Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MXi6xRSVwmbfTvP_a1Y_ug07F4U.roa
File:                     MXi6xRSVwmbfTvP_a1Y_ug07F4U.roa (raw, json)
Hash identifier:          C+UxY4RR9eVi7453QXhhfLh32yyMaMJFRBdc/JUEqAo=
Subject key identifier:   31:78:BA:C5:14:95:C2:66:DF:4E:F3:FF:6B:56:3F:BA:0D:3B:17:85
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       014B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MXi6xRSVwmbfTvP_a1Y_ug07F4U.roa
Signing time:             Sun 01 Oct 2023 01:33:23 +0000
ROA not before:           Sun 01 Oct 2023 01:33:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.254.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3178BAC51495C266DF4EF3FF6B563FBA0D3B1785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:a6:3f:5c:b7:19:03:d6:91:b2:e7:2c:14:
                    b7:b4:5e:2a:99:9d:50:98:37:75:71:e8:79:1e:35:
                    ab:0f:7c:b3:74:45:56:47:68:b6:77:f0:88:4a:fe:
                    79:70:4c:9c:ec:13:cd:30:3d:a0:23:30:cd:48:e2:
                    85:63:16:15:ed:19:87:1c:d7:98:c9:8e:3a:47:43:
                    a3:d5:62:06:e3:81:a0:cf:cd:c9:f1:9a:a5:8f:63:
                    89:32:bd:f3:50:e3:2a:83:2f:05:17:06:6c:6a:a1:
                    7a:f1:d0:01:00:bb:4d:d0:18:c3:76:40:c4:59:df:
                    19:9b:b5:cb:56:60:6c:f6:c3:0d:b7:55:44:35:2f:
                    78:26:61:26:c2:f6:a2:46:73:0c:97:75:21:9e:0d:
                    2f:8e:ee:fa:2f:82:b8:09:33:19:11:29:72:b1:a9:
                    49:b2:d8:ae:51:15:53:a7:57:3a:d8:b5:cb:76:be:
                    03:ca:24:dd:04:2c:ab:19:ca:4d:f3:12:29:72:2b:
                    13:65:9e:39:6d:9f:ab:34:61:9a:6a:b1:82:89:ce:
                    f8:9e:37:33:df:ae:b3:6d:71:72:52:3c:2e:71:ce:
                    18:d0:21:14:92:33:20:49:0c:03:2f:a1:fe:00:82:
                    6e:ac:0a:d1:5f:37:93:5a:78:21:32:19:58:4f:78:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:BA:C5:14:95:C2:66:DF:4E:F3:FF:6B:56:3F:BA:0D:3B:17:85
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MXi6xRSVwmbfTvP_a1Y_ug07F4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:50:8b:02:79:fd:7f:90:7a:6c:09:55:8c:11:8e:c8:f6:
         5f:8a:4a:97:82:b9:42:c2:f6:55:73:2a:5d:a0:d5:74:11:4d:
         de:da:47:b6:20:27:d0:ed:91:c4:d9:eb:3c:98:23:f5:58:9d:
         9f:62:b2:1a:62:a0:cb:eb:bc:a8:db:8e:27:c5:ab:27:6e:c8:
         23:84:d4:7b:40:cb:fe:eb:c0:4f:77:7e:e5:89:04:59:3d:b5:
         83:08:4e:f6:0c:2a:a1:3a:d5:a3:0e:fb:e8:78:a7:94:cc:db:
         36:0b:33:6b:f5:cb:55:ea:de:20:e8:bd:aa:c2:68:e0:ea:16:
         7a:32:98:d2:7c:a7:df:47:a8:8a:6c:ec:0c:fd:f4:95:d6:32:
         b0:cb:16:62:cd:f3:c7:02:a8:33:5a:fe:01:af:15:40:53:81:
         78:64:87:2f:c2:e6:7e:23:cf:de:85:a1:1d:a9:8e:45:2e:86:
         66:95:15:60:cd:4d:cc:f6:d4:d6:92:f1:3a:7c:34:de:02:c0:
         cd:ef:5d:ab:e9:d0:5d:08:fb:ce:c5:4e:d6:a2:83:cb:80:6e:
         54:44:f7:7d:8e:a8:7c:ef:b6:79:65:39:ef:da:4e:de:e6:4f:
         a4:36:c6:22:71:45:cf:7e:68:76:32:34:50:ad:15:e8:1a:be:
         93:cb:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org