Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/s5oFLts52i-A9BOBp5Ruz9JZqmw.roa
File:                     s5oFLts52i-A9BOBp5Ruz9JZqmw.roa (raw, json)
Hash identifier:          f2jzSlUEie0XZtqg2qTioAsbZc+Q2gW1jqc1PT2lXdI=
Subject key identifier:   B3:9A:05:2E:DB:39:DA:2F:80:F4:13:81:A7:94:6E:CF:D2:59:AA:6C
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0133
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/s5oFLts52i-A9BOBp5Ruz9JZqmw.roa
Signing time:             Sun 01 Oct 2023 01:30:49 +0000
ROA not before:           Sun 01 Oct 2023 01:30:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B39A052EDB39DA2F80F41381A7946ECFD259AA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:bd:e5:e0:7b:b8:d5:8b:e9:6d:b3:cb:07:
                    ac:9e:9f:54:e9:7a:91:cb:c4:f2:e5:66:66:3a:03:
                    6c:1b:57:9e:71:fd:a1:c9:f3:2e:1b:ba:5f:ae:8d:
                    08:a9:ac:b8:85:35:f3:14:30:45:06:52:cd:65:c0:
                    68:0d:56:26:ef:f1:4b:a8:b5:d8:32:74:40:2b:fa:
                    07:fc:fb:9e:74:12:72:04:ee:b7:24:fd:32:d2:2f:
                    e6:a4:3b:8e:c1:93:b5:bd:d5:7b:ee:40:ce:90:ba:
                    66:e4:23:60:5f:9b:9d:4f:3f:cd:5a:46:9a:45:f9:
                    a2:7a:6c:2f:e2:ff:7e:f3:65:6c:24:aa:5c:80:5c:
                    50:f6:2e:15:3b:93:4a:59:82:c3:3a:e1:e4:77:41:
                    a2:5b:1e:c9:65:1e:bc:e9:c9:0b:3e:0f:79:98:f0:
                    c5:68:2f:d1:9e:94:66:59:79:a8:16:d8:54:e9:a3:
                    e9:75:af:e3:63:dd:40:ee:e0:40:3f:11:d6:89:35:
                    ca:74:d7:a4:c1:94:7d:19:5e:75:f9:c1:48:75:d4:
                    c7:d5:3d:c4:9e:66:77:33:fe:37:55:fb:07:10:34:
                    b9:3d:b6:30:21:f6:4c:35:8d:9e:ea:c8:29:53:79:
                    68:f6:0b:48:05:76:11:97:bf:94:43:db:ac:ab:1f:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9A:05:2E:DB:39:DA:2F:80:F4:13:81:A7:94:6E:CF:D2:59:AA:6C
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/s5oFLts52i-A9BOBp5Ruz9JZqmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:6b:04:f5:1d:88:c0:83:d9:f0:c5:e1:1d:ce:3d:65:73:
         32:b7:97:1a:7d:fa:23:76:a1:6f:41:31:03:90:7d:3b:4b:35:
         18:6e:b4:55:56:a2:9f:38:44:13:e7:54:ed:ad:d2:e2:83:9c:
         61:e1:d1:ca:2d:ee:19:d3:83:1b:bd:02:af:7d:9c:96:2c:de:
         00:aa:1c:41:fc:8c:01:9f:2a:f7:11:7e:eb:43:a6:33:f4:13:
         78:4a:2c:18:79:c8:d2:c9:b2:85:5c:9c:f9:29:31:ce:f1:c8:
         a2:b5:d1:83:e5:4d:5b:ce:b0:d2:6e:3a:06:a6:20:6a:55:6f:
         13:3f:83:08:02:47:4e:67:d8:c9:76:c1:a6:3b:85:df:13:69:
         3a:a4:63:e9:0a:ab:6e:a4:d1:b5:4d:a9:9e:b3:63:68:69:10:
         d3:01:9b:18:22:be:f2:d5:ac:0d:6a:8b:3d:75:4b:cd:7d:35:
         56:96:c4:8b:55:42:fd:f1:0c:f2:d3:8b:12:a5:77:4e:64:af:
         3e:2f:d0:ea:67:83:a9:3d:b4:fd:2c:b0:5e:62:ee:39:2a:9b:
         93:15:29:da:f5:5b:5e:22:4b:e6:a3:e2:0a:8b:b1:24:27:9d:
         87:c0:62:56:2b:bf:a5:81:10:4d:6d:8e:20:3d:6b:06:dd:98:
         bd:8a:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org