Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SPbk0RnqfianTnscVx9duQ7dJwY.roa
File:                     SPbk0RnqfianTnscVx9duQ7dJwY.roa (raw, json)
Hash identifier:          N0YZg5/CxvmWqnwHRI11VPTE6EjsPg1FsR22Uq2V2N8=
Subject key identifier:   48:F6:E4:D1:19:EA:7E:26:A7:4E:7B:1C:57:1F:5D:B9:0E:DD:27:06
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       87
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SPbk0RnqfianTnscVx9duQ7dJwY.roa
Signing time:             Tue 18 Oct 2022 02:24:16 +0000
ROA not before:           Tue 18 Oct 2022 02:24:16 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:24:16 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=48F6E4D119EA7E26A74E7B1C571F5DB90EDD2706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:63:8e:05:04:b8:ab:cf:c1:17:00:d6:d4:
                    ef:e1:a2:ef:be:3b:52:0f:af:ab:40:80:02:f1:db:
                    11:23:ce:61:0f:21:9f:44:0f:e1:9d:b3:8e:67:9d:
                    24:8a:37:af:09:25:9d:1a:5b:96:73:7d:12:f2:30:
                    ca:e3:60:b9:23:fe:1a:f5:87:48:91:e2:f1:63:19:
                    38:95:e1:1d:55:ec:34:a7:de:98:9e:f7:88:7a:aa:
                    cb:ef:ed:66:f5:5b:e8:79:f8:03:bf:6c:b5:d0:d2:
                    3f:58:41:2d:3b:67:8e:c8:d9:22:af:b8:76:0a:5a:
                    c2:63:1a:85:7e:5b:50:f7:cc:a7:18:a4:8f:39:65:
                    17:d5:19:55:0b:de:ee:77:6d:b2:cf:56:8c:3a:15:
                    21:39:cd:e9:34:93:4b:a1:40:d2:03:97:ec:e7:b9:
                    08:76:cd:ae:70:c2:ba:6d:7c:49:ad:40:71:f6:c4:
                    43:52:56:bf:ac:c0:c0:9e:18:27:db:10:2f:4d:c5:
                    df:73:f2:ff:56:9d:78:23:9b:fb:df:4a:a3:e3:3f:
                    3a:b3:99:34:c3:44:ba:1b:8c:5e:61:09:73:5c:33:
                    40:fd:65:da:5a:7c:76:9c:5f:03:d0:ca:4a:0e:73:
                    4a:5d:f9:eb:a2:01:5d:0c:70:20:9b:4c:a5:59:bf:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F6:E4:D1:19:EA:7E:26:A7:4E:7B:1C:57:1F:5D:B9:0E:DD:27:06
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SPbk0RnqfianTnscVx9duQ7dJwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:00:e5:1c:cf:da:48:55:c1:53:aa:d4:62:0a:f3:1e:b4:08:
         8d:7c:89:ed:9a:53:b6:41:1a:0c:fd:c3:c0:ac:c6:db:68:22:
         c8:fa:31:ca:90:45:0b:22:ee:1f:e5:4e:e7:5f:86:54:6d:4e:
         98:ab:14:1d:8a:f7:15:2c:9a:6c:d3:80:bb:e2:83:30:3b:c6:
         81:05:bc:9e:64:1c:15:26:92:b9:4f:c8:39:29:70:c0:0f:b0:
         fd:a3:88:7c:99:42:91:8d:f5:f6:5c:de:11:72:76:22:74:25:
         e9:55:87:a1:e8:68:63:0f:ea:1b:3e:91:e7:8e:f5:3c:f8:1d:
         7a:66:89:e8:b4:0c:30:9e:72:ac:42:2a:00:fd:c5:41:88:8d:
         c5:22:de:f3:1c:9f:da:fb:d3:2d:53:a1:c3:90:0c:f3:83:7b:
         74:52:d7:86:8d:35:a5:04:29:16:3b:52:e8:c1:5c:6c:19:d9:
         82:5e:fd:43:ec:25:12:2d:1f:e1:64:16:ac:a6:7e:80:ca:e9:
         08:47:76:d3:12:96:1a:4f:56:5c:09:86:1f:c7:54:7b:df:b8:
         cf:21:0c:72:61:ac:4b:8d:76:f8:22:81:3a:a4:fe:f6:50:ff:
         58:a8:68:c9:f2:70:f2:ef:0e:49:0f:17:27:9b:27:6c:f0:c9:
         83:4b:02:fd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMjEwMTgw
MjI0MTZaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4RjZFNEQxMTlFQTdF
MjZBNzRFN0IxQzU3MUY1REI5MEVERDI3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrNWOOBQS4q8/BFwDW1O/hou++O1IPr6tAgALx2xEjzmEPIZ9E
D+Gds45nnSSKN68JJZ0aW5ZzfRLyMMrjYLkj/hr1h0iR4vFjGTiV4R1V7DSn3pie
94h6qsvv7Wb1W+h5+AO/bLXQ0j9YQS07Z47I2SKvuHYKWsJjGoV+W1D3zKcYpI85
ZRfVGVUL3u53bbLPVow6FSE5zek0k0uhQNIDl+znuQh2za5wwrptfEmtQHH2xENS
Vr+swMCeGCfbEC9Nxd9z8v9WnXgjm/vfSqPjPzqzmTTDRLobjF5hCXNcM0D9Zdpa
fHacXwPQykoOc0pd+euiAV0McCCbTKVZv9g9AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUSPbk0RnqfianTnscVx9duQ7dJwYwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9TUGJrMFJucWZpYW5UbnNjVng5ZHVRN2RKd1ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0v22MA0GCSqGSIb3DQEBCwUAA4IBAQB1AOUcz9pIVcFTqtRiCvMe
tAiNfIntmlO2QRoM/cPArMbbaCLI+jHKkEULIu4f5U7nX4ZUbU6YqxQdivcVLJps
04C74oMwO8aBBbyeZBwVJpK5T8g5KXDAD7D9o4h8mUKRjfX2XN4RcnYidCXpVYeh
6GhjD+obPpHnjvU8+B16ZonotAwwnnKsQioA/cVBiI3FIt7zHJ/a+9MtU6HDkAzz
g3t0UteGjTWlBCkWO1LowVxsGdmCXv1D7CUSLR/hZBaspn6AyukIR3bTEpYaT1Zc
CYYfx1R737jPIQxyYaxLjXb4IoE6pP72UP9YqGjJ8nDy7w5JDxcnmyds8MmDSwL9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org