Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iOA2VjQqGyIWnlFuwhDVmotxgxs.roa
File:                     iOA2VjQqGyIWnlFuwhDVmotxgxs.roa (raw, json)
Hash identifier:          JcgIGbj279QuHq0+NmrIFhu7Sio0AOLpLK7lFQTM2KI=
Subject key identifier:   88:E0:36:56:34:2A:1B:22:16:9E:51:6E:C2:10:D5:9A:8B:71:83:1B
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0132
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iOA2VjQqGyIWnlFuwhDVmotxgxs.roa
Signing time:             Sun 01 Oct 2023 01:30:49 +0000
ROA not before:           Sun 01 Oct 2023 01:30:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=88E03656342A1B22169E516EC210D59A8B71831B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:d3:cc:d8:62:b1:82:1c:cf:06:b1:ee:74:
                    0b:79:8d:e5:62:06:ef:73:6a:31:24:0c:df:da:ae:
                    85:b4:46:ef:28:c7:1b:8b:1f:39:ae:d2:4b:c4:f1:
                    62:52:c4:00:f5:9f:ca:e8:ee:fa:79:27:42:8e:c0:
                    24:6d:59:b2:a7:6b:5d:f5:b8:84:19:2c:2a:c7:05:
                    ee:02:c5:5c:a6:9a:7b:15:38:5a:65:93:38:ed:3d:
                    60:66:78:60:cc:fa:78:d4:27:1a:ab:58:7e:2e:9f:
                    a5:4d:11:e2:d5:e2:6e:a2:07:44:57:87:19:e4:e3:
                    80:81:8d:a7:29:85:63:b3:ce:81:d9:1d:03:1b:7b:
                    bf:92:8f:70:e0:fc:83:36:be:c3:04:4c:a9:b6:44:
                    f8:d6:be:67:75:09:19:44:2c:bc:87:73:38:9f:8e:
                    73:ff:f2:df:5d:26:29:f6:ae:21:c5:07:80:03:09:
                    a1:1a:16:c5:78:d1:82:6e:8d:a0:11:1d:ca:61:e4:
                    9e:48:47:27:ed:c5:ce:a7:0f:8a:8f:eb:1e:70:eb:
                    f1:26:1c:ee:47:12:45:81:af:3b:d3:30:3d:1b:07:
                    dc:86:48:66:fa:1b:8c:84:1f:f5:b2:b8:a2:f7:46:
                    2e:dd:95:3f:7e:12:34:6b:f0:36:fd:ff:46:e5:89:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E0:36:56:34:2A:1B:22:16:9E:51:6E:C2:10:D5:9A:8B:71:83:1B
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iOA2VjQqGyIWnlFuwhDVmotxgxs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:aa:0c:7c:e1:db:d1:a0:c0:16:8e:20:b5:c9:e7:91:28:
         06:51:4b:66:46:b2:1d:3f:11:b6:3f:1f:2d:15:ae:56:82:b0:
         4e:02:d4:83:37:8e:ed:9a:c9:9d:fa:d7:af:46:5d:34:e4:5e:
         66:18:e2:98:3e:d4:66:4b:5b:d2:ae:b0:e6:03:cd:7a:2d:16:
         ae:0f:83:35:61:51:fd:f2:04:5a:f4:d8:27:bf:5a:8b:5d:53:
         ef:18:64:f4:26:96:10:2d:6e:22:b3:70:65:11:5e:80:2b:c7:
         64:76:b4:9d:62:55:c0:f2:a4:e6:05:74:f5:4e:e0:73:82:9f:
         4e:02:2e:6b:a0:f1:77:74:24:28:8c:c8:cf:37:bc:fb:23:a9:
         c9:98:f5:e8:49:08:20:18:71:4d:39:61:51:0e:1f:4f:cd:bd:
         53:bc:27:ca:c7:b9:7a:03:34:41:00:fb:5f:9c:66:db:45:fe:
         63:d8:9a:67:35:2f:88:2b:16:ea:b4:66:43:c7:df:c5:94:98:
         0c:e3:c1:99:fd:25:66:95:28:68:11:6b:5b:13:97:5a:88:20:
         fb:a2:f4:29:bf:1b:0a:63:b6:2d:30:a0:26:21:a7:98:58:e4:
         3c:0d:9e:ac:f8:c1:fa:fe:59:1c:4f:7c:8c:19:24:33:19:00:
         06:2e:5f:e7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICATIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNDlaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg4RTAzNjU2MzQyQTFC
MjIxNjlFNTE2RUMyMTBENTlBOEI3MTgzMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc/NPM2GKxghzPBrHudAt5jeViBu9zajEkDN/aroW0Ru8oxxuL
Hzmu0kvE8WJSxAD1n8ro7vp5J0KOwCRtWbKna131uIQZLCrHBe4CxVymmnsVOFpl
kzjtPWBmeGDM+njUJxqrWH4un6VNEeLV4m6iB0RXhxnk44CBjacphWOzzoHZHQMb
e7+Sj3Dg/IM2vsMETKm2RPjWvmd1CRlELLyHczifjnP/8t9dJin2riHFB4ADCaEa
FsV40YJujaARHcph5J5IRyftxc6nD4qP6x5w6/EmHO5HEkWBrzvTMD0bB9yGSGb6
G4yEH/WyuKL3Ri7dlT9+EjRr8Db9/0blieGLAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUiOA2VjQqGyIWnlFuwhDVmotxgxswHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9pT0EyVmpRcUd5SVdubEZ1d2hEVm1vdHhneHMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0wqGMA0GCSqGSIb3DQEBCwUAA4IBAQCBsaoMfOHb0aDAFo4gtcnn
kSgGUUtmRrIdPxG2Px8tFa5WgrBOAtSDN47tmsmd+tevRl005F5mGOKYPtRmS1vS
rrDmA816LRauD4M1YVH98gRa9Ngnv1qLXVPvGGT0JpYQLW4is3BlEV6AK8dkdrSd
YlXA8qTmBXT1TuBzgp9OAi5roPF3dCQojMjPN7z7I6nJmPXoSQggGHFNOWFRDh9P
zb1TvCfKx7l6AzRBAPtfnGbbRf5j2JpnNS+IKxbqtGZDx9/FlJgM48GZ/SVmlSho
EWtbE5daiCD7ovQpvxsKY7YtMKAmIaeYWOQ8DZ6s+MH6/lkcT3yMGSQzGQAGLl/n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org