Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ldFxraBLA92CXHYR0gBmQfhKbYM.roa
File:                     ldFxraBLA92CXHYR0gBmQfhKbYM.roa (raw, json)
Hash identifier:          eSz8IB65WP8Pj0OZYquZ8z7xZOxKh7R6iPgEioA0MFc=
Subject key identifier:   95:D1:71:AD:A0:4B:03:DD:82:5C:76:11:D2:00:66:41:F8:4A:6D:83
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       010B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ldFxraBLA92CXHYR0gBmQfhKbYM.roa
Signing time:             Fri 01 Sep 2023 01:34:23 +0000
ROA not before:           Fri 01 Sep 2023 01:34:23 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:23 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=95D171ADA04B03DD825C7611D2006641F84A6D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:f5:3b:ed:da:e5:c5:e5:25:b8:1b:06:93:
                    f4:13:19:71:81:b7:5b:6b:80:d1:7a:f2:f6:f5:05:
                    6a:13:e8:36:5a:a2:5b:7b:ed:68:19:cb:91:30:b5:
                    52:f6:73:cd:43:13:3a:46:01:1e:fb:8a:1f:fc:f9:
                    c7:92:b1:f9:6f:e0:ad:cb:5f:ee:25:64:3b:29:60:
                    94:e8:56:02:e6:eb:97:1a:57:a8:9d:7e:b0:32:e4:
                    b6:ed:80:7f:28:45:43:9c:71:42:ce:8f:22:4f:9e:
                    fc:33:f9:19:65:ec:8a:41:2f:31:ae:7f:b2:38:00:
                    16:d1:d9:ae:a6:27:f3:34:02:60:11:9e:ef:ce:c5:
                    64:49:22:b4:0a:77:02:14:68:60:33:32:25:fb:8c:
                    19:84:c1:33:14:d8:fb:af:16:b8:bb:95:02:ed:6f:
                    aa:2a:37:7e:52:21:3c:6e:cb:d9:8e:04:34:7b:3f:
                    03:a6:16:0d:2e:e7:57:ae:00:64:bf:d5:65:9f:b1:
                    30:fe:f2:e1:71:9e:b9:22:2d:80:57:1b:29:c5:c1:
                    21:2f:29:a8:5d:f1:77:1c:d0:31:ba:10:a0:89:04:
                    81:17:5c:4b:2e:be:b7:50:b5:27:b7:43:55:86:56:
                    6c:c3:9a:e7:88:9a:e9:fb:87:5f:2b:e0:98:6b:d1:
                    a3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D1:71:AD:A0:4B:03:DD:82:5C:76:11:D2:00:66:41:F8:4A:6D:83
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ldFxraBLA92CXHYR0gBmQfhKbYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:ea:d2:fb:69:59:27:d7:22:21:6f:0c:32:c2:5c:91:d5:
         3b:6e:0d:ad:87:e6:76:4a:5e:1b:5f:03:54:b9:48:e9:01:43:
         98:31:f5:8d:d8:58:31:76:0d:03:c8:09:ac:e6:1d:82:f1:14:
         10:49:1c:fe:66:e9:b7:ae:c4:90:65:de:9a:ec:82:55:17:64:
         69:46:79:b9:dd:ad:73:5a:f3:d1:a5:36:52:d2:e0:2f:31:a3:
         b6:5f:fb:64:98:23:3c:60:80:06:a6:13:8c:83:84:39:b6:44:
         ed:d6:78:77:ad:02:e9:56:40:60:90:92:fe:69:68:97:cf:8d:
         51:b4:86:43:7e:ba:76:52:65:de:46:34:87:33:82:15:ab:b2:
         79:d0:00:01:eb:0e:09:71:b6:fb:02:28:2e:f2:68:21:17:2b:
         c4:c9:b3:41:92:9a:40:29:9f:ef:dc:45:b7:c2:b5:52:70:1b:
         07:e4:7c:64:d0:23:f6:95:6c:a0:e6:bd:3e:e1:03:d7:e6:1f:
         73:df:f1:c8:dd:68:24:4b:24:98:8a:df:8b:51:fe:99:64:fa:
         65:53:07:23:53:95:06:70:75:d3:d6:35:01:43:89:ce:ba:2a:
         92:c9:8c:81:bc:8d:f7:b4:e8:e4:b7:c0:23:b6:d2:33:b8:67:
         87:09:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org