Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MFDhbTvlxfRtzJgAmZSk-QwbfE8.roa
File:                     MFDhbTvlxfRtzJgAmZSk-QwbfE8.roa (raw, json)
Hash identifier:          qnLWjVB8iBdQ0HPfxA42X6ii4hO4TJ4lh6oRGZilSJQ=
Subject key identifier:   30:50:E1:6D:3B:E5:C5:F4:6D:CC:98:00:99:94:A4:F9:0C:1B:7C:4F
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D9
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MFDhbTvlxfRtzJgAmZSk-QwbfE8.roa
Signing time:             Fri 01 Sep 2023 01:30:55 +0000
ROA not before:           Fri 01 Sep 2023 01:30:55 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:55 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=3050E16D3BE5C5F46DCC98009994A4F90C1B7C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:d2:3b:1e:bd:48:63:18:c8:5b:80:18:12:
                    a0:d5:6b:95:5d:f5:a0:d7:e2:b7:3f:c8:47:a8:e6:
                    45:7b:64:3a:f6:8c:7d:42:bf:f7:e2:c9:8f:2a:1d:
                    26:8c:90:b8:54:d4:6e:f8:f9:16:a7:c9:1c:15:93:
                    19:7d:25:1e:2c:2a:23:16:a5:4c:a3:86:d9:24:3d:
                    4f:f4:63:41:0e:fb:2d:8f:fc:91:b4:aa:51:1b:b9:
                    c3:2f:71:52:1a:aa:04:4d:89:e1:ba:58:ee:70:5d:
                    7e:68:bd:64:b1:93:78:4a:f8:c9:4a:99:64:5c:8d:
                    db:09:1b:80:fd:be:8a:9d:5e:0e:ed:be:12:7a:a0:
                    73:0a:c7:4c:66:da:ff:90:34:3b:da:d3:f3:cd:3a:
                    ca:01:39:cc:b9:e9:e5:0e:15:20:97:58:f8:00:11:
                    67:ca:9b:94:90:ad:18:d7:5d:e3:23:af:27:15:a0:
                    4d:b9:17:bc:ec:b0:db:15:34:79:81:61:9b:a9:7f:
                    d6:2a:5a:cb:82:74:5a:c1:30:d9:01:dc:60:f7:86:
                    b5:18:96:5d:05:5e:d0:9d:de:00:0b:1d:79:74:12:
                    ad:14:dc:59:bd:60:7e:39:74:5e:1d:05:57:77:e0:
                    f6:b6:4f:fb:8e:3a:d9:03:71:f8:f8:7f:a2:e9:87:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:50:E1:6D:3B:E5:C5:F4:6D:CC:98:00:99:94:A4:F9:0C:1B:7C:4F
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MFDhbTvlxfRtzJgAmZSk-QwbfE8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:38:d9:91:4b:e0:34:71:6a:a9:26:b4:88:90:16:3b:ba:
         92:74:95:a0:9e:b5:22:42:ff:c8:4d:a3:42:f1:84:6e:dd:e8:
         38:0b:dd:96:f9:dd:0a:dc:6a:67:bb:ec:77:8d:52:7b:9e:da:
         39:9d:8f:5b:c5:c6:16:36:00:67:b2:21:67:22:3e:e6:ed:0f:
         b0:2e:b5:3d:88:83:a9:68:dd:f8:9d:c2:61:b7:53:70:86:a2:
         ef:e4:8e:4a:85:ab:ec:ab:93:10:5d:20:b7:3a:bb:95:c7:61:
         6b:11:3e:f9:9a:75:60:e3:cc:43:8a:80:f1:f0:e8:a7:48:c5:
         4d:3d:b5:5f:ac:8c:48:32:58:16:1c:a2:dc:b6:5e:2c:aa:9f:
         3a:5e:8c:d2:a3:58:0c:60:64:aa:d5:77:4b:66:78:9a:54:87:
         be:45:8f:02:58:ec:e7:9d:75:cf:da:20:0f:e1:17:2c:f3:7d:
         47:cf:ef:c0:14:da:e3:a7:ff:5d:5a:6d:6e:aa:cd:36:07:06:
         e3:c3:16:b0:5f:1d:98:3f:8b:32:7e:a5:10:40:da:3c:70:58:
         fc:88:37:06:02:49:ca:7f:47:08:1a:4e:28:61:50:e9:f2:52:
         97:d4:2c:74:10:e4:05:99:8c:c0:a5:18:1f:4c:6f:7b:f8:2e:
         60:7e:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org