Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/evujn0A33sOOa4vPXtuJ1LKFTDk.roa
File:                     evujn0A33sOOa4vPXtuJ1LKFTDk.roa (raw, json)
Hash identifier:          cqHCNuFI5H3gVzZTEWxyoU3SOoq253WzJU5Oo2TiaTk=
Subject key identifier:   7A:FB:A3:9F:40:37:DE:C3:8E:6B:8B:CF:5E:DB:89:D4:B2:85:4C:39
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       F9
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/evujn0A33sOOa4vPXtuJ1LKFTDk.roa
Signing time:             Fri 01 Sep 2023 01:33:14 +0000
ROA not before:           Fri 01 Sep 2023 01:33:14 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:14 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=7AFBA39F4037DEC38E6B8BCF5EDB89D4B2854C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5e:2d:02:ed:28:c7:74:5e:d5:7e:b0:ee:4c:
                    e0:95:e3:28:2c:ac:0f:81:d9:2b:d2:9d:d8:0e:b4:
                    36:0c:45:3a:17:50:8c:77:df:07:19:f9:d8:45:53:
                    5b:b4:88:8f:e5:b2:d3:94:cd:43:3c:46:f2:33:c7:
                    c9:cc:8d:e7:0f:df:ca:79:56:46:9c:2a:c6:c6:ef:
                    63:8e:36:4d:c3:f0:34:d6:11:be:ad:e7:d0:fc:ac:
                    40:03:f8:5a:1a:80:61:59:b8:3b:98:81:00:34:fc:
                    98:7c:76:97:5e:fc:55:13:20:8f:19:b3:1e:dd:43:
                    a9:7d:0d:74:b2:ae:ca:32:d2:43:62:01:81:f1:15:
                    da:03:a9:79:99:82:ab:68:d8:16:28:25:30:1d:f4:
                    51:7d:db:0c:0a:7b:d7:17:4f:39:85:9d:7c:26:03:
                    5e:83:d1:a2:1b:44:96:b4:45:a1:5d:32:45:f5:5c:
                    fd:65:bf:1b:b2:2d:d2:9c:c3:27:41:b9:cc:82:55:
                    51:58:a7:63:5e:53:c6:99:28:2f:a2:57:ad:d6:f1:
                    b0:16:93:21:bd:fb:84:ec:22:b3:fa:ba:e7:6d:a0:
                    65:54:06:91:1d:53:63:13:20:32:fe:5a:e0:e3:6a:
                    23:bd:ed:e1:9a:d4:4f:da:f1:47:66:06:ec:22:26:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FB:A3:9F:40:37:DE:C3:8E:6B:8B:CF:5E:DB:89:D4:B2:85:4C:39
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/evujn0A33sOOa4vPXtuJ1LKFTDk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:ce:00:1e:db:fb:06:46:c9:fa:67:11:1f:2a:aa:84:54:
         ff:5a:6a:87:57:d6:01:c8:48:08:fd:2a:64:de:43:4d:b7:4f:
         47:45:0b:41:a2:4d:2c:53:f1:6f:95:80:b0:69:b0:17:83:40:
         b2:eb:1a:e4:14:30:45:16:d9:a7:b6:2d:31:46:c0:aa:de:3e:
         65:85:31:36:1c:dd:2c:1f:5b:4d:4c:bc:dc:c5:e3:c8:f3:8a:
         ad:43:ae:05:82:21:6c:fd:d6:c3:22:72:05:40:f5:dc:0a:5a:
         7e:43:4f:29:b7:2e:35:0b:fd:52:87:3f:2a:63:6f:93:1f:5d:
         7f:07:7b:a8:a8:31:a0:77:7a:e6:48:14:43:88:b2:2d:5b:ab:
         1f:55:a6:97:8d:02:29:6f:68:53:3d:be:5c:52:84:b6:27:fc:
         67:d1:4d:7d:70:38:f0:9d:e1:7d:b5:5f:0c:fb:e4:d8:40:60:
         f3:54:58:04:eb:d5:06:c0:2c:f0:8f:b2:cc:4f:87:72:07:f5:
         62:88:92:fb:a3:98:f1:d3:d3:a9:62:b0:a0:5f:2d:38:ee:2f:
         f2:f7:3f:a2:b8:51:16:0d:a1:7d:b4:cf:ef:39:38:6e:f7:e0:
         ed:e2:0e:dd:89:42:25:20:13:25:2e:e8:bc:fb:29:a3:a2:37:
         a0:90:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org