Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NdYUL9j1AlPEet0cHGBSyCrA7jQ.roa
File:                     NdYUL9j1AlPEet0cHGBSyCrA7jQ.roa (raw, json)
Hash identifier:          FGSO2OyTocbmomvJbzV9MZSBvfH86dp/H6ZTEVexcdk=
Subject key identifier:   35:D6:14:2F:D8:F5:02:53:C4:7A:DD:1C:1C:60:52:C8:2A:C0:EE:34
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       C4
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NdYUL9j1AlPEet0cHGBSyCrA7jQ.roa
Signing time:             Fri 01 Sep 2023 01:30:46 +0000
ROA not before:           Fri 01 Sep 2023 01:30:46 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        61.117.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:46 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=35D6142FD8F50253C47ADD1C1C6052C82AC0EE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:b4:79:cb:be:cd:28:4c:6a:d3:d7:25:94:
                    ef:f6:7b:b2:24:28:06:fc:a7:99:d6:ab:c6:a0:67:
                    02:9a:23:a9:5a:cc:f7:fb:4d:94:6f:1a:25:52:19:
                    87:e9:ef:73:31:04:96:cb:90:d2:0b:c9:97:ec:ca:
                    fd:ed:9f:24:db:9c:45:8a:38:0e:66:e8:48:49:05:
                    2e:58:b6:8d:c7:a5:5d:75:c0:6e:e3:44:7d:62:ab:
                    d8:6c:eb:6e:6b:fd:fa:69:31:bc:71:2d:57:5a:c6:
                    df:98:40:b3:4c:94:e4:be:46:67:e8:02:b9:ec:39:
                    84:1d:c7:8c:5a:00:34:02:c4:25:7e:9b:46:95:ed:
                    ef:fe:e3:75:30:d3:46:c6:ce:69:17:4f:22:9a:c8:
                    1d:a1:97:ca:da:1a:c9:46:a7:d2:5a:d0:e6:e0:c8:
                    f1:a6:58:16:80:6a:a8:b0:5f:57:e3:eb:bb:4d:5f:
                    7f:b2:1a:9d:55:41:91:2c:7f:1a:f0:26:40:46:2c:
                    ad:42:22:df:07:9e:4d:54:c5:f7:f7:b4:b8:98:16:
                    56:55:d2:a7:82:d3:c0:46:4b:01:bd:f8:50:52:95:
                    44:72:8b:12:d7:d7:89:94:da:0b:85:07:43:a4:57:
                    72:bd:c8:bf:c4:22:0e:a5:8a:db:ea:f5:22:a8:aa:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D6:14:2F:D8:F5:02:53:C4:7A:DD:1C:1C:60:52:C8:2A:C0:EE:34
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NdYUL9j1AlPEet0cHGBSyCrA7jQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.117.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         93:76:c7:8c:b0:e5:a7:4a:3c:70:ca:4c:b2:8c:9b:9b:ff:d4:
         1e:a5:90:bc:f3:da:71:03:bb:bc:57:fc:ea:c5:4c:04:63:c8:
         33:95:c3:f3:a9:7b:93:48:48:6f:ac:bf:e0:f9:17:26:17:de:
         d0:c8:13:22:b9:e3:96:2a:d8:29:ad:73:7e:8f:4b:8f:df:2a:
         68:4a:4e:67:6b:df:71:f6:0c:73:e2:47:fb:d3:10:1e:76:91:
         e1:c2:c4:8d:63:05:dc:4f:30:cc:38:d8:04:13:ac:6f:3a:c7:
         c9:35:f6:ef:7e:e1:3f:38:a1:c4:19:4d:26:d2:66:18:88:82:
         df:da:50:28:e5:5f:9d:7e:1e:9d:69:84:c1:d4:7c:bb:66:96:
         68:b2:ac:82:24:71:ff:27:3a:c5:d7:32:d3:5e:7a:6b:fa:4f:
         75:5d:5c:30:e5:66:c1:57:91:3e:f3:8c:2c:65:09:60:e9:82:
         4f:24:75:40:d8:c1:bb:69:6a:3b:f9:e1:0a:bd:38:75:7b:54:
         da:28:91:2d:95:cd:d6:92:41:be:db:da:a3:40:39:79:c0:d0:
         7e:e2:bd:11:5f:d2:13:a9:2a:36:f3:9a:d8:3d:fa:37:08:f4:
         98:47:64:23:a7:95:c1:25:45:05:77:c8:6d:c6:e1:11:94:56:
         e2:cb:fa:8b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNDZaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM1RDYxNDJGRDhGNTAy
NTNDNDdBREQxQzFDNjA1MkM4MkFDMEVFMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9yLR5y77NKExq09cllO/2e7IkKAb8p5nWq8agZwKaI6lazPf7
TZRvGiVSGYfp73MxBJbLkNILyZfsyv3tnyTbnEWKOA5m6EhJBS5Yto3HpV11wG7j
RH1iq9hs625r/fppMbxxLVdaxt+YQLNMlOS+RmfoArnsOYQdx4xaADQCxCV+m0aV
7e/+43Uw00bGzmkXTyKayB2hl8raGslGp9Ja0ObgyPGmWBaAaqiwX1fj67tNX3+y
Gp1VQZEsfxrwJkBGLK1CIt8Hnk1Uxff3tLiYFlZV0qeC08BGSwG9+FBSlURyixLX
14mU2guFB0OkV3K9yL/EIg6litvq9SKoqu+rAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUNdYUL9j1AlPEet0cHGBSyCrA7jQwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9OZFlVTDlqMUFsUEVldDBjSEdCU3lDckE3alEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQHPXWAMA0GCSqGSIb3DQEBCwUAA4IBAQCTdseMsOWnSjxwykyyjJub
/9QepZC889pxA7u8V/zqxUwEY8gzlcPzqXuTSEhvrL/g+RcmF97QyBMiueOWKtgp
rXN+j0uP3ypoSk5na99x9gxz4kf70xAedpHhwsSNYwXcTzDMONgEE6xvOsfJNfbv
fuE/OKHEGU0m0mYYiILf2lAo5V+dfh6daYTB1Hy7ZpZosqyCJHH/JzrF1zLTXnpr
+k91XVww5WbBV5E+84wsZQlg6YJPJHVA2MG7aWo7+eEKvTh1e1TaKJEtlc3WkkG+
29qjQDl5wNB+4r0RX9ITqSo285rYPfo3CPSYR2Qjp5XBJUUFd8htxuERlFbiy/qL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org