Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/sMSvP--9ypV9Za1P483XNOq1rxo.roa
File:                     sMSvP--9ypV9Za1P483XNOq1rxo.roa (raw, json)
Hash identifier:          uY/+NXjB90/gp2WtP+Y2wKd5qg5hDGNCext6LiEmKlI=
Subject key identifier:   B0:C4:AF:3F:EF:BD:CA:95:7D:65:AD:4F:E3:CD:D7:34:EA:B5:AF:1A
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       A7
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/sMSvP--9ypV9Za1P483XNOq1rxo.roa
Signing time:             Tue 18 Oct 2022 02:32:23 +0000
ROA not before:           Tue 18 Oct 2022 02:32:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        219.118.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:32:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B0C4AF3FEFBDCA957D65AD4FE3CDD734EAB5AF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:39:36:93:c6:27:dc:2e:07:63:3c:1e:ac:7a:
                    7d:1d:06:97:9a:50:a7:fc:72:3d:1c:84:e7:5b:d3:
                    5b:58:e0:90:ad:7c:35:50:56:6c:04:06:71:21:a9:
                    06:eb:a0:c2:13:4f:c4:be:a7:4a:2d:1b:45:36:f0:
                    98:c8:09:df:96:02:b0:5f:e5:af:b0:4a:0c:d6:6b:
                    d4:27:f5:c0:6d:0b:11:05:be:0b:cc:03:b4:ac:f2:
                    6b:9a:d1:78:9a:76:bf:ae:c1:a1:15:03:29:8c:b1:
                    0d:af:0f:96:ad:b1:0a:24:75:22:1c:78:81:a1:72:
                    bc:60:7b:46:b9:2a:30:d9:01:5f:0c:06:9e:32:b4:
                    99:b9:ac:a3:bd:a2:d5:31:43:59:50:92:38:ff:06:
                    7c:bd:78:77:f9:fb:60:0f:01:2c:1e:d7:4d:86:02:
                    46:8a:3d:84:a9:0c:f2:3b:66:bb:ab:bb:65:4d:10:
                    00:f0:f8:f9:cc:08:2f:42:d2:95:f8:f2:03:b8:00:
                    f5:4c:f0:2b:6e:f8:f3:0e:b5:f0:cc:9e:c9:aa:e8:
                    ef:af:8a:25:6d:f9:b9:83:ef:56:94:53:01:ba:34:
                    d5:0a:bf:0b:d3:c5:7f:32:6e:c1:18:85:92:a9:50:
                    87:3a:d0:c7:6a:88:f6:3a:cf:8f:be:27:99:89:3a:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C4:AF:3F:EF:BD:CA:95:7D:65:AD:4F:E3:CD:D7:34:EA:B5:AF:1A
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/sMSvP--9ypV9Za1P483XNOq1rxo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:98:fc:7e:62:69:ae:d2:c3:10:2f:15:e6:1a:bd:bc:5b:6d:
         ab:a4:6a:ea:20:50:a4:9a:43:20:40:34:a5:2f:b6:fe:45:38:
         99:cd:34:e5:54:66:7f:09:4a:38:f9:fc:64:05:d0:4b:8f:b2:
         f0:ac:31:93:3e:61:d3:ed:4d:eb:6b:cb:2c:b7:2c:8b:63:03:
         28:f4:2f:f4:1b:07:4d:6e:ab:81:1e:52:1d:59:0e:fa:62:68:
         fd:c3:60:54:91:be:d0:75:41:e0:d9:da:ed:bf:7b:fb:4d:7e:
         7c:7c:ab:cc:13:9e:51:9d:82:99:96:c5:c7:82:9e:36:52:9f:
         8c:7b:6f:09:b1:ae:90:a2:c6:b9:01:76:94:9b:ae:f9:1f:01:
         95:bf:63:6f:0f:0d:a6:30:0c:d6:d1:e5:a7:84:00:ab:5d:57:
         d3:be:92:f9:4c:95:c9:81:3b:19:36:81:ed:02:9e:22:cc:cd:
         42:da:03:c0:f2:6c:4c:aa:ff:8c:75:33:d1:51:57:17:8b:c3:
         bf:27:ad:bf:43:1b:e9:ad:f9:eb:05:31:e9:7d:f4:c2:51:41:
         a5:96:3b:84:a1:7e:26:7a:fe:40:3e:51:75:c8:98:69:69:2d:
         81:65:fe:1b:89:b5:b7:1b:42:50:2b:f3:14:c8:9c:3a:7e:7b:
         f9:84:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org