Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/OtE-XvE02TocgOxQVRJMalBG9YE.roa
File:                     OtE-XvE02TocgOxQVRJMalBG9YE.roa (raw, json)
Hash identifier:          JuTpbJwhTZkYM0HQLOPGdFKzdOahzz+fli4OXqlRCTI=
Subject key identifier:   3A:D1:3E:5E:F1:34:D9:3A:1C:80:EC:50:55:12:4C:6A:50:46:F5:81
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D6
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/OtE-XvE02TocgOxQVRJMalBG9YE.roa
Signing time:             Fri 01 Sep 2023 01:30:54 +0000
ROA not before:           Fri 01 Sep 2023 01:30:54 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:54 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=3AD13E5EF134D93A1C80EC5055124C6A5046F581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:a2:b3:4c:4d:3f:a7:69:67:af:44:aa:75:
                    9b:45:0d:8c:2c:ea:92:4c:97:f0:ac:55:7b:ad:8f:
                    e9:8e:1c:f8:1d:d6:9e:a9:f9:69:bf:14:76:bf:0a:
                    d5:5f:21:2f:ea:1e:42:f7:16:29:6f:62:f4:4e:e2:
                    06:99:35:49:3f:07:da:2b:78:63:a7:f3:8f:92:df:
                    70:3d:fa:37:12:71:9a:8f:3e:9d:3d:69:f3:3d:48:
                    a6:ad:15:65:42:ff:3b:52:03:af:0e:2f:e8:6b:6b:
                    0d:47:49:90:6a:dd:f2:61:ee:d7:73:c0:33:60:26:
                    5d:a8:f7:b5:4c:3b:35:32:c6:7b:2a:e2:12:12:23:
                    14:d4:2e:51:74:47:c3:a8:7c:65:d3:18:07:33:b3:
                    89:72:c2:1f:54:92:c5:f7:2e:84:70:83:9a:ae:5c:
                    5d:6a:65:ab:f4:b4:1d:b3:f5:fd:cf:6a:f5:67:82:
                    b3:d1:57:54:af:48:41:8d:9e:52:23:18:08:49:28:
                    2a:6e:a2:85:c3:fe:1a:ce:5c:f3:64:13:89:7d:8a:
                    b0:4c:45:15:55:15:a7:1d:ef:41:f6:87:b6:e2:75:
                    6f:a4:8e:1a:15:13:a0:9d:c9:40:0f:94:ae:d2:41:
                    a7:41:33:d8:09:fe:af:22:4c:33:65:76:05:fe:c2:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D1:3E:5E:F1:34:D9:3A:1C:80:EC:50:55:12:4C:6A:50:46:F5:81
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/OtE-XvE02TocgOxQVRJMalBG9YE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:6c:35:3d:1a:c6:8d:be:1e:62:12:b5:20:d6:58:6c:20:8c:
         04:69:ba:1d:d0:12:e2:e9:15:0a:c6:e4:7a:5b:6a:bc:67:04:
         a7:17:0e:8e:88:61:70:24:03:1c:a5:7e:b2:f6:db:eb:68:e6:
         d3:c6:76:24:ad:bd:83:f4:98:0e:4c:d7:c8:5b:f4:77:e3:49:
         f4:8b:e9:e8:27:5d:ca:ec:a7:ed:f9:cb:f0:0b:e7:8a:26:70:
         0a:4b:22:6b:40:d8:39:c9:4b:53:ef:f9:0e:a4:e8:2c:d5:6b:
         b6:49:ac:5a:1f:1d:54:d4:8b:2f:40:64:c7:e9:56:6b:2e:72:
         88:12:23:e9:83:8a:c1:a4:9f:07:d8:04:e2:93:56:78:7e:5b:
         23:d3:63:dd:8a:cc:35:75:eb:36:39:f0:c5:16:85:91:ac:d2:
         4b:bb:3b:14:a5:ef:f1:46:ed:1d:0f:0e:9d:92:93:68:80:e2:
         2b:31:55:c7:42:f1:92:4d:4c:03:42:ac:0c:f4:9a:4a:ca:a6:
         28:56:d6:55:f3:1c:6c:4c:80:82:0c:03:28:d8:fd:df:df:ef:
         5f:28:79:30:f0:ee:88:db:3a:df:85:ed:e9:44:fc:f0:a1:21:
         26:f2:70:7f:0e:f6:e8:3a:a0:db:cf:dd:85:ef:22:a5:55:36:
         98:01:94:a8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNTRaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDNBRDEzRTVFRjEzNEQ5
M0ExQzgwRUM1MDU1MTI0QzZBNTA0NkY1ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6EKKzTE0/p2lnr0SqdZtFDYws6pJMl/CsVXutj+mOHPgd1p6p
+Wm/FHa/CtVfIS/qHkL3FilvYvRO4gaZNUk/B9oreGOn84+S33A9+jcScZqPPp09
afM9SKatFWVC/ztSA68OL+hraw1HSZBq3fJh7tdzwDNgJl2o97VMOzUyxnsq4hIS
IxTULlF0R8OofGXTGAczs4lywh9UksX3LoRwg5quXF1qZav0tB2z9f3PavVngrPR
V1SvSEGNnlIjGAhJKCpuooXD/hrOXPNkE4l9irBMRRVVFacd70H2h7bidW+kjhoV
E6CdyUAPlK7SQadBM9gJ/q8iTDNldgX+wi/vAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUOtE+XvE02TocgOxQVRJMalBG9YEwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9PdEUtWHZFMDJUb2NnT3hRVlJKTWFsQkc5WUUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAfG20MA0GCSqGSIb3DQEBCwUAA4IBAQDGbDU9GsaNvh5iErUg1lhs
IIwEabod0BLi6RUKxuR6W2q8ZwSnFw6OiGFwJAMcpX6y9tvraObTxnYkrb2D9JgO
TNfIW/R340n0i+noJ13K7Kft+cvwC+eKJnAKSyJrQNg5yUtT7/kOpOgs1Wu2Saxa
Hx1U1IsvQGTH6VZrLnKIEiPpg4rBpJ8H2ATik1Z4flsj02Pdisw1des2OfDFFoWR
rNJLuzsUpe/xRu0dDw6dkpNogOIrMVXHQvGSTUwDQqwM9JpKyqYoVtZV8xxsTICC
DAMo2P3f3+9fKHkw8O6I2zrfhe3pRPzwoSEm8nB/DvboOqDbz92F7yKlVTaYAZSo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org