Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/bB-qSF2Iv3gue0U9Kw19cMRpGmc.roa
File:                     bB-qSF2Iv3gue0U9Kw19cMRpGmc.roa (raw, json)
Hash identifier:          beLUFSOfroWOoYDfpGNJRgO14aeckjuUXu3zQe2VPTw=
Subject key identifier:   6C:1F:AA:48:5D:88:BF:78:2E:7B:45:3D:2B:0D:7D:70:C4:69:1A:67
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       FA
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/bB-qSF2Iv3gue0U9Kw19cMRpGmc.roa
Signing time:             Fri 01 Sep 2023 01:33:14 +0000
ROA not before:           Fri 01 Sep 2023 01:33:14 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:14 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=6C1FAA485D88BF782E7B453D2B0D7D70C4691A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:df:58:ed:fa:ee:a0:eb:e2:b6:b8:2f:9a:
                    54:f9:82:02:3a:c4:f3:98:6f:8b:26:cf:62:f6:45:
                    ac:17:30:31:c9:73:a3:b4:58:2a:f3:58:cf:f3:d4:
                    11:0b:0f:b6:06:d5:16:c0:13:2c:34:a6:a0:85:ce:
                    0a:4d:c4:a2:39:b9:30:6a:e4:f9:1b:4c:73:a2:ab:
                    f8:3d:e5:7d:20:b4:81:eb:ae:9a:1c:0c:7f:2e:d1:
                    0a:c3:79:65:e2:2c:72:ff:dc:3d:dc:e9:a3:ab:96:
                    5b:c4:01:8d:74:e2:95:4e:0a:28:6f:cd:ee:1c:55:
                    84:c1:92:70:ad:25:36:e7:a0:55:28:69:d6:79:22:
                    88:77:9a:8d:4d:7a:3f:0e:68:04:80:11:c2:a6:fc:
                    71:6f:37:f3:e3:d9:e1:ed:ba:38:91:f8:3c:33:b3:
                    d0:d1:ae:16:e1:05:82:c5:f3:65:a6:3f:c9:68:f1:
                    37:3b:81:5b:a6:13:30:0f:2e:c9:3a:23:57:ae:a7:
                    e0:1f:c7:92:d4:58:81:06:22:82:2d:6e:d2:b6:89:
                    90:33:54:98:02:47:ee:18:31:80:72:9d:a0:dd:d6:
                    fc:db:2c:7e:f7:e4:20:e6:88:f6:4e:5b:3d:15:86:
                    03:49:af:fc:85:af:9e:d1:cc:94:86:ee:dd:62:66:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1F:AA:48:5D:88:BF:78:2E:7B:45:3D:2B:0D:7D:70:C4:69:1A:67
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/bB-qSF2Iv3gue0U9Kw19cMRpGmc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:33:73:33:40:53:4c:f6:b9:bc:e7:5b:07:3b:11:f7:c1:5c:
         d0:28:be:54:4e:92:1e:ab:54:90:93:3d:0b:3b:c0:d5:e2:a1:
         8e:02:ea:30:ac:de:a6:8f:39:61:cf:76:10:8e:c1:2e:ff:3c:
         41:c6:09:5b:a9:7d:83:e1:5e:10:9e:d1:36:52:32:ee:d9:8d:
         50:58:78:8a:e4:f0:89:28:93:28:e9:b7:a9:9f:9a:93:9d:08:
         11:5f:d4:b7:5c:f6:2d:8f:59:aa:e5:71:46:47:b6:79:82:17:
         d2:27:b8:9e:db:79:eb:0c:20:6f:72:7b:4e:92:87:e1:ec:8c:
         f0:86:4c:7c:bf:6a:93:b1:c9:db:de:38:48:db:c3:14:48:59:
         31:25:84:61:4a:b4:5a:c4:5b:ab:05:07:1c:52:a7:82:5a:a3:
         43:77:44:f3:39:1b:74:b0:72:1e:07:3f:0d:57:90:f8:7f:ad:
         88:3c:a2:9b:85:ff:29:cb:54:e9:3e:57:74:7b:98:20:b5:6a:
         90:f7:7c:80:23:d5:78:72:b9:fb:ae:00:86:e0:7b:a3:59:cb:
         78:aa:8a:49:ba:de:59:b4:91:7a:ec:a4:27:0f:6a:20:bb:d5:
         b3:7c:f3:fb:d3:b2:db:fc:33:f0:8c:23:dd:53:dc:99:7d:82:
         07:84:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org