Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Pr3hzCNl-Zo10pk0OemALCafOdY.roa
File:                     Pr3hzCNl-Zo10pk0OemALCafOdY.roa (raw, json)
Hash identifier:          u+wmkvzzDy8BNggjmL1GR3OzD7wDheTENsKdbXnEvfM=
Subject key identifier:   3E:BD:E1:CC:23:65:F9:9A:35:D2:99:34:39:E9:80:2C:26:9F:39:D6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       012A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Pr3hzCNl-Zo10pk0OemALCafOdY.roa
Signing time:             Sun 01 Oct 2023 01:30:44 +0000
ROA not before:           Sun 01 Oct 2023 01:30:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3EBDE1CC2365F99A35D2993439E9802C269F39D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:40:f5:5e:9a:68:9f:93:84:c3:0f:55:cf:
                    6f:e7:5b:32:4d:47:ac:a1:7f:0c:53:50:49:e8:8e:
                    9c:6d:2d:ee:f4:ef:04:02:13:69:25:41:cd:23:ec:
                    0f:27:f0:15:c3:f5:59:cb:f7:c4:9d:ca:e9:e1:8d:
                    88:80:51:cc:63:08:77:2a:76:97:d5:c2:44:d4:fb:
                    8a:91:13:a7:bb:39:de:65:37:9a:21:7a:3d:6c:96:
                    ef:2f:9c:14:42:e4:69:45:ab:ed:81:28:06:52:32:
                    17:8a:98:d5:14:37:22:17:fa:5f:23:30:35:1d:4c:
                    82:c1:55:76:c8:0e:36:1a:f2:91:81:a2:38:6e:e3:
                    14:be:3e:a1:9f:36:a2:02:b9:d0:8f:93:e7:a5:2f:
                    56:b4:43:55:d2:ea:25:34:21:03:19:4a:8c:dc:e7:
                    8e:88:76:a0:ef:53:05:71:a6:c1:af:f1:98:e7:c4:
                    d0:cd:24:0d:6d:71:b7:a2:56:60:e0:9c:76:eb:11:
                    b4:23:64:a3:6b:c0:3b:c9:4e:52:2c:0f:fa:b3:3e:
                    98:a9:06:00:85:a0:e5:fe:cd:da:33:df:69:9a:09:
                    26:0e:d9:bd:c6:a0:9e:4b:c9:89:ea:77:a2:dc:65:
                    2e:aa:22:50:7b:fc:79:2a:c7:5b:fe:b8:8f:92:15:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:E1:CC:23:65:F9:9A:35:D2:99:34:39:E9:80:2C:26:9F:39:D6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Pr3hzCNl-Zo10pk0OemALCafOdY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:7c:bc:c9:e0:20:01:c9:55:31:d9:a5:80:4f:c4:1c:c8:
         2f:99:fa:0e:1f:b8:80:c6:e1:19:1b:fc:7e:74:61:c0:d7:9b:
         9f:24:8a:ef:7e:03:19:ab:fe:25:ac:e4:6e:9a:bb:e1:96:1a:
         c8:ba:05:4e:43:e1:f0:1e:3a:56:5b:0b:e4:ab:25:a6:b7:28:
         90:65:d5:4a:92:4a:b0:54:99:a2:46:5a:5d:60:11:b1:f4:09:
         76:e0:93:4e:5f:c6:eb:4d:f6:d5:7b:96:aa:b0:91:00:f4:59:
         0c:37:ac:ec:93:84:a4:ea:99:3b:e7:07:84:4b:8b:e0:9a:af:
         60:a6:af:50:de:1a:bd:77:05:e7:a5:6e:33:24:b1:a8:2c:60:
         2f:aa:9c:13:64:05:8f:80:f2:aa:36:19:09:ac:f4:02:cf:c8:
         e0:cb:b3:7b:3e:af:b9:90:37:24:19:66:3a:81:c6:17:c9:95:
         71:ca:55:47:e6:8b:ab:07:f5:c5:06:90:31:88:b2:34:e1:11:
         26:7d:47:8d:e5:3f:41:ec:59:02:50:59:4d:ec:6d:7e:5b:d3:
         7d:82:cf:21:ce:73:48:79:93:96:16:0e:36:4f:07:c3:5d:fe:
         25:ce:96:14:92:c9:78:3c:23:65:23:1a:09:25:84:a0:64:ac:
         df:c3:96:1a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICASowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNDRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNFQkRFMUNDMjM2NUY5
OUEzNUQyOTkzNDM5RTk4MDJDMjY5RjM5RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXWkD1Xppon5OEww9Vz2/nWzJNR6yhfwxTUEnojpxtLe707wQC
E2klQc0j7A8n8BXD9VnL98SdyunhjYiAUcxjCHcqdpfVwkTU+4qRE6e7Od5lN5oh
ej1slu8vnBRC5GlFq+2BKAZSMheKmNUUNyIX+l8jMDUdTILBVXbIDjYa8pGBojhu
4xS+PqGfNqICudCPk+elL1a0Q1XS6iU0IQMZSozc546IdqDvUwVxpsGv8ZjnxNDN
JA1tcbeiVmDgnHbrEbQjZKNrwDvJTlIsD/qzPpipBgCFoOX+zdoz32maCSYO2b3G
oJ5LyYnqd6LcZS6qIlB7/Hkqx1v+uI+SFRg5AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUPr3hzCNl+Zo10pk0OemALCafOdYwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9QcjNoekNObC1abzEwcGswT2VtQUxDYWZPZFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0v0GMA0GCSqGSIb3DQEBCwUAA4IBAQCiLny8yeAgAclVMdmlgE/E
HMgvmfoOH7iAxuEZG/x+dGHA15ufJIrvfgMZq/4lrORumrvhlhrIugVOQ+HwHjpW
WwvkqyWmtyiQZdVKkkqwVJmiRlpdYBGx9Al24JNOX8brTfbVe5aqsJEA9FkMN6zs
k4Sk6pk75weES4vgmq9gpq9Q3hq9dwXnpW4zJLGoLGAvqpwTZAWPgPKqNhkJrPQC
z8jgy7N7Pq+5kDckGWY6gcYXyZVxylVH5ourB/XFBpAxiLI04REmfUeN5T9B7FkC
UFlN7G1+W9N9gs8hznNIeZOWFg42TwfDXf4lzpYUksl4PCNlIxoJJYSgZKzfw5Ya
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org