Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/me0mA4Dw0z9nP6vohPstEJVJy_c.roa
File:                     me0mA4Dw0z9nP6vohPstEJVJy_c.roa (raw, json)
Hash identifier:          rJWgsCoXjkV9ZEBuh/mTXfikfIiViFjtmrl0n61s8+Q=
Subject key identifier:   99:ED:26:03:80:F0:D3:3F:67:3F:AB:E8:84:FB:2D:10:95:49:CB:F7
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       013F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/me0mA4Dw0z9nP6vohPstEJVJy_c.roa
Signing time:             Sun 01 Oct 2023 01:33:17 +0000
ROA not before:           Sun 01 Oct 2023 01:33:17 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:17 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=99ED260380F0D33F673FABE884FB2D109549CBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:52:c8:cb:fd:40:ee:94:46:c4:3a:4f:8a:
                    bf:20:6e:9a:37:c7:48:a8:60:c7:64:bb:c4:44:41:
                    74:86:f3:d7:14:15:9d:c8:3c:0b:26:50:d6:ec:8f:
                    68:02:3a:37:32:d8:34:c3:fb:c4:ad:6b:fc:36:d9:
                    66:2c:24:0b:ca:c8:7f:28:20:ba:2d:34:cf:1c:b9:
                    9b:c7:2a:ea:80:19:4d:3c:0b:12:85:45:f5:35:a2:
                    2d:33:10:f0:4d:0d:f8:4d:86:92:8f:4f:07:6a:a6:
                    ca:aa:70:6f:90:6c:e9:dd:68:ea:10:a2:f5:e0:2d:
                    2a:5d:2a:4f:0e:67:a3:0c:af:68:07:51:5c:43:a4:
                    ca:7f:36:d7:17:63:39:43:20:6d:cf:d7:e6:fb:54:
                    99:53:e9:12:3d:5c:e5:e7:47:80:a4:a9:47:67:f4:
                    67:38:bd:42:f6:d5:68:b0:35:06:ce:05:5a:1b:d9:
                    60:39:4c:cd:23:bc:3c:a4:ed:d4:46:60:43:1f:67:
                    38:54:f0:ca:a7:e9:a0:b7:7a:ba:cb:a0:40:64:42:
                    30:f1:ca:38:fa:dd:34:f7:68:ff:1a:d9:c2:97:ba:
                    2b:9d:68:94:ad:b4:66:ef:35:a0:a4:7c:a2:45:6d:
                    ad:12:ca:f6:2a:8a:75:8b:ee:40:f5:29:2c:ac:bd:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:ED:26:03:80:F0:D3:3F:67:3F:AB:E8:84:FB:2D:10:95:49:CB:F7
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/me0mA4Dw0z9nP6vohPstEJVJy_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:97:55:a4:76:ea:43:b3:2e:46:fd:3c:92:ec:24:39:a1:
         94:15:22:f7:70:0e:40:1c:72:60:06:b4:97:e9:d6:c9:be:2c:
         03:38:e0:23:59:3d:be:5d:ab:20:41:fa:2e:ca:7d:df:b7:28:
         5f:95:bd:43:a9:db:89:a2:ff:44:0f:1e:e8:11:93:f5:a4:e0:
         79:d9:b2:07:80:a3:4c:68:ec:51:d6:13:a3:a8:10:d5:bd:da:
         fa:84:81:f5:e2:c9:1f:28:5c:85:ef:79:86:e0:29:65:4f:4d:
         f7:df:03:b1:6d:49:d7:d4:8f:78:11:38:54:2d:08:62:df:14:
         d7:15:19:da:3e:d3:77:7a:d4:af:65:55:b4:ab:a3:01:72:5c:
         51:01:12:5e:70:a4:b0:46:51:7a:55:64:c2:65:14:2b:35:3f:
         b6:e1:37:c2:49:04:b3:d0:d9:0b:97:a3:07:71:3f:bb:c2:3b:
         2f:30:76:52:a7:85:22:d6:68:d5:d7:e9:53:83:c7:d4:5b:ad:
         d0:9f:58:dd:9d:fd:f4:ba:55:af:e5:14:e6:2c:f1:24:ce:bd:
         d8:1b:c6:17:5a:37:4c:3c:f7:3d:b8:97:7a:d1:c2:6a:b1:07:
         8e:c9:42:00:3d:62:8d:19:0a:00:a1:af:8b:36:63:cc:33:cb:
         ae:0f:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org