Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r_ube5d7M8h00CcVGuKX9qUUex0.roa
File:                     r_ube5d7M8h00CcVGuKX9qUUex0.roa (raw, json)
Hash identifier:          b/7hKWQcR5jyqfm2bIkkopmaWACRo5hc+Q2cKRfDDUE=
Subject key identifier:   AF:FB:9B:7B:97:7B:33:C8:74:D0:27:15:1A:E2:97:F6:A5:14:7B:1D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       015C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r_ube5d7M8h00CcVGuKX9qUUex0.roa
Signing time:             Sun 01 Oct 2023 01:35:46 +0000
ROA not before:           Sun 01 Oct 2023 01:35:46 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        218.225.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:46 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=AFFB9B7B977B33C874D027151AE297F6A5147B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:91:26:e1:c2:d9:b5:65:f9:cd:6b:73:23:
                    42:66:3b:b3:85:0c:c4:8b:92:e8:e4:a4:47:7f:e1:
                    a3:06:bc:69:9a:ec:ad:9b:1b:98:e5:20:bd:bb:88:
                    77:64:b1:4c:51:9c:e4:b8:b8:74:3b:11:25:6a:97:
                    29:1c:2d:48:21:f8:17:25:3d:a7:62:df:1e:4c:c7:
                    79:c0:49:0c:2a:f5:8b:cb:dc:77:53:0f:75:ca:63:
                    c3:45:8b:e8:bb:77:f9:1b:c0:00:e6:e1:27:80:3d:
                    b9:11:26:0e:e4:1c:5d:c3:a8:64:65:4d:6b:69:c9:
                    6b:da:56:4c:9d:35:26:83:a3:8e:4e:9e:8d:fb:c0:
                    38:8c:12:64:49:fd:82:c7:6b:ad:1b:e9:07:6a:da:
                    8b:90:79:d1:71:89:ba:a1:32:6a:08:e2:b2:30:1a:
                    ee:cc:52:6e:85:f1:f7:6f:17:e9:80:a6:dc:68:a8:
                    1d:59:3a:ee:41:95:be:f6:df:8c:df:a2:18:36:fb:
                    52:20:fb:0e:a2:15:03:c0:3c:1a:41:1c:f7:00:f1:
                    66:b3:d5:2d:fa:27:70:31:3f:ca:07:17:78:87:1e:
                    a6:7f:f4:62:13:ea:65:b9:16:79:80:85:ae:42:7f:
                    c0:b1:25:8e:7b:37:a4:13:22:75:a2:bc:04:92:27:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:9B:7B:97:7B:33:C8:74:D0:27:15:1A:E2:97:F6:A5:14:7B:1D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r_ube5d7M8h00CcVGuKX9qUUex0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:9f:1c:27:19:a1:3e:99:1c:44:e7:50:65:7c:71:d7:d1:93:
         9f:21:cb:23:0d:c6:43:0f:36:b0:bb:9e:5a:c5:b1:82:29:7c:
         49:ad:2a:5e:02:31:0d:ae:e8:f3:7a:fa:ca:7b:3d:51:b1:e5:
         64:db:df:3a:4d:e2:6d:87:52:23:1e:48:6d:39:cd:33:17:a0:
         2b:4e:0c:27:9a:3d:c0:a6:a8:b7:69:3a:5e:f3:c8:cb:c0:e3:
         cd:91:f1:62:89:54:ab:3a:36:04:00:ee:a7:4c:a2:e8:20:66:
         dd:11:53:f0:da:71:c9:c5:84:bc:63:05:9b:2a:e0:5f:f9:bd:
         60:a9:87:b1:0b:0a:1e:82:99:06:6a:3a:04:74:53:11:46:b4:
         73:a6:0d:02:b3:7d:ca:19:84:5d:d0:2e:bd:70:0d:5e:ae:9e:
         c0:93:5b:a7:1a:e0:d5:1d:09:c7:66:27:67:cd:ee:9d:13:46:
         12:49:38:e4:46:22:be:fe:82:2e:44:d9:37:a6:82:52:09:04:
         72:f8:f8:22:5d:d8:21:34:27:d5:4c:c1:29:0e:db:12:f9:54:
         c7:db:78:d8:85:c7:08:3a:11:87:ba:32:7b:eb:b5:95:34:d8:
         61:ab:c9:26:e8:13:d0:80:33:8e:3a:ba:b6:f8:fa:6d:c5:db:
         22:dd:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org