Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/u8XmnfDtHoSfmOMTfSZUfQzAbO0.roa
File:                     u8XmnfDtHoSfmOMTfSZUfQzAbO0.roa (raw, json)
Hash identifier:          kpFomZyO7fL/y78ltonxrFgExUvAUV58GJ9CgJ4hg5A=
Subject key identifier:   BB:C5:E6:9D:F0:ED:1E:84:9F:98:E3:13:7D:26:54:7D:0C:C0:6C:ED
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D8
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/u8XmnfDtHoSfmOMTfSZUfQzAbO0.roa
Signing time:             Fri 01 Sep 2023 01:30:55 +0000
ROA not before:           Fri 01 Sep 2023 01:30:55 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:55 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=BBC5E69DF0ED1E849F98E3137D26547D0CC06CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:1f:af:89:c6:32:9d:65:6c:c4:1b:7a:b7:
                    84:60:5c:20:f6:e1:13:6a:44:79:18:82:1f:df:fc:
                    70:31:e1:a3:0c:91:9e:6d:4a:b9:c9:84:43:29:0f:
                    cf:e0:5b:c2:0e:62:42:e6:c0:8d:f8:11:9f:a7:4c:
                    09:e0:f5:00:31:21:75:84:0a:68:f0:3f:01:aa:91:
                    1e:ee:e5:d8:a0:19:4f:f8:54:3e:0b:40:f9:49:77:
                    6d:f9:ef:f6:a3:58:32:3f:78:eb:b3:13:38:b7:56:
                    5a:c7:44:63:9b:be:1b:f4:08:20:26:f3:7b:8b:9c:
                    c6:56:34:8c:2f:35:74:6b:ca:b2:de:01:34:1e:a0:
                    f4:8e:cd:26:95:ba:3b:eb:3b:43:30:54:a9:a5:be:
                    8c:d6:ac:c1:ac:1d:93:43:c6:1f:b8:73:05:8e:76:
                    c3:b6:9e:82:05:12:0f:cc:8f:01:03:02:b5:9a:22:
                    68:d4:51:54:0d:ec:c5:21:7b:cc:71:22:2f:3f:a8:
                    d0:59:83:d1:89:bb:f3:16:77:9e:1c:66:b2:cd:1a:
                    47:6f:87:68:2b:6d:9f:76:5f:79:24:41:2a:aa:a2:
                    17:b7:74:fc:e0:3c:f0:51:8a:f7:6a:b9:8a:e1:2b:
                    cb:85:02:52:48:44:4a:b1:8b:c9:e4:3a:b9:2b:59:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:E6:9D:F0:ED:1E:84:9F:98:E3:13:7D:26:54:7D:0C:C0:6C:ED
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/u8XmnfDtHoSfmOMTfSZUfQzAbO0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:f1:26:c7:61:4c:1a:a3:09:cc:f0:7f:a7:4c:74:14:17:
         0f:fc:fb:c7:a2:37:53:3a:2e:7a:b3:b1:e9:0d:85:0c:64:70:
         02:48:8e:d2:b0:9f:9a:58:ef:ba:98:44:d6:ca:1f:0f:d2:21:
         12:aa:e3:6c:1d:92:4d:47:fd:ba:48:1f:4a:65:3c:18:8f:ac:
         8c:e1:b8:55:4e:db:a0:31:b6:3c:64:b6:73:7b:ab:78:4c:bc:
         f0:bd:10:98:b9:4c:c3:d4:17:60:95:0b:88:14:f1:bd:10:53:
         4b:19:9a:f5:70:8a:ff:50:c3:c7:f6:b3:4e:43:b3:e6:bf:d5:
         1f:d7:c9:db:66:53:e1:e4:2c:a2:45:20:5a:2e:ea:b8:d7:0e:
         3d:dd:03:18:30:cf:dd:65:01:a4:d8:39:95:be:bc:dc:66:e7:
         0e:28:29:db:6d:87:b5:e8:fe:75:e7:49:88:b6:cd:9a:70:b0:
         25:cb:f8:ac:35:68:03:b7:83:3d:92:7c:d9:9a:7a:c0:2e:1e:
         c3:e7:49:df:7e:a9:01:2a:01:2f:14:4b:c4:ba:5f:87:56:75:
         59:d6:df:3a:5e:4a:0b:23:79:37:ec:74:d0:72:e3:ac:86:f0:
         67:1d:c0:d8:94:42:15:bc:f3:64:3c:cf:33:6d:64:13:72:42:
         3b:9c:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org