Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/emXA9Orkf67eGdIe_VKJqsrhe30.roa
File:                     emXA9Orkf67eGdIe_VKJqsrhe30.roa (raw, json)
Hash identifier:          E9K3w5oVrD0xn2wYGvpXyj4D158E6I8N7RjG1wgRnMI=
Subject key identifier:   7A:65:C0:F4:EA:E4:7F:AE:DE:19:D2:1E:FD:52:89:AA:CA:E1:7B:7D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       4C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/emXA9Orkf67eGdIe_VKJqsrhe30.roa
Signing time:             Tue 11 Oct 2022 09:44:18 +0000
ROA not before:           Tue 11 Oct 2022 09:44:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        124.109.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:44:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=7A65C0F4EAE47FAEDE19D21EFD5289AACAE17B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:b4:b0:e4:b3:42:0c:84:7d:35:5f:94:e9:
                    d6:35:9c:18:b6:16:08:5a:3f:a0:65:0d:5e:5c:41:
                    91:c9:21:85:c6:c2:4d:9f:01:98:b8:6d:23:50:1a:
                    4d:29:4b:36:e8:14:eb:e6:68:3c:24:04:53:dc:5c:
                    19:a2:5f:80:03:76:fd:84:2c:fb:71:55:f0:36:ee:
                    ba:3f:d8:05:cb:b5:aa:b3:f1:0c:45:7e:96:2f:99:
                    39:39:91:6f:ca:0f:92:4d:ca:59:3b:b8:5a:c9:14:
                    32:64:bb:eb:9e:6a:3c:41:fd:ac:68:d2:a8:34:22:
                    2e:43:4e:08:34:c5:f3:36:a2:ee:c5:2e:f5:48:5a:
                    b0:7c:eb:39:04:55:f5:2e:b9:d6:2d:c5:4e:c4:17:
                    cd:c9:ae:e9:b9:7f:2f:ab:d7:af:30:13:71:df:48:
                    31:7b:a4:d5:c0:d0:3d:39:14:79:7e:e3:32:f9:7a:
                    3d:50:c7:a0:4b:d4:8b:0a:28:10:4e:11:ad:62:14:
                    42:2e:f4:5e:e0:45:04:7a:e3:82:87:cf:aa:35:e3:
                    1d:e1:44:3b:55:f0:07:9d:ee:7a:48:6b:64:fd:f2:
                    9c:a4:7a:25:50:68:d2:5e:c4:3d:f7:08:cd:f6:7d:
                    29:34:27:43:7a:29:bc:17:07:5b:e4:1c:79:48:52:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:65:C0:F4:EA:E4:7F:AE:DE:19:D2:1E:FD:52:89:AA:CA:E1:7B:7D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/emXA9Orkf67eGdIe_VKJqsrhe30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:c9:df:a2:48:8b:61:4f:be:bf:0a:db:4d:7f:ff:e6:cc:
         ad:ce:75:fe:05:14:13:98:7b:a8:ef:c1:23:a3:03:67:49:bc:
         82:2b:a6:55:9e:10:f1:6b:a5:0f:b7:7c:f2:40:6c:da:0c:d4:
         9f:bb:ba:51:fc:de:4b:0a:f9:26:8c:4e:57:b4:e3:60:96:77:
         bd:34:9c:e8:f4:cf:21:58:3d:97:45:16:8d:98:3f:43:bf:55:
         2f:a6:ea:93:4a:b0:6c:10:14:41:99:98:02:a5:54:69:10:e8:
         ca:c1:02:09:0f:9a:93:d6:82:37:aa:ad:9a:4d:fb:a5:98:cd:
         32:33:41:87:ae:10:f2:80:48:fe:ee:15:39:a2:10:20:da:ff:
         bc:f9:27:79:2f:d8:06:3a:c7:8c:39:9a:16:50:f0:0f:0d:83:
         ae:a2:4e:bc:e7:9a:51:85:d7:02:11:94:b9:13:7f:4b:45:33:
         92:24:f3:74:07:8f:93:44:d3:6f:de:9f:4f:ff:66:1d:d8:a7:
         67:4a:a1:41:b7:92:39:24:53:74:75:d8:5a:dd:85:14:f0:43:
         5b:37:9f:96:55:35:11:9e:8d:92:77:0c:51:76:87:e1:28:80:
         db:9a:43:d7:13:ed:a2:75:c1:3e:53:32:2d:56:e9:75:37:0e:
         c9:03:23:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org