Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LjqaZYgDN2mqs_iHFJBAg3VjVr4.roa
File:                     LjqaZYgDN2mqs_iHFJBAg3VjVr4.roa (raw, json)
Hash identifier:          jSmgkM19gJ9sy5wKF5D8moY3zbjTgHGbwfPcqChoGdU=
Subject key identifier:   2E:3A:9A:65:88:03:37:69:AA:B3:F8:87:14:90:40:83:75:63:56:BE
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E7
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LjqaZYgDN2mqs_iHFJBAg3VjVr4.roa
Signing time:             Fri 01 Sep 2023 01:33:06 +0000
ROA not before:           Fri 01 Sep 2023 01:33:06 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:06 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=2E3A9A6588033769AAB3F88714904083756356BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:62:b0:34:fb:95:3f:bf:84:4e:3d:fa:89:
                    87:0f:4d:e0:05:ac:84:ae:e5:e2:57:83:f7:50:e8:
                    44:bb:04:30:78:31:c5:6b:fe:47:71:b8:a6:fb:22:
                    9e:f9:55:b0:bf:71:1f:64:c4:00:0e:08:f0:5e:78:
                    cc:8d:07:ae:20:90:df:47:ad:d2:9b:50:b5:89:54:
                    ad:39:1e:44:6f:30:40:15:63:0d:83:c1:df:de:6e:
                    54:82:ae:55:77:b5:1a:f3:6e:8e:dd:26:22:a0:e4:
                    ef:37:b1:55:13:5a:31:98:ed:25:fc:46:7a:9b:f1:
                    8a:7e:fb:36:f0:1d:5d:0b:a7:25:4f:05:8e:53:10:
                    88:24:b4:fa:4a:91:dd:0c:9a:1c:97:40:ee:91:16:
                    88:07:e8:41:e8:1f:c2:18:7f:f1:71:46:50:c5:fa:
                    ed:1f:54:a3:03:72:7b:48:06:5f:0f:04:c3:9e:da:
                    5c:5c:9c:f7:93:3f:7c:d4:ad:d9:8f:86:a2:f9:c9:
                    45:53:69:70:ed:cc:75:69:f0:2b:5b:82:51:39:33:
                    9d:db:0b:6b:c9:f5:5f:8f:17:61:d5:2f:0a:11:ab:
                    6c:28:58:78:c3:eb:80:3a:a4:98:18:06:a7:7a:f5:
                    3a:37:a6:2e:2a:99:05:16:74:01:a8:75:99:13:ec:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3A:9A:65:88:03:37:69:AA:B3:F8:87:14:90:40:83:75:63:56:BE
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LjqaZYgDN2mqs_iHFJBAg3VjVr4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:67:18:1f:e9:14:50:a2:b3:d8:8f:24:20:99:02:a2:04:75:
         99:97:53:c0:ea:af:3d:44:3e:02:76:6f:c3:a6:b5:07:43:ee:
         5c:f0:00:f6:7e:81:4e:11:0f:81:f6:0f:a9:dc:63:92:ba:b8:
         bc:f4:e2:0e:26:4f:ac:bd:0f:eb:d6:b4:d1:55:85:9d:05:b6:
         bc:14:6a:a1:d0:c0:b9:c8:16:6c:97:e1:13:80:06:d5:7e:a3:
         5a:69:5b:3c:1b:8c:af:a6:10:54:b8:1b:7a:3d:1d:0b:36:bd:
         e6:62:66:44:96:85:28:00:11:ae:17:ce:6e:bc:81:4a:78:df:
         da:06:06:e3:1b:c4:5f:1f:4a:d7:47:74:87:74:54:af:20:25:
         6d:77:a7:44:85:43:ff:23:bd:cd:26:83:fb:b5:6c:08:98:9d:
         7d:f7:f9:0c:1d:43:3c:cc:13:8b:51:64:8b:02:51:be:4c:04:
         44:64:84:6e:bf:a0:0f:7f:d5:b9:c8:b0:5c:52:30:16:9b:98:
         5f:46:42:fc:3b:8c:6e:37:c7:fe:f5:ec:34:f5:63:ab:46:be:
         0f:ba:bc:69:91:02:f1:33:fb:00:ca:61:64:a5:68:8d:f4:cc:
         24:32:f9:64:aa:00:99:92:4c:07:31:9e:d3:b1:05:1c:85:52:
         6a:48:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org