Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/OBPr457uirpcZZHFYjWco_pL0cw.roa
File:                     OBPr457uirpcZZHFYjWco_pL0cw.roa (raw, json)
Hash identifier:          kz48nN2DQ9mF6CNYdb94Ilkrd56ieEcKvUQFGt7CUoc=
Subject key identifier:   38:13:EB:E3:9E:EE:8A:BA:5C:65:91:C5:62:35:9C:A3:FA:4B:D1:CC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       016E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/OBPr457uirpcZZHFYjWco_pL0cw.roa
Signing time:             Sun 01 Oct 2023 01:35:52 +0000
ROA not before:           Sun 01 Oct 2023 01:35:52 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:52 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3813EBE39EEE8ABA5C6591C562359CA3FA4BD1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:13:29:19:ac:2a:cc:59:0f:e3:06:d6:7c:
                    f6:d9:15:84:57:f8:38:fa:c0:01:11:95:d1:92:95:
                    5a:80:06:1e:85:c0:7f:fd:69:e3:b2:fd:87:1d:58:
                    b7:6e:c8:0c:c7:be:55:13:80:43:ab:01:17:0d:66:
                    43:b6:76:de:3c:37:36:01:85:98:db:9a:42:f2:5f:
                    0d:aa:2c:99:56:34:90:74:8a:1d:2b:76:40:b8:95:
                    0e:de:b9:b5:3b:27:63:17:e9:0e:e6:76:26:f6:a3:
                    cc:fa:06:e0:51:9a:15:f1:3e:8c:88:03:21:c5:b4:
                    2c:65:0a:67:b1:71:3c:b1:10:e0:49:4d:8e:7e:4d:
                    50:9a:5e:34:9c:ae:1c:d0:27:be:0d:d1:ee:df:3a:
                    8f:76:cf:58:8e:c0:c4:14:43:e9:d9:a6:8d:84:d7:
                    fb:9c:19:19:60:fd:56:ec:19:23:c6:41:05:e0:af:
                    f5:0b:4b:ae:8e:32:ea:78:2a:51:6d:4d:6a:e4:b0:
                    1a:22:81:e2:d5:4b:7d:ab:6a:3e:91:84:f6:38:e2:
                    4e:72:27:55:db:8d:27:f6:86:46:bb:2c:23:5d:32:
                    24:34:16:18:ba:4c:d5:3c:8e:25:32:d7:fc:45:3c:
                    ca:45:af:da:75:46:01:70:ce:2c:0d:bf:0d:08:cc:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:13:EB:E3:9E:EE:8A:BA:5C:65:91:C5:62:35:9C:A3:FA:4B:D1:CC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/OBPr457uirpcZZHFYjWco_pL0cw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:fe:1e:0f:f5:b8:f7:b4:fc:aa:2d:5f:0c:9f:72:6e:01:
         6a:60:e0:5d:96:ca:79:92:50:2c:20:51:15:cf:2c:21:6b:8d:
         6f:2f:e4:cd:03:cb:0c:2e:0e:e8:7b:63:d4:c5:67:a4:57:16:
         fa:ff:d7:a2:8d:22:0c:6c:34:02:a1:c2:55:c5:60:fd:7c:bd:
         74:93:93:c4:fd:7c:df:18:fd:0c:a8:48:66:c2:40:e1:0b:5a:
         f1:46:8f:08:e7:84:57:07:27:61:dd:c9:ce:e3:b3:f2:f1:d7:
         91:65:ae:7f:07:ae:78:5c:e1:eb:47:bc:72:db:56:bc:26:c4:
         68:15:e1:15:4d:28:65:b5:4f:0b:f9:fe:f8:d5:02:b0:6f:ae:
         7d:44:fe:8e:c0:aa:9f:74:b6:10:96:42:80:16:43:1e:48:76:
         c3:6c:97:d5:7a:bb:7a:eb:23:ea:c0:03:74:26:7b:66:56:21:
         db:0e:60:61:23:f4:f7:ed:11:91:43:a9:05:47:6a:7e:c2:a9:
         6a:c4:a7:2b:21:7d:f0:5d:be:20:cc:3b:5f:9f:58:34:2c:f6:
         31:19:3f:ea:a7:b6:23:a5:ff:42:60:a2:4e:06:03:1d:5f:33:
         44:de:df:86:a1:8a:a5:ae:cd:a7:57:16:27:be:e2:00:2a:5a:
         72:21:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org