Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ofLN5wUlJigI6u_aig07qLezEvE.roa
File:                     ofLN5wUlJigI6u_aig07qLezEvE.roa (raw, json)
Hash identifier:          aKye3PcZ/el7+6a7h0r84BBH2O3ZaxfaYifMpiga7Mc=
Subject key identifier:   A1:F2:CD:E7:05:25:26:28:08:EA:EF:DA:8A:0D:3B:A8:B7:B3:12:F1
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E6
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ofLN5wUlJigI6u_aig07qLezEvE.roa
Signing time:             Fri 01 Sep 2023 01:33:06 +0000
ROA not before:           Fri 01 Sep 2023 01:33:06 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:06 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A1F2CDE70525262808EAEFDA8A0D3BA8B7B312F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:f6:92:ee:73:5b:5c:92:1d:be:0f:85:04:
                    26:1e:f6:3a:f4:f4:84:32:34:3c:28:2a:09:47:41:
                    dd:a0:6f:0a:8a:38:13:81:a2:71:05:c4:76:25:63:
                    62:24:48:38:5a:d5:fa:66:38:cd:5c:f9:29:20:b5:
                    73:b1:c7:bc:20:dc:73:07:ed:50:32:69:a4:43:9c:
                    6b:8e:38:7a:4a:c7:da:c5:65:b1:cd:ad:ca:cb:79:
                    08:41:94:7e:75:50:68:fd:96:c1:0e:64:7d:1b:91:
                    78:ed:bf:f1:65:c0:ab:22:08:56:c5:84:7e:d3:5c:
                    13:3c:cc:22:95:5d:5a:34:dc:02:29:f0:0d:5a:88:
                    b0:06:87:10:78:a3:fb:88:ee:60:18:d7:29:e5:37:
                    5f:4e:36:85:93:2a:7a:93:9e:70:98:64:75:bf:3b:
                    dd:60:83:fb:eb:33:40:3e:8a:86:e9:30:b0:9b:94:
                    5f:e8:81:a7:18:b5:cc:14:97:a3:26:31:47:d8:1a:
                    aa:d7:1a:5c:ed:7a:71:21:b5:cc:d3:59:9b:fc:cd:
                    de:93:2f:b8:73:3b:9b:3c:c4:69:3e:b7:55:4a:08:
                    1e:be:c8:b2:95:61:e0:35:65:04:78:8b:dc:95:8f:
                    0d:2f:8e:fb:c1:1b:20:5a:b4:e9:34:1e:f2:9b:03:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F2:CD:E7:05:25:26:28:08:EA:EF:DA:8A:0D:3B:A8:B7:B3:12:F1
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ofLN5wUlJigI6u_aig07qLezEvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:25:0e:74:c9:04:ac:ed:42:47:bb:28:fa:23:57:ee:20:
         24:c6:f1:31:13:f5:42:b9:bf:68:1c:f7:8f:73:95:7b:80:76:
         ec:2d:30:6c:3a:60:54:95:43:85:e9:2b:65:eb:63:e5:98:04:
         fb:19:16:59:67:92:79:57:f3:9e:9d:da:6f:e5:8d:3d:0b:00:
         67:db:16:18:27:d7:b3:74:fd:33:02:e2:02:03:21:2c:85:99:
         ff:35:f3:7e:d3:bf:ea:60:be:55:f3:f2:c6:d2:bb:e3:c9:50:
         f4:ba:dd:83:26:13:65:c3:2a:2e:2f:fc:94:58:af:56:2e:05:
         a2:05:74:b3:7d:b8:e8:6b:41:fd:98:11:d8:58:10:a9:42:9a:
         e4:e0:01:81:08:35:f3:40:0f:39:75:77:e0:2c:03:2a:05:f6:
         3e:65:22:db:17:d0:37:7b:ee:bd:c6:53:20:ac:d8:cc:00:7e:
         c0:fd:32:d3:e0:8c:cd:a8:ec:1e:ae:5a:a6:a5:cf:75:8d:c7:
         48:32:3b:9b:7c:1b:6a:bf:f6:d0:4b:30:f9:61:03:7c:4b:04:
         8c:a1:3f:19:b6:b3:32:02:6d:d8:bf:fe:a1:50:67:54:02:0b:
         3d:0d:dc:ad:22:b9:5c:d0:39:d8:36:0d:c7:14:cd:1c:37:1d:
         55:58:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org