Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KlUVde8fF0BJK1NycRUN4U9ET8w.roa
File:                     KlUVde8fF0BJK1NycRUN4U9ET8w.roa (raw, json)
Hash identifier:          M+DlXkKXXt+6rn0Llkhe0ixwsI3o4ln9Ia0HKX0u2UI=
Subject key identifier:   2A:55:15:75:EF:1F:17:40:49:2B:53:72:71:15:0D:E1:4F:44:4F:CC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       F3
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KlUVde8fF0BJK1NycRUN4U9ET8w.roa
Signing time:             Fri 01 Sep 2023 01:33:11 +0000
ROA not before:           Fri 01 Sep 2023 01:33:11 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:11 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=2A551575EF1F1740492B537271150DE14F444FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:24:33:f2:97:67:83:24:ef:2c:32:88:95:
                    a0:4a:95:78:bd:c5:7e:80:f8:ea:7b:a5:b7:e4:4e:
                    c3:f2:e0:4a:cd:11:39:4f:39:8a:44:32:47:13:df:
                    f7:72:0d:36:3e:6b:14:62:ae:15:39:5a:9f:14:67:
                    e5:6f:61:3b:3b:79:0d:7d:0f:8b:a1:1a:c7:37:3f:
                    cf:7f:b5:d6:5e:c7:7a:35:2a:37:6d:79:b3:12:bf:
                    03:73:66:c7:b1:dd:da:89:75:64:df:19:48:56:cb:
                    6e:90:3c:78:91:ea:4c:ab:27:19:4f:88:f0:d4:51:
                    5a:41:33:58:68:0a:24:8d:f8:30:91:2a:b3:e6:3e:
                    d3:f3:cf:39:da:b8:c6:8a:2f:12:de:d1:7d:97:48:
                    25:ab:fc:e2:c2:84:e5:2a:a7:14:26:0d:e0:15:0c:
                    0f:77:c4:bb:24:76:d2:b0:04:7a:59:ac:4b:84:1f:
                    1e:07:0b:f2:de:71:81:e3:dc:96:90:dc:90:3c:d9:
                    c3:dc:b8:6e:c5:9d:98:58:04:0f:88:12:08:cd:c2:
                    8d:c6:ff:bb:61:33:a6:62:31:dc:02:f6:40:ff:ac:
                    c5:08:a8:ef:c8:41:d4:9b:3a:d0:fc:ca:a4:ef:43:
                    18:81:36:bd:f6:d4:b4:e0:48:db:22:ea:eb:2c:70:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:55:15:75:EF:1F:17:40:49:2B:53:72:71:15:0D:E1:4F:44:4F:CC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KlUVde8fF0BJK1NycRUN4U9ET8w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:bd:73:c6:1a:6a:61:2e:31:50:d9:2f:ee:50:26:d8:bc:
         56:40:c7:f0:bb:6d:7a:b3:46:4b:5a:04:5b:8e:87:f3:3f:78:
         e5:50:7d:44:f0:9d:d4:b8:e5:14:e6:cb:69:fc:34:8d:0e:8e:
         bb:b1:ec:bb:22:cc:2f:3f:9e:09:85:dd:a4:a4:e0:4a:91:19:
         30:c5:56:a1:74:be:c0:ac:97:7c:89:b7:44:d0:f8:a6:1b:a4:
         78:eb:5c:9e:3a:74:72:8c:39:db:2c:6f:0b:05:36:19:54:98:
         a6:75:74:04:08:95:3a:0a:5d:5b:de:67:58:31:6b:4f:20:0e:
         3f:24:b2:a3:8c:72:5c:85:1c:b4:71:00:de:7f:cb:f7:4a:1e:
         e7:1d:27:35:10:71:54:a2:d3:fd:b7:1f:b4:a7:9f:5f:24:59:
         d1:e4:28:3a:76:e3:1d:b0:0b:33:a2:50:fe:71:f0:5e:c3:b6:
         74:eb:f1:bf:34:f8:44:5d:74:60:5b:94:ad:e7:61:a0:d7:6b:
         75:87:9b:e7:2d:0a:68:b0:3e:fe:06:78:bb:fe:94:c7:7b:19:
         c7:0a:53:aa:28:08:f9:25:a5:3a:a8:80:a3:13:cc:af:3e:24:
         b7:2b:e0:e8:02:d2:3e:d5:5e:2d:fb:66:e1:c4:ac:9f:cc:18:
         98:0d:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org