Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WatF-AlRWVAbcYMpvScB5QZVBtA.roa
File:                     WatF-AlRWVAbcYMpvScB5QZVBtA.roa (raw, json)
Hash identifier:          1TsAFm3DCnPy6mEpv/Db4MnAdW0O20m1gQZ+a8h0Kes=
Subject key identifier:   59:AB:45:F8:09:51:59:50:1B:71:83:29:BD:27:01:E5:06:55:06:D0
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0100
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WatF-AlRWVAbcYMpvScB5QZVBtA.roa
Signing time:             Fri 01 Sep 2023 01:33:16 +0000
ROA not before:           Fri 01 Sep 2023 01:33:16 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.167.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:16 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=59AB45F8095159501B718329BD2701E5065506D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:40:54:7b:c5:07:84:d0:de:09:8b:f5:ec:
                    64:22:1e:f2:88:4f:5e:ae:80:2c:da:a4:c3:ec:0b:
                    a4:7f:49:9a:a5:3c:0c:96:89:a0:8b:81:22:f9:82:
                    5c:45:91:84:8d:5a:59:c2:de:0a:80:2a:67:33:10:
                    5f:49:f9:bf:15:6e:00:8e:0d:0f:4a:31:89:b3:03:
                    b6:66:6a:0d:ff:ff:b2:a8:55:7b:e6:1b:7a:3c:3f:
                    ec:a0:25:e8:aa:f1:c0:2c:a0:10:eb:54:c4:fc:0c:
                    7d:e3:fc:6e:9a:06:18:bd:d5:f5:d2:c3:c0:a0:c9:
                    32:07:72:ac:93:d9:7b:a8:47:7f:1e:70:75:09:50:
                    44:55:ef:c2:fe:be:f0:e5:25:04:22:a3:8f:e1:06:
                    e3:8f:81:89:e1:da:d0:f6:e0:d2:a8:fa:9e:a1:05:
                    cd:ec:ca:4a:ff:8c:3b:48:17:3e:95:84:d5:f0:25:
                    52:64:f8:17:19:e8:15:bf:48:f7:78:8f:c8:10:13:
                    7c:70:f8:3b:99:85:01:59:e7:60:4e:31:4a:71:78:
                    3f:ce:1a:0a:fa:69:3e:ea:1e:57:50:97:57:fb:d2:
                    30:a4:ab:2f:af:21:4f:1f:77:48:71:d1:80:f7:bc:
                    ca:20:a3:cd:9f:7b:29:ee:c3:b3:4a:19:fe:68:31:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AB:45:F8:09:51:59:50:1B:71:83:29:BD:27:01:E5:06:55:06:D0
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WatF-AlRWVAbcYMpvScB5QZVBtA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.167.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:b5:65:be:05:6b:f1:d3:21:a9:5a:72:08:ec:4b:f2:f0:
         d5:34:fb:63:a1:73:49:43:17:4a:eb:23:0c:fd:c1:04:f3:e8:
         05:d6:5b:60:f0:6a:06:19:ed:0c:c1:a7:fc:50:c0:bf:33:90:
         ad:87:0e:64:1d:9b:45:de:88:78:5d:7c:e7:ed:8c:e1:d2:a0:
         16:f6:08:f5:37:53:5b:8b:bd:cf:21:9b:b1:81:7c:58:8e:7f:
         f4:3d:7f:8c:72:8e:77:07:3d:1a:38:68:b1:9a:4b:67:22:a4:
         72:45:f6:3c:8a:14:68:9b:14:13:5c:4a:a3:93:ff:cb:8a:cb:
         31:0d:9e:d5:8e:70:65:19:d2:cf:ef:47:dc:93:0d:e5:62:ba:
         6f:0d:de:f2:5b:5c:3d:b2:be:60:bc:7c:aa:3f:26:ce:12:3e:
         9c:08:ad:b8:4d:a0:79:71:0c:b3:3e:e2:b3:70:95:b2:7a:44:
         54:a8:e1:f9:f2:e6:62:fa:03:95:09:5e:2b:a3:c9:e8:37:5a:
         4e:da:c2:85:20:0a:16:20:34:3d:d0:09:67:5e:76:1b:f8:08:
         4e:d4:67:fd:df:97:6f:82:c7:62:ea:fa:ee:8d:e1:79:92:70:
         ac:b6:dd:1d:d9:b6:04:76:51:aa:57:cb:cd:19:27:cb:d8:e0:
         0e:67:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org