Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e1sgV2CJj8B7G_Olgl1tp5eRyMg.roa
File:                     e1sgV2CJj8B7G_Olgl1tp5eRyMg.roa (raw, json)
Hash identifier:          VDmPjMd7eEb5Jh4uRnps1smad6Tp7QcLXj5G0t2V6bg=
Subject key identifier:   7B:5B:20:57:60:89:8F:C0:7B:1B:F3:A5:82:5D:6D:A7:97:91:C8:C8
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E8
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e1sgV2CJj8B7G_Olgl1tp5eRyMg.roa
Signing time:             Fri 01 Sep 2023 01:33:06 +0000
ROA not before:           Fri 01 Sep 2023 01:33:06 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:06 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=7B5B205760898FC07B1BF3A5825D6DA79791C8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:2a:55:75:2f:6a:da:eb:97:b2:b2:b6:69:
                    8f:e3:4d:d1:df:d3:1a:02:b1:e5:8e:32:83:90:37:
                    9e:55:a5:8b:8f:e5:c6:3d:56:64:4a:df:bc:0a:dc:
                    5f:fa:b7:9d:63:2d:bb:e6:21:29:ad:b6:eb:39:df:
                    ae:a0:b5:44:d8:18:cd:f1:5c:dd:de:af:8b:14:ce:
                    36:a1:97:6f:86:7f:61:43:01:b2:60:80:55:8f:6a:
                    1d:e5:11:ed:81:60:91:c0:2f:f3:04:6e:1c:5b:8d:
                    36:f8:ce:d1:85:98:de:bd:6c:47:c2:aa:0b:a6:e0:
                    db:2e:f7:2c:8f:68:3b:51:a3:d7:4c:81:da:f9:bc:
                    31:cd:c7:fa:1a:aa:d7:04:b5:e2:11:a8:1b:12:d2:
                    d3:6f:0e:bd:6a:3f:66:35:d1:df:bd:c9:8a:ff:05:
                    e9:93:05:51:a9:a9:46:af:4b:b5:74:d8:28:b5:de:
                    8b:9a:32:e0:5b:d7:ad:16:3a:1e:14:02:2e:41:58:
                    0a:17:31:58:62:fc:f3:14:8d:ef:62:29:7e:89:23:
                    86:b2:a9:5e:30:c0:e3:d6:4f:ea:6e:70:d9:bf:f3:
                    70:07:10:7c:ef:a8:c6:25:06:52:bd:a8:8f:d4:88:
                    cc:76:18:b4:73:73:06:c6:87:2d:68:85:73:f1:c2:
                    cb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:20:57:60:89:8F:C0:7B:1B:F3:A5:82:5D:6D:A7:97:91:C8:C8
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e1sgV2CJj8B7G_Olgl1tp5eRyMg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:52:0e:c9:5e:d7:35:45:6e:d9:4f:50:89:ab:11:fd:cc:a0:
         94:0c:f2:4b:45:20:a2:df:75:f9:00:99:23:b7:b2:13:66:96:
         98:8b:87:06:d5:98:1b:7f:2a:26:be:74:3e:31:93:3c:79:1d:
         38:60:f6:5c:89:7c:ac:3b:49:cd:d9:42:9d:9b:9b:ae:9f:72:
         02:38:7b:39:d6:a1:cb:58:bf:4d:97:c0:e6:10:a2:e9:28:40:
         d4:6a:f0:d1:ca:53:e7:9b:0b:72:96:bb:bb:63:4b:fd:07:84:
         fd:7f:c0:7e:86:63:30:d2:6a:6a:04:51:ca:cd:6c:cd:5e:1b:
         e3:41:28:6d:17:7c:99:9b:5e:09:38:23:47:7f:11:45:1b:be:
         41:59:54:f0:35:a7:c6:2a:fb:8d:6e:0a:bc:c2:a5:66:0b:7b:
         8a:f8:e4:d7:c9:b1:3e:a2:97:69:bf:f3:74:21:84:62:72:37:
         6d:d0:ce:44:5c:19:7c:0e:6c:6b:bf:d5:b5:d7:be:0d:dd:7a:
         3e:8a:9e:00:97:23:cf:aa:69:f4:7b:b4:e8:5b:e2:fe:50:c1:
         e5:02:ae:dd:28:f4:ab:21:95:3e:91:27:4a:c4:3b:51:3b:ab:
         11:3d:56:1c:8f:c6:a7:6f:0f:ee:6b:41:83:59:7e:f0:11:4a:
         1b:84:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org