Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/YH4CTz1CcAMerWYRkU1bPTyayjA.roa
File:                     YH4CTz1CcAMerWYRkU1bPTyayjA.roa (raw, json)
Hash identifier:          BIzBWeY/gTwGxZFIbNUJMm3zKhBYFsVK/atOLGLPQ1A=
Subject key identifier:   60:7E:02:4F:3D:42:70:03:1E:AD:66:11:91:4D:5B:3D:3C:9A:CA:30
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       8A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/YH4CTz1CcAMerWYRkU1bPTyayjA.roa
Signing time:             Tue 18 Oct 2022 02:26:18 +0000
ROA not before:           Tue 18 Oct 2022 02:26:18 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:26:18 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=607E024F3D4270031EAD6611914D5B3D3C9ACA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:9e:21:9b:a1:14:de:69:42:63:f1:ca:02:
                    11:e3:3f:04:86:d6:6a:14:fb:ae:60:77:5a:16:c9:
                    33:4b:d0:1c:6f:36:15:e5:24:fc:a6:f8:4a:82:51:
                    4c:c6:de:2e:9f:ec:f3:a8:26:67:c6:aa:27:c4:d1:
                    a3:1a:b8:c4:d3:7d:c4:8d:94:c4:0c:c7:fc:55:27:
                    c5:0c:26:70:4c:a7:32:6b:b0:56:3b:7d:84:3e:6f:
                    d5:80:8a:2a:4b:82:2a:c1:03:81:c8:15:eb:b2:c0:
                    ff:d3:2b:0e:b5:a9:bd:cc:ab:49:fe:48:82:a8:c5:
                    b8:0a:32:5d:13:8a:c5:b7:c3:67:6b:0a:4c:ce:81:
                    92:2d:36:3e:b4:b7:0e:98:c5:76:d4:6e:65:03:b0:
                    25:75:33:c7:c6:a5:8e:bd:5e:c3:ed:32:2e:33:92:
                    5e:93:96:b0:4f:c3:7c:3e:80:67:f0:e5:cc:c5:f8:
                    ea:b7:88:05:84:e5:a7:11:58:66:a9:ce:cd:1b:24:
                    64:40:91:3f:fa:e8:14:29:9c:f7:98:9e:9d:00:1a:
                    98:66:72:89:e0:8c:58:84:20:fa:97:fc:3c:a2:fd:
                    00:0e:24:5e:1a:bc:b0:14:9c:2d:7b:22:04:e1:70:
                    0a:47:61:00:73:bf:19:e6:39:59:5d:3c:52:62:92:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:02:4F:3D:42:70:03:1E:AD:66:11:91:4D:5B:3D:3C:9A:CA:30
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/YH4CTz1CcAMerWYRkU1bPTyayjA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:7e:4b:a2:75:4e:d7:43:ba:9f:37:79:3c:d6:c7:34:df:
         69:4e:c9:95:e1:e9:7d:0b:47:dd:67:09:f3:79:de:2e:63:08:
         76:dc:11:f7:0b:9b:41:69:6c:4f:1e:4a:28:60:e2:b1:c3:79:
         62:7b:aa:71:4a:4f:2c:0c:86:6c:6c:2d:1b:30:63:91:85:0e:
         74:00:7c:ef:b3:7e:fe:d2:59:81:fe:17:96:9c:77:e8:77:23:
         cb:40:10:c0:38:70:c7:6b:53:02:ed:5b:b5:78:bf:4a:2f:25:
         17:c7:8a:19:34:fe:34:2b:e3:81:e7:bf:4a:e3:8a:c3:c1:b8:
         e1:b6:b4:a5:f6:45:48:b5:a7:cc:f3:05:16:85:21:03:42:17:
         4c:2b:62:2a:41:56:c0:87:51:14:cf:cc:7d:ec:2f:84:b0:49:
         9d:a0:2e:f7:21:4c:0a:f5:d1:b2:4d:40:c1:9d:8c:a8:4e:62:
         a5:ce:79:9f:69:50:97:15:f7:93:c4:47:7b:b9:e9:b3:94:9d:
         7e:b3:fb:1f:84:b5:4b:77:d4:45:27:05:45:ec:69:b8:84:bd:
         75:b8:e6:81:6c:2b:bd:a9:89:82:00:54:46:19:b0:bb:25:22:
         de:fe:8e:26:0f:25:4d:54:5c:fb:f0:24:60:19:fa:8f:85:9d:
         86:96:a6:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMjEwMTgw
MjI2MThaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwN0UwMjRGM0Q0Mjcw
MDMxRUFENjYxMTkxNEQ1QjNEM0M5QUNBMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRnJ4hm6EU3mlCY/HKAhHjPwSG1moU+65gd1oWyTNL0BxvNhXl
JPym+EqCUUzG3i6f7POoJmfGqifE0aMauMTTfcSNlMQMx/xVJ8UMJnBMpzJrsFY7
fYQ+b9WAiipLgirBA4HIFeuywP/TKw61qb3Mq0n+SIKoxbgKMl0TisW3w2drCkzO
gZItNj60tw6YxXbUbmUDsCV1M8fGpY69XsPtMi4zkl6TlrBPw3w+gGfw5czF+Oq3
iAWE5acRWGapzs0bJGRAkT/66BQpnPeYnp0AGphmcongjFiEIPqX/Dyi/QAOJF4a
vLAUnC17IgThcApHYQBzvxnmOVldPFJikukZAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUYH4CTz1CcAMerWYRkU1bPTyayjAwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9ZSDRDVHoxQ2NBTWVyV1lSa1UxYlBUeWF5akEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0wrDMA0GCSqGSIb3DQEBCwUAA4IBAQBccn5LonVO10O6nzd5PNbH
NN9pTsmV4el9C0fdZwnzed4uYwh23BH3C5tBaWxPHkooYOKxw3lie6pxSk8sDIZs
bC0bMGORhQ50AHzvs37+0lmB/heWnHfodyPLQBDAOHDHa1MC7Vu1eL9KLyUXx4oZ
NP40K+OB579K44rDwbjhtrSl9kVItafM8wUWhSEDQhdMK2IqQVbAh1EUz8x97C+E
sEmdoC73IUwK9dGyTUDBnYyoTmKlznmfaVCXFfeTxEd7uemzlJ1+s/sfhLVLd9RF
JwVF7Gm4hL11uOaBbCu9qYmCAFRGGbC7JSLe/o4mDyVNVFz78CRgGfqPhZ2GlqYd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org