 2023 01:30:43 +0000
ROA not before:           Sun 01 Oct 2023 01:30:43 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:43 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1E0032CBB1A1EC109F3FD2AB8DE163BABB26E264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:fa:5b:a1:b7:87:c7:24:96:26:e1:5f:64:
                    41:d9:84:cb:6f:5b:73:6d:58:22:f6:0a:34:78:4f:
                    03:2f:69:47:f2:0f:fa:03:f8:88:39:6b:cc:9f:89:
                    a8:77:94:b6:58:9c:06:2a:88:10:97:67:56:b0:97:
                    f9:1e:e2:54:85:04:cc:b7:fc:b2:a9:be:a7:3c:67:
                    1f:b3:b0:61:22:bf:1d:4f:cf:9d:eb:1b:d4:c9:78:
                    70:68:2e:c1:82:8b:87:16:52:e1:b7:54:8e:fa:94:
                    98:a4:92:27:69:a1:df:67:8e:0e:69:6a:ab:72:c0:
                    b3:f5:d7:93:4f:3b:01:8e:d8:35:2a:30:de:8f:d2:
                    d5:bf:0a:01:bc:85:e3:f8:c9:44:18:45:e6:b3:51:
                    e0:1a:5f:19:42:d2:b7:57:01:59:49:6f:71:df:b9:
                    da:73:c6:a6:f0:fe:d0:23:f0:6c:55:44:ab:e1:f0:
                    8e:58:e6:1a:bf:ef:ce:9c:0c:d9:49:a4:68:19:07:
                    ca:cd:ee:ea:20:ff:0f:e7:aa:30:09:e8:0c:c4:90:
                    81:d8:4b:28:38:0a:a0:33:40:52:9a:a2:f8:43:5e:
                    ac:4d:e4:0d:00:93:25:89:b4:69:1e:8f:03:94:b6:
                    c1:bf:f8:38:5e:f4:79:fc:ad:8f:c6:ab:dd:ec:ae:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:32:CB:B1:A1:EC:10:9F:3F:D2:AB:8D:E1:63:BA:BB:26:E2:64
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HgAyy7Gh7BCfP9KrjeFjursm4mQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:27:b8:a9:d3:56:dc:87:f1:37:30:44:7c:a4:f7:ed:f8:
         16:f6:4f:d8:92:1d:77:f2:3b:6b:58:cc:5b:63:4e:fe:85:50:
         08:a2:00:1e:97:9c:d3:df:56:ab:a9:c4:2a:e5:3b:17:20:65:
         a2:9e:29:9f:35:ae:5f:04:d9:62:c5:21:43:0e:87:1b:e9:53:
         51:8f:94:57:f6:26:44:0f:93:8d:f4:54:ce:70:d2:e7:ab:66:
         dc:39:ac:ec:c8:6f:29:b5:4c:5d:f0:7b:0c:d4:88:1f:7c:ca:
         3a:86:65:59:2e:e3:ab:89:45:7c:57:10:4b:93:6b:36:f6:37:
         a1:e0:98:d9:a6:e4:9a:3e:5c:93:b7:89:26:a0:56:76:ec:27:
         9f:4c:8b:77:13:38:63:56:5d:c3:3e:90:fc:df:59:e0:0c:ad:
         5a:ea:fb:8d:e7:a1:55:c5:c7:6f:3d:9d:14:20:5c:a8:4b:30:
         ac:aa:bc:3c:b2:c0:c2:7e:71:fb:89:17:a7:09:31:78:c5:71:
         bf:1f:45:ec:2c:d2:d8:6f:16:d5:f2:03:4d:60:16:37:35:2e:
         b3:f1:9c:49:6d:16:05:8a:06:b9:a7:38:f4:e2:15:3a:db:6b:
         1a:6d:1d:b5:7e:49:b7:1a:fb:7d:c7:34:25:a3:a6:ac:55:fa:
         57:08:cd:f5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNDNaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDFFMDAzMkNCQjFBMUVD
MTA5RjNGRDJBQjhERTE2M0JBQkIyNkUyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVevpbobeHxySWJuFfZEHZhMtvW3NtWCL2CjR4TwMvaUfyD/oD
+Ig5a8yfiah3lLZYnAYqiBCXZ1awl/ke4lSFBMy3/LKpvqc8Zx+zsGEivx1Pz53r
G9TJeHBoLsGCi4cWUuG3VI76lJikkidpod9njg5paqtywLP115NPOwGO2DUqMN6P
0tW/CgG8heP4yUQYReazUeAaXxlC0rdXAVlJb3Hfudpzxqbw/tAj8GxVRKvh8I5Y
5hq/786cDNlJpGgZB8rN7uog/w/nqjAJ6AzEkIHYSyg4CqAzQFKaovhDXqxN5A0A
kyWJtGkejwOUtsG/+Dhe9Hn8rY/Gq93srvV7AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUHgAyy7Gh7BCfP9KrjeFjursm4mQwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9IZ0F5eTdHaDdCQ2ZQOUtyamVGanVyc200bVEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0weuMA0GCSqGSIb3DQEBCwUAA4IBAQAgrSe4qdNW3IfxNzBEfKT3
7fgW9k/Ykh138jtrWMxbY07+hVAIogAel5zT31arqcQq5TsXIGWinimfNa5fBNli
xSFDDocb6VNRj5RX9iZED5ON9FTOcNLnq2bcOazsyG8ptUxd8HsM1IgffMo6hmVZ
LuOriUV8VxBLk2s29jeh4JjZpuSaPlyTt4kmoFZ27CefTIt3EzhjVl3DPpD831ng
DK1a6vuN56FVxcdvPZ0UIFyoSzCsqrw8ssDCfnH7iRenCTF4xXG/H0XsLNLYbxbV
8gNNYBY3NS6z8ZxJbRYFiga5pzj04hU622sabR21fkm3Gvt9xzQlo6asVfpXCM31
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org