Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/jna1QrlvPgQotjrkNMan1fkK7zg.roa
File:                     jna1QrlvPgQotjrkNMan1fkK7zg.roa (raw, json)
Hash identifier:          p1WZNDfnR9BvrMALEVlTp7wJgfAQaPmM8WcYvfM8wtM=
Subject key identifier:   8E:76:B5:42:B9:6F:3E:04:28:B6:3A:E4:34:C6:A7:D5:F9:0A:EF:38
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       C6
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/jna1QrlvPgQotjrkNMan1fkK7zg.roa
Signing time:             Fri 01 Sep 2023 01:30:47 +0000
ROA not before:           Fri 01 Sep 2023 01:30:47 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        61.215.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:47 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=8E76B542B96F3E0428B63AE434C6A7D5F90AEF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:5e:a1:a8:64:f2:33:a3:61:25:02:22:2b:
                    d2:63:81:d0:6d:7a:a8:4a:dc:5c:65:a0:1e:4c:07:
                    32:0b:fe:1c:b1:bd:54:9f:32:22:d1:dc:11:71:1c:
                    49:b0:96:71:01:62:8a:b4:32:91:91:21:95:d2:42:
                    2e:5f:63:4e:e9:d9:5a:f1:62:d0:5b:f5:ae:6f:e8:
                    be:00:48:0e:9c:93:29:dd:20:4b:31:b6:94:ed:64:
                    27:b7:f2:c0:29:0c:30:ee:32:23:fe:a6:88:92:39:
                    cc:b9:8e:db:9a:39:ed:d0:3f:f9:c7:7f:12:0b:50:
                    f5:33:45:ac:99:4c:8e:2b:1f:50:aa:8d:f8:8a:ac:
                    1c:24:37:da:9a:7c:e6:1d:23:f9:9f:18:ec:aa:a2:
                    16:e5:3c:8c:11:f5:4d:5b:a4:ae:55:dd:bc:8d:a6:
                    6f:86:aa:91:30:43:08:09:56:d3:65:10:84:10:76:
                    88:eb:a3:77:53:3b:53:0a:7d:e6:1f:fc:6d:4d:a9:
                    f3:31:d1:51:51:10:37:66:5a:30:a7:a4:2a:63:5e:
                    53:bd:c4:25:ae:d7:b2:30:57:46:89:44:36:66:b4:
                    7c:19:98:9b:7a:b5:09:93:93:48:86:f7:34:4f:13:
                    ec:19:0a:f0:14:6e:0b:da:ab:50:02:8f:8b:37:c6:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:76:B5:42:B9:6F:3E:04:28:B6:3A:E4:34:C6:A7:D5:F9:0A:EF:38
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/jna1QrlvPgQotjrkNMan1fkK7zg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:74:28:25:f2:a0:ee:90:2d:f7:46:5a:a1:b5:5c:95:fc:
         a2:99:2c:05:91:a0:45:96:e7:55:bd:de:3c:69:0e:60:93:4b:
         4f:ee:5c:d2:15:5c:5e:e5:b1:8d:c6:da:28:c9:42:94:73:86:
         c6:93:89:95:a7:75:f2:7f:a0:50:4b:bd:24:e0:9f:90:42:86:
         a6:82:2c:19:32:84:b1:ea:c6:0d:26:b4:2a:07:f6:a5:62:b2:
         26:41:2c:a5:35:53:92:09:4f:6a:90:d1:02:00:67:64:53:90:
         b7:40:aa:bd:09:ed:75:6e:66:48:6f:09:0a:5d:0e:ac:22:a6:
         01:fd:25:65:24:15:97:09:dc:2a:7f:93:63:e5:c0:0c:67:37:
         15:e0:42:6d:7a:7e:7c:d6:7d:98:cc:01:55:96:76:2e:2c:db:
         7b:02:60:5c:83:e7:cc:20:eb:35:34:8e:b9:32:4c:a3:ef:7b:
         b5:fa:cd:4c:45:f7:c1:ec:7b:d1:f9:9c:e9:9a:2c:24:1e:8c:
         c1:b2:02:d9:bd:ea:bf:b0:9a:5c:82:f9:b1:db:e3:1d:85:53:
         66:89:9a:79:e6:ba:34:88:01:7e:67:24:01:29:6d:bb:86:f9:
         4d:d1:ec:c1:d5:57:93:a8:e4:d5:ee:9d:a1:93:70:fb:70:fa:
         cd:38:dc:f0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNDdaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhFNzZCNTQyQjk2RjNF
MDQyOEI2M0FFNDM0QzZBN0Q1RjkwQUVGMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8J16hqGTyM6NhJQIiK9JjgdBteqhK3FxloB5MBzIL/hyxvVSf
MiLR3BFxHEmwlnEBYoq0MpGRIZXSQi5fY07p2VrxYtBb9a5v6L4ASA6ckyndIEsx
tpTtZCe38sApDDDuMiP+poiSOcy5jtuaOe3QP/nHfxILUPUzRayZTI4rH1CqjfiK
rBwkN9qafOYdI/mfGOyqohblPIwR9U1bpK5V3byNpm+GqpEwQwgJVtNlEIQQdojr
o3dTO1MKfeYf/G1NqfMx0VFREDdmWjCnpCpjXlO9xCWu17IwV0aJRDZmtHwZmJt6
tQmTk0iG9zRPE+wZCvAUbgvaq1ACj4s3xix9AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUjna1QrlvPgQotjrkNMan1fkK7zgwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9qbmExUXJsdlBnUW90anJrTk1hbjFma0s3emcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQHPdcAMA0GCSqGSIb3DQEBCwUAA4IBAQAlDXQoJfKg7pAt90ZaobVc
lfyimSwFkaBFludVvd48aQ5gk0tP7lzSFVxe5bGNxtooyUKUc4bGk4mVp3Xyf6BQ
S70k4J+QQoamgiwZMoSx6sYNJrQqB/alYrImQSylNVOSCU9qkNECAGdkU5C3QKq9
Ce11bmZIbwkKXQ6sIqYB/SVlJBWXCdwqf5Nj5cAMZzcV4EJten581n2YzAFVlnYu
LNt7AmBcg+fMIOs1NI65Mkyj73u1+s1MRffB7HvR+ZzpmiwkHozBsgLZveq/sJpc
gvmx2+MdhVNmiZp55ro0iAF+ZyQBKW27hvlN0ezB1VeTqOTV7p2hk3D7cPrNONzw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org