Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WZWeClnozkvM32lxOVwvx4-5XxU.roa
File:                     WZWeClnozkvM32lxOVwvx4-5XxU.roa (raw, json)
Hash identifier:          20yir0F7glVJKQ/tjEP2onjq0nDyC0nfcouIqdhFuRk=
Subject key identifier:   59:95:9E:0A:59:E8:CE:4B:CC:DF:69:71:39:5C:2F:C7:8F:B9:5F:15
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       016C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WZWeClnozkvM32lxOVwvx4-5XxU.roa
Signing time:             Sun 01 Oct 2023 01:35:51 +0000
ROA not before:           Sun 01 Oct 2023 01:35:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.125.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=59959E0A59E8CE4BCCDF6971395C2FC78FB95F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:93:67:8a:99:22:f5:7d:d6:d4:45:a1:ae:
                    b3:d9:72:95:ef:10:e5:4d:4a:c4:8f:ea:58:02:77:
                    4e:ba:b9:8a:bd:1b:3e:fc:d7:85:06:38:3d:ef:5a:
                    a4:c2:83:d1:0c:dd:68:9d:20:31:58:1d:1e:43:ec:
                    ea:cb:51:1e:da:81:4c:ef:82:78:53:8b:77:25:0c:
                    b7:f9:a8:9f:3b:35:46:fa:81:96:f0:f8:a5:a0:38:
                    19:ed:b1:ad:24:49:bb:69:d5:17:56:5d:a9:1c:70:
                    d9:5c:1a:eb:04:33:43:7e:9f:15:87:fd:79:b9:a4:
                    b5:2c:5e:da:84:66:c2:c7:44:d5:eb:77:f3:0d:0e:
                    da:9e:51:15:bf:ae:5f:97:64:90:fb:ce:36:30:61:
                    15:c4:1d:4d:85:b0:a5:71:0b:23:74:df:92:f2:46:
                    04:f1:a7:5b:fe:0e:9f:85:ca:11:4a:2f:22:8c:bd:
                    2f:ba:19:9d:1c:c5:a1:7f:b6:b7:8d:21:98:3e:78:
                    80:34:fe:35:c3:7b:68:33:f1:76:24:a4:67:71:37:
                    15:1c:a5:5d:b6:f6:9d:f9:76:58:9e:a4:08:c2:43:
                    e0:09:02:cd:0a:12:29:2e:06:fe:26:af:3d:16:1a:
                    72:34:f2:2c:34:59:fd:9c:ae:11:59:d0:de:e0:4c:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:9E:0A:59:E8:CE:4B:CC:DF:69:71:39:5C:2F:C7:8F:B9:5F:15
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WZWeClnozkvM32lxOVwvx4-5XxU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:ad:3a:d7:90:7c:98:39:d0:e6:88:ef:37:8a:18:de:1e:f7:
         95:7d:0c:60:6f:57:8b:f7:76:90:e8:5f:e0:b3:a3:d6:ae:4d:
         18:1a:6d:12:ea:75:8b:66:6a:21:0a:b4:63:8c:dd:28:7e:07:
         fb:57:d1:af:00:4f:1c:65:48:48:04:08:89:69:c1:1f:7d:95:
         82:5c:e3:a5:b2:a8:ef:1a:d3:d5:de:ac:9d:3b:47:8a:76:0c:
         3e:4c:0c:60:a2:26:a4:e6:75:23:eb:67:2c:48:b0:41:0a:4c:
         da:fc:ad:97:9d:d0:31:ef:c8:cd:36:5f:be:28:f0:af:bc:a5:
         b2:dd:8c:ec:25:e4:32:8f:a9:ba:84:3a:44:c8:9d:79:38:0c:
         36:d4:b9:7b:b5:a8:07:95:c2:66:05:b4:e2:bd:36:f0:ed:18:
         aa:c0:50:8c:ec:0c:73:08:2f:a9:59:c7:84:6d:a3:93:a2:cf:
         9a:e7:ca:9e:fd:c6:8d:22:f5:22:76:64:b4:fd:78:76:03:c4:
         7a:93:3f:3b:b6:8e:33:25:69:84:2f:0b:29:af:19:49:d0:9c:
         65:b5:9b:6f:5b:52:bd:09:49:8c:1a:8c:7f:32:76:b6:13:b3:
         66:69:f5:4d:d9:cf:f6:95:fb:56:de:99:18:b0:5e:c0:c0:23:
         0b:ad:d2:2a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTM1NTFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDU5OTU5RTBBNTlFOENF
NEJDQ0RGNjk3MTM5NUMyRkM3OEZCOTVGMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCYpNnipki9X3W1EWhrrPZcpXvEOVNSsSP6lgCd066uYq9Gz78
14UGOD3vWqTCg9EM3WidIDFYHR5D7OrLUR7agUzvgnhTi3clDLf5qJ87NUb6gZbw
+KWgOBntsa0kSbtp1RdWXakccNlcGusEM0N+nxWH/Xm5pLUsXtqEZsLHRNXrd/MN
DtqeURW/rl+XZJD7zjYwYRXEHU2FsKVxCyN035LyRgTxp1v+Dp+FyhFKLyKMvS+6
GZ0cxaF/treNIZg+eIA0/jXDe2gz8XYkpGdxNxUcpV229p35dliepAjCQ+AJAs0K
EikuBv4mrz0WGnI08iw0Wf2crhFZ0N7gTKeBAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUWZWeClnozkvM32lxOVwvx4+5XxUwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9XWldlQ2xub3prdk0zMmx4T1Z3dng0LTVYeFUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQF032gMA0GCSqGSIb3DQEBCwUAA4IBAQDJrTrXkHyYOdDmiO83ihje
HveVfQxgb1eL93aQ6F/gs6PWrk0YGm0S6nWLZmohCrRjjN0ofgf7V9GvAE8cZUhI
BAiJacEffZWCXOOlsqjvGtPV3qydO0eKdgw+TAxgoiak5nUj62csSLBBCkza/K2X
ndAx78jNNl++KPCvvKWy3YzsJeQyj6m6hDpEyJ15OAw21Ll7tagHlcJmBbTivTbw
7RiqwFCM7AxzCC+pWceEbaOTos+a58qe/caNIvUidmS0/Xh2A8R6kz87to4zJWmE
LwsprxlJ0JxltZtvW1K9CUmMGox/Mna2E7NmafVN2c/2lftW3pkYsF7AwCMLrdIq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org