Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rQlzznYXsp4XKvF_D8d9isxHsDY.roa
File:                     rQlzznYXsp4XKvF_D8d9isxHsDY.roa (raw, json)
Hash identifier:          KuITfIk5qZCZAZWhvR1+s9GB+X/RNFWibk/CUm7MAps=
Subject key identifier:   AD:09:73:CE:76:17:B2:9E:17:2A:F1:7F:0F:C7:7D:8A:CC:47:B0:36
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D2
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rQlzznYXsp4XKvF_D8d9isxHsDY.roa
Signing time:             Fri 01 Sep 2023 01:30:52 +0000
ROA not before:           Fri 01 Sep 2023 01:30:52 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.199.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:52 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=AD0973CE7617B29E172AF17F0FC77D8ACC47B036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:de:af:89:ce:69:16:39:f1:7d:d6:f6:64:
                    27:3f:99:0d:4f:2f:bd:df:36:c1:3b:10:2f:1f:56:
                    72:a6:87:09:bc:64:8b:9c:d2:b8:76:d9:f3:45:e0:
                    69:f6:00:cf:dd:a6:08:bc:73:1b:12:49:9f:34:bd:
                    fd:80:1b:17:c2:20:11:7a:d4:16:33:ef:56:d8:02:
                    35:17:2a:d2:f2:ca:b1:5f:1e:cf:bd:0c:a0:44:56:
                    77:b0:fe:7e:cc:1f:d9:99:75:bd:a4:21:c8:cd:42:
                    a3:ac:46:fe:51:ff:1f:b5:da:7f:f7:e9:b9:03:4e:
                    9f:1e:f0:76:ef:c8:8a:ad:f7:02:1e:a2:01:c5:85:
                    61:1a:56:dd:92:26:7e:a8:6a:be:ad:8b:e0:79:db:
                    4d:8e:cf:2d:fe:86:0d:5b:1f:38:73:8e:99:61:f1:
                    9e:fe:5f:0e:b4:6d:07:db:83:0b:08:72:85:0b:df:
                    3a:54:00:78:27:d7:2e:03:a1:34:d2:07:59:23:2e:
                    5d:23:b2:62:a1:59:77:00:5b:cd:e0:1e:43:e7:1c:
                    86:ff:d1:a3:f9:1b:7f:1e:46:e4:b9:a6:87:f5:fd:
                    20:22:9c:41:d5:26:57:b6:04:88:88:12:65:1c:fc:
                    85:2e:af:98:52:b7:77:0a:77:97:7e:09:25:a9:4f:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:09:73:CE:76:17:B2:9E:17:2A:F1:7F:0F:C7:7D:8A:CC:47:B0:36
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rQlzznYXsp4XKvF_D8d9isxHsDY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:de:f5:cc:85:6d:20:e7:38:de:bc:66:f6:92:ce:0d:58:
         48:92:70:d8:c0:8c:3a:32:e0:a4:a1:85:08:d3:43:83:5d:56:
         96:ca:1f:a5:fc:4f:69:bb:d4:21:42:8f:98:ac:87:8f:eb:97:
         3b:50:4e:2a:50:af:ce:37:d1:fb:7b:82:3e:b0:6e:6b:ac:aa:
         d7:98:b9:5b:f1:52:1c:61:ff:85:f9:bd:de:ce:79:cb:db:1c:
         83:52:bd:29:0a:97:5c:d3:7d:18:fa:02:1f:46:21:ca:15:e2:
         b5:3c:f6:ba:2c:27:a7:44:c2:6b:48:f6:8e:f4:24:aa:58:1a:
         ef:94:ed:89:68:87:29:7b:20:ec:a4:73:d4:f1:79:1d:0e:0b:
         a1:68:b9:1a:f0:a1:86:d9:ca:e8:36:12:02:8c:0c:c3:1f:54:
         ce:91:72:1c:ce:b0:c9:f8:e9:aa:c4:08:99:32:8f:51:21:cc:
         a9:38:84:5f:33:a5:8b:ba:ee:fe:d4:40:0a:3f:5b:29:85:30:
         6a:c0:92:c5:62:a7:03:82:05:de:89:fd:a9:3f:85:85:ba:98:
         ca:15:56:6e:1a:6b:53:c5:b2:6d:07:c2:f6:5b:e8:41:26:f9:
         b5:e6:4f:1f:59:b4:fb:b1:0e:e3:e1:bb:ca:1f:00:aa:db:40:
         6d:de:de:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNTJaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFEMDk3M0NFNzYxN0Iy
OUUxNzJBRjE3RjBGQzc3RDhBQ0M0N0IwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZY96vic5pFjnxfdb2ZCc/mQ1PL73fNsE7EC8fVnKmhwm8ZIuc
0rh22fNF4Gn2AM/dpgi8cxsSSZ80vf2AGxfCIBF61BYz71bYAjUXKtLyyrFfHs+9
DKBEVnew/n7MH9mZdb2kIcjNQqOsRv5R/x+12n/36bkDTp8e8HbvyIqt9wIeogHF
hWEaVt2SJn6oar6ti+B5202Ozy3+hg1bHzhzjplh8Z7+Xw60bQfbgwsIcoUL3zpU
AHgn1y4DoTTSB1kjLl0jsmKhWXcAW83gHkPnHIb/0aP5G38eRuS5pof1/SAinEHV
Jle2BIiIEmUc/IUur5hSt3cKd5d+CSWpTyjtAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUrQlzznYXsp4XKvF/D8d9isxHsDYwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9yUWx6em5ZWHNwNFhLdkZfRDhkOWlzeEhzRFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQH0seAMA0GCSqGSIb3DQEBCwUAA4IBAQDAhN71zIVtIOc43rxm9pLO
DVhIknDYwIw6MuCkoYUI00ODXVaWyh+l/E9pu9QhQo+YrIeP65c7UE4qUK/ON9H7
e4I+sG5rrKrXmLlb8VIcYf+F+b3eznnL2xyDUr0pCpdc030Y+gIfRiHKFeK1PPa6
LCenRMJrSPaO9CSqWBrvlO2JaIcpeyDspHPU8XkdDguhaLka8KGG2croNhICjAzD
H1TOkXIczrDJ+OmqxAiZMo9RIcypOIRfM6WLuu7+1EAKP1sphTBqwJLFYqcDggXe
if2pP4WFupjKFVZuGmtTxbJtB8L2W+hBJvm15k8fWbT7sQ7j4bvKHwCq20Bt3t60
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org