Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/g6cExCi3F2boO3Ak20VDIVBl0aw.roa
File:                     g6cExCi3F2boO3Ak20VDIVBl0aw.roa (raw, json)
Hash identifier:          SUnZEid4GczZ2Q3VX/TB2NrxzHEkFL20RSzhZw2s9Ds=
Subject key identifier:   83:A7:04:C4:28:B7:17:66:E8:3B:70:24:DB:45:43:21:50:65:D1:AC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0102
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/g6cExCi3F2boO3Ak20VDIVBl0aw.roa
Signing time:             Fri 01 Sep 2023 01:33:17 +0000
ROA not before:           Fri 01 Sep 2023 01:33:17 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.173.64.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:17 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=83A704C428B71766E83B7024DB4543215065D1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:e6:2b:ba:25:82:5c:9b:48:07:01:c9:35:
                    03:c6:e1:3a:55:0f:a9:a6:bd:3f:9c:77:d6:cc:28:
                    a6:7b:5e:e6:70:cc:f7:87:5e:51:50:57:b1:dc:8c:
                    a3:6f:a2:d5:c3:10:04:f4:64:18:4f:45:3e:d6:0b:
                    b7:70:5e:c3:66:ca:7d:b6:ce:f6:12:a5:98:05:41:
                    b5:5c:89:1b:92:bb:11:2a:af:10:34:f7:9d:82:c6:
                    4e:e0:30:d1:5c:78:e0:69:c8:1d:c0:c2:25:57:c7:
                    18:d8:ad:30:43:74:5e:83:8f:ed:18:6d:7d:be:0a:
                    61:ec:89:fc:87:d2:70:e9:f9:bc:49:d2:92:d9:00:
                    56:df:5d:3b:97:9b:7a:4d:4f:67:10:cf:fa:4e:80:
                    8c:fb:6b:d2:9e:ef:92:5f:c6:11:54:7e:15:93:1d:
                    92:df:a7:5b:19:15:c3:46:dd:49:98:76:c7:27:9f:
                    5f:c2:84:4d:63:42:18:87:ee:4d:eb:ea:67:d8:9c:
                    42:a4:1f:9d:29:e4:71:a8:8b:c1:1a:4d:ac:64:59:
                    67:e8:ec:e4:fc:8f:7d:f4:f4:72:6f:b2:cd:ad:db:
                    6a:1e:a0:40:1e:05:50:5e:9f:b7:1f:5c:f2:74:b0:
                    f0:94:fe:42:08:90:ae:ab:41:53:5e:97:8d:7b:f2:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:04:C4:28:B7:17:66:E8:3B:70:24:DB:45:43:21:50:65:D1:AC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/g6cExCi3F2boO3Ak20VDIVBl0aw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d6:f7:79:77:ef:df:5b:15:a8:e4:e3:3f:2a:c9:88:1b:64:bb:
         1a:ca:aa:ba:c3:1f:9f:9c:d8:e1:56:a4:67:c7:a7:5f:73:9c:
         e5:76:b3:1f:32:9e:3f:90:5d:51:27:41:12:f3:ed:08:43:96:
         64:b5:f4:19:90:84:7a:ff:ac:b9:e3:a3:c5:20:d2:57:a0:1a:
         d7:1a:c6:60:7e:63:89:2d:d2:81:77:b6:d3:68:eb:52:b2:4f:
         74:a4:0a:3b:e1:a8:60:44:40:f8:ca:4e:4c:d8:c7:61:76:1a:
         ae:fc:79:60:ef:f2:0b:15:83:16:bb:a0:f8:7d:d6:17:8c:13:
         a6:e4:2d:44:87:b6:d9:a4:0c:cb:ad:98:a1:28:99:64:25:ae:
         6e:6f:45:c5:2e:68:3d:48:07:86:35:e1:24:36:7c:8f:aa:68:
         bf:e7:91:1d:30:09:97:f7:fa:4d:c6:6b:2b:5a:58:db:d1:99:
         dc:77:a8:30:e7:47:9f:94:ba:ad:b6:47:d8:a4:ce:e2:30:24:
         4d:70:b4:4b:44:14:5d:41:64:54:b8:5a:e7:9a:18:bc:46:88:
         4e:6a:c9:b6:7c:3e:82:31:3f:b1:89:ea:cf:ed:e5:3c:71:38:
         8d:a0:dc:c2:56:b5:b7:7f:90:de:55:d5:7d:2d:09:90:0d:29:
         e9:e8:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org