Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/okH0kFl4noUq36T8n34FT9lieYs.roa
File:                     okH0kFl4noUq36T8n34FT9lieYs.roa (raw, json)
Hash identifier:          o5LQgLGnZ5tZFFItSCKJgHi/N+eStMtgFpxzIyq58NU=
Subject key identifier:   A2:41:F4:90:59:78:9E:85:2A:DF:A4:FC:9F:7E:05:4F:D9:62:79:8B
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/okH0kFl4noUq36T8n34FT9lieYs.roa
Signing time:             Tue 11 Oct 2022 09:16:25 +0000
ROA not before:           Tue 11 Oct 2022 09:16:25 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        61.117.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:16:25 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=A241F49059789E852ADFA4FC9F7E054FD962798B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:b9:a1:de:75:9d:84:18:d1:d8:1f:1d:37:
                    23:c8:e2:42:9a:18:ba:fb:0a:a4:5e:3f:dc:f5:35:
                    e0:27:cd:26:19:e2:fd:6f:b1:23:fe:a7:92:11:e9:
                    ff:42:6a:8a:db:2c:49:cc:76:78:66:54:57:6d:a0:
                    b6:22:c7:be:67:b0:db:ab:6f:ea:ed:16:5f:14:15:
                    10:b4:eb:b2:af:f0:9f:e1:c9:8e:f8:40:cd:08:9d:
                    d5:85:fc:f5:ec:d5:f0:77:32:06:38:34:b5:7d:8b:
                    03:47:fa:93:3b:25:c2:c3:59:e9:d6:4a:47:26:8b:
                    f0:8c:75:7e:ea:95:36:6a:5b:bf:ba:8f:f8:39:7e:
                    d8:08:87:a5:68:90:0f:44:67:ba:8b:b9:3c:50:05:
                    67:c4:c9:1f:ef:d0:85:3f:5c:d5:56:2e:35:80:a2:
                    28:70:6e:f8:92:cc:57:89:c3:b9:cf:99:63:21:f5:
                    d9:3a:09:0f:20:be:f8:6d:05:18:b6:2c:26:87:7c:
                    da:8c:0d:cd:0c:24:3b:11:d1:46:0a:02:7b:f8:7b:
                    35:8f:64:6e:55:3e:59:5b:0f:87:4f:15:8d:e8:1d:
                    1b:92:6f:63:4e:3e:f8:a7:b4:14:47:29:d2:75:3c:
                    cd:60:11:d6:33:2f:72:f2:d7:76:73:dd:c9:1a:0d:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:F4:90:59:78:9E:85:2A:DF:A4:FC:9F:7E:05:4F:D9:62:79:8B
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/okH0kFl4noUq36T8n34FT9lieYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.117.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         21:52:4e:76:a2:d9:da:23:ae:7c:0f:73:b7:d8:17:29:87:15:
         c6:e6:0c:9e:d3:31:e4:9c:43:d2:9f:b8:35:33:36:08:60:42:
         0d:a1:24:55:b4:cd:d4:4b:71:c1:4f:2b:a6:26:11:47:fb:3b:
         38:39:5a:c8:54:1e:08:44:08:98:cf:a8:99:28:37:45:5e:1d:
         79:9a:d7:b0:67:a4:41:15:3d:c5:cb:89:7a:54:2b:62:fc:14:
         99:35:b6:5b:e1:56:f1:fa:42:24:ac:13:b2:12:67:7a:77:2a:
         62:44:c8:8b:b8:1f:da:71:e8:e6:13:9a:cf:39:f3:8e:4a:26:
         42:20:30:7e:4b:f1:ff:2d:f2:8c:f6:2a:ed:4e:21:fd:1c:c8:
         e5:75:82:81:47:3b:ab:f9:14:45:65:26:90:b2:98:93:ec:a7:
         c9:49:98:e8:51:58:b0:14:4a:fc:7e:4d:02:8b:58:27:9d:2b:
         c9:1a:e0:e8:be:4b:94:1f:97:68:c7:e3:7c:7d:ba:42:b9:56:
         8c:a5:35:21:2a:6b:38:63:1a:94:6a:45:f0:73:b4:05:e7:91:
         be:a5:54:95:22:a9:6a:fd:35:4e:a8:67:d9:35:2c:3b:99:3d:
         0f:e0:76:53:30:df:2c:e4:a6:3a:d8:20:ef:20:90:75:cb:f5:
         91:9a:00:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org