Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N6JZDriZxept8-HsfEcyQUQNCcU.roa
File:                     N6JZDriZxept8-HsfEcyQUQNCcU.roa (raw, json)
Hash identifier:          rMrcYGAOgjqM8BoOARDpI7mEI6Qrqb1HZem6Rb7PM8E=
Subject key identifier:   37:A2:59:0E:B8:99:C5:EA:6D:F3:E1:EC:7C:47:32:41:44:0D:09:C5
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E2
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N6JZDriZxept8-HsfEcyQUQNCcU.roa
Signing time:             Fri 01 Sep 2023 01:31:00 +0000
ROA not before:           Fri 01 Sep 2023 01:31:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:31:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=37A2590EB899C5EA6DF3E1EC7C473241440D09C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:db:6d:c6:b2:0c:4b:0d:90:c3:63:07:62:
                    c8:df:e0:06:84:66:5d:e5:e5:d3:9b:56:2b:19:75:
                    f5:8c:bb:d4:f2:a3:92:85:ef:95:f2:d9:a4:dc:7c:
                    43:da:a3:6e:06:3b:3f:ff:82:66:58:0b:dc:d3:99:
                    4a:34:62:1d:ec:5d:2e:14:26:ff:9a:1e:79:af:47:
                    4e:97:67:da:62:ee:f5:ff:d0:bd:bb:04:02:43:7f:
                    fb:44:87:69:ca:0a:cf:66:4c:be:ba:e1:1c:f0:d4:
                    f6:a7:bb:5b:45:be:b4:11:06:8b:54:80:17:50:79:
                    3c:d4:55:8c:12:16:36:c6:35:69:55:8d:b9:9e:22:
                    12:e1:2d:51:63:39:72:f7:f4:de:b1:5d:6f:a3:fd:
                    0d:06:3b:43:ac:f7:dd:22:6c:77:7d:5d:b6:68:6f:
                    b9:98:83:5d:cd:33:01:a1:83:ad:5a:87:90:28:24:
                    6e:21:41:8b:33:d1:5f:9f:ab:51:a3:40:9d:a2:7f:
                    03:8c:24:fb:bb:e3:67:1c:03:30:5a:1b:97:b2:24:
                    d9:47:bf:82:fc:2b:68:a5:3d:8b:52:68:9b:1d:b7:
                    77:a3:e1:d6:21:34:a0:08:ea:7a:d9:f0:ee:89:9b:
                    f2:66:b1:2d:d9:0c:aa:3e:13:1c:71:30:a1:13:9e:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:59:0E:B8:99:C5:EA:6D:F3:E1:EC:7C:47:32:41:44:0D:09:C5
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N6JZDriZxept8-HsfEcyQUQNCcU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:57:ff:f4:c1:b6:66:8d:5d:73:fe:39:65:4c:35:d6:40:
         b6:ea:57:73:b2:ac:dc:e4:10:01:e7:6d:29:b7:42:d7:d6:a1:
         c8:96:e2:67:75:4a:29:b8:e1:3f:a5:f3:0a:58:82:a0:f4:aa:
         fc:76:17:fb:75:19:a5:0b:30:2e:40:f4:67:68:18:5b:2b:f0:
         50:f8:bf:1d:fd:62:8e:8c:30:f2:9c:35:de:49:29:ea:7f:bf:
         97:28:1f:39:b7:1f:80:c8:19:4f:df:0b:a7:64:f2:ac:d6:5f:
         9d:7f:69:20:9b:02:00:16:f0:a5:30:da:82:db:41:01:0b:6e:
         52:81:8a:00:c8:ae:6b:a5:b4:af:9d:0a:87:e4:c8:ea:2b:72:
         1f:c6:47:d5:5d:98:b5:9d:6f:cc:aa:50:82:cf:2b:22:b8:13:
         cc:80:83:64:a2:28:ab:c1:f0:66:8b:95:59:58:c2:35:b4:66:
         8e:2a:c1:b4:8d:d3:3c:cb:d5:5d:66:a0:45:b6:87:c6:a8:c8:
         08:e8:ea:9b:14:d7:4d:aa:70:76:8c:68:f2:b1:fa:81:dd:44:
         f6:11:eb:2a:34:2a:52:7c:30:36:2b:ff:81:1b:be:1f:ad:bb:
         fd:6f:6d:85:98:b6:b6:51:f7:8b:2e:8e:e4:2a:86:ed:fa:81:
         62:84:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org