Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dozL0XySdSLHqY6N0eEW-0ZI_6o.roa
File:                     dozL0XySdSLHqY6N0eEW-0ZI_6o.roa (raw, json)
Hash identifier:          NaZvvNmg72nww3jjPXTHQ/vbmfrPEUW7KvDFzqjOkaI=
Subject key identifier:   76:8C:CB:D1:7C:92:75:22:C7:A9:8E:8D:D1:E1:16:FB:46:48:FF:AA
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       010A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dozL0XySdSLHqY6N0eEW-0ZI_6o.roa
Signing time:             Fri 01 Sep 2023 01:34:22 +0000
ROA not before:           Fri 01 Sep 2023 01:34:22 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:22 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=768CCBD17C927522C7A98E8DD1E116FB4648FFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:a6:b7:90:d0:a9:37:cc:81:a5:b1:15:3c:
                    20:e2:b6:9a:2e:2d:53:06:34:07:95:ac:de:92:b1:
                    3d:fe:17:90:2e:fa:d2:b0:cd:4f:bd:c6:c9:9f:b6:
                    7b:00:fa:6f:f3:9d:c3:11:c7:00:52:8b:60:c2:d6:
                    dd:6c:1c:4c:07:24:cc:5f:64:25:67:5e:b5:c1:09:
                    f6:53:38:b9:17:e3:34:50:2a:a5:e7:1a:96:f1:79:
                    d1:00:94:e0:91:62:5c:2a:00:69:c5:47:71:0e:57:
                    5e:cf:2d:98:14:af:2d:2c:12:c5:03:ac:9c:47:bd:
                    90:18:02:9c:d2:74:ed:dd:9f:54:54:30:ec:87:1c:
                    06:08:dc:ab:c2:40:76:8a:6c:d0:11:98:75:ce:ad:
                    ab:e6:ac:87:b6:9d:8a:13:82:f5:9c:42:64:1f:6d:
                    40:14:65:38:67:9d:59:09:7c:41:03:60:c5:24:3e:
                    8c:00:cb:71:c9:ee:84:ab:26:60:da:07:3b:cf:4c:
                    ad:bd:cf:12:a7:b9:95:ce:af:65:d4:92:74:a3:be:
                    ba:90:0a:4e:eb:a8:4a:cc:57:fd:ff:66:94:00:32:
                    9c:06:cc:b1:5c:47:fe:82:5b:c2:e9:24:ea:32:d8:
                    ce:0b:d0:ee:5c:3e:54:a8:ab:17:4d:38:c4:48:f1:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:CB:D1:7C:92:75:22:C7:A9:8E:8D:D1:E1:16:FB:46:48:FF:AA
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dozL0XySdSLHqY6N0eEW-0ZI_6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d9:05:9c:39:f4:bc:85:d4:ee:31:4d:f4:bf:82:bc:e9:e5:03:
         05:07:c3:a4:18:50:ce:c3:d3:31:ad:8e:65:6d:64:e6:a4:ea:
         67:c8:d3:8f:c8:7f:20:4a:25:2b:a6:59:f3:b6:e8:c2:a2:ac:
         71:5b:ec:de:6e:8c:a7:56:f6:0a:a5:6d:91:cc:77:8e:26:2e:
         d2:25:97:a8:94:76:c4:9f:72:af:23:9d:13:69:36:69:3d:de:
         44:8b:87:b5:a5:62:fc:e5:f8:22:6d:be:2c:bf:c6:b5:6a:01:
         a2:52:bc:5e:2b:c4:a4:60:39:1e:7a:bf:d2:24:ca:e5:ae:ba:
         9b:55:27:62:c4:bd:6e:b4:54:ec:40:9c:c9:6e:39:87:f9:b5:
         87:c4:20:9d:cd:0f:bb:59:15:2f:8b:b3:ce:fe:aa:ff:0c:b7:
         7c:a7:32:df:55:2e:0d:9c:4a:f0:c7:be:f4:43:48:11:91:4b:
         1e:da:af:d6:3b:e8:88:96:23:4d:6f:59:d8:36:68:29:38:d3:
         e9:0e:67:f6:f8:9b:46:10:75:24:a4:14:78:05:1d:b8:b0:2c:
         ed:21:3b:4b:42:9f:a1:23:75:c2:6c:2a:7a:65:08:9e:ea:60:
         00:27:32:45:99:13:b5:64:3e:56:72:a2:7b:46:ab:20:11:92:
         15:48:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org