Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ULlBFamO0wcOziHsRycpscENC6s.roa
File:                     ULlBFamO0wcOziHsRycpscENC6s.roa (raw, json)
Hash identifier:          OKZib2mHTkhExlBw88EnZiJnj73RVyjUCMHya7WXRdw=
Subject key identifier:   50:B9:41:15:A9:8E:D3:07:0E:CE:21:EC:47:27:29:B1:C1:0D:0B:AB
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0122
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ULlBFamO0wcOziHsRycpscENC6s.roa
Signing time:             Sun 01 Oct 2023 01:30:40 +0000
ROA not before:           Sun 01 Oct 2023 01:30:40 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:40 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=50B94115A98ED3070ECE21EC472729B1C10D0BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:2b:62:f4:a6:5b:38:95:e5:3e:83:71:a1:
                    e3:53:9d:cf:eb:57:96:47:33:7d:f9:66:c5:20:04:
                    59:47:44:50:e2:ff:0b:74:48:bd:5a:a9:20:c5:e6:
                    d8:01:19:0b:ab:20:30:9d:fc:56:d5:5e:36:3a:a8:
                    99:5c:a6:e0:b1:e2:65:be:1d:24:88:13:fb:55:31:
                    cd:be:0d:e9:3c:0a:8a:cf:0b:a1:7a:dd:33:3b:74:
                    11:bf:4a:7f:0a:3f:18:c6:cd:ee:9c:07:83:3f:17:
                    f0:d8:60:ca:c4:89:63:7e:af:2c:a7:ad:47:70:11:
                    45:59:85:fc:3f:f3:6e:7a:7e:09:05:54:44:ef:d3:
                    db:60:9b:9f:db:28:f7:d1:61:20:37:53:d9:e1:1d:
                    43:42:3e:ee:44:55:96:44:e6:7a:f9:db:35:92:8d:
                    a1:2d:ae:dc:18:4e:e7:a9:12:1a:eb:0a:4a:12:4f:
                    f0:64:a4:85:18:af:83:51:48:38:4c:43:1a:6b:69:
                    01:60:c6:94:57:79:40:f6:d7:b0:7e:3f:02:ab:1a:
                    4a:71:b1:77:32:89:02:43:79:94:f8:75:d8:8f:4f:
                    17:a3:dd:36:c2:16:f0:e4:2f:24:79:e0:7c:5d:48:
                    4c:e8:29:bf:ff:03:d5:73:4b:b4:13:78:ea:35:87:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:41:15:A9:8E:D3:07:0E:CE:21:EC:47:27:29:B1:C1:0D:0B:AB
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ULlBFamO0wcOziHsRycpscENC6s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:c7:2b:46:df:98:e6:c5:3a:6c:9e:9b:f1:df:a9:ee:41:81:
         18:c5:97:88:6d:f0:56:9a:1f:e9:cd:7d:e7:4e:03:5b:cc:be:
         6a:8d:e3:d8:3e:c2:86:88:af:05:4f:f1:13:b1:23:16:17:bf:
         36:8c:6c:bb:a6:57:cb:6b:7f:d7:8f:36:ff:f5:6e:b3:3b:c4:
         a9:cc:2d:bc:5c:ff:58:23:a9:9c:7e:85:6d:b1:36:5d:a3:10:
         e4:7d:80:fd:90:e1:1a:ab:7d:29:91:fe:6d:13:b0:24:2e:36:
         67:c4:31:cf:c2:01:a0:65:51:fa:9b:2e:ce:7d:02:a5:02:e7:
         01:0b:8f:65:85:b7:03:07:da:f1:e6:35:73:94:9c:a3:8b:64:
         0f:70:9b:fb:cd:70:04:27:df:63:7b:3e:9a:9f:10:b3:f9:f1:
         f3:92:70:ad:e2:75:c3:a9:f8:8c:2b:b3:06:03:cf:e3:2b:7d:
         49:ac:d3:c2:5a:22:4e:d6:2c:f9:4f:88:4c:4a:30:86:74:37:
         e4:59:52:d6:16:39:84:42:1e:0c:d3:6e:f4:30:f1:3a:ee:63:
         29:e6:08:ae:d6:6a:9d:6e:0f:8d:99:ae:90:3e:5c:99:2b:a5:
         f8:33:da:4d:cb:6a:ad:dd:03:08:cf:e9:6f:8e:aa:3f:cd:7f:
         b7:f6:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org