Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/uCft4j-tuEkRpoG96-qpkjV8clE.roa
File:                     uCft4j-tuEkRpoG96-qpkjV8clE.roa (raw, json)
Hash identifier:          IR2H4R1bpJnLnK7eLahSa9yMEpC5407ankAeEjxMaJM=
Subject key identifier:   B8:27:ED:E2:3F:AD:B8:49:11:A6:81:BD:EB:EA:A9:92:35:7C:72:51
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0104
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/uCft4j-tuEkRpoG96-qpkjV8clE.roa
Signing time:             Fri 01 Sep 2023 01:33:18 +0000
ROA not before:           Fri 01 Sep 2023 01:33:18 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:18 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=B827EDE23FADB84911A681BDEBEAA992357C7251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:44:ea:09:ae:29:b1:64:c4:c4:4c:ce:2b:
                    24:49:4c:40:f1:f3:ab:4b:43:52:80:a5:49:7b:81:
                    f5:7b:5a:b1:49:82:7b:c2:b0:e9:56:28:a6:84:55:
                    bb:d0:27:7f:20:9f:70:36:5f:cf:74:7f:83:62:a7:
                    91:19:b8:27:cc:c9:57:0f:9c:cf:bb:93:2e:80:43:
                    a5:89:d0:f2:29:0b:cd:64:1b:d5:d7:45:6d:bf:38:
                    6d:6d:e0:5a:40:f5:6e:43:b7:c7:48:17:f1:cb:60:
                    91:10:1f:30:8f:c6:5c:c0:3c:c0:02:c2:66:24:69:
                    80:1d:25:9a:23:fb:cc:c3:c6:97:e3:75:2f:12:b7:
                    cd:f3:71:0f:e0:95:48:5a:94:10:3e:7d:ee:2d:17:
                    35:44:4d:96:ec:02:d1:7d:ac:56:c6:95:f6:b5:fb:
                    a7:5f:15:43:78:08:22:ce:db:6f:eb:e1:2a:fd:86:
                    1c:df:33:89:e8:67:1e:b2:cd:d5:39:1a:8e:51:fc:
                    7c:4b:ed:da:91:52:b8:fa:5e:ba:ea:74:be:a3:f0:
                    1b:b8:6b:72:af:21:5f:15:c2:1a:c0:b1:ac:bb:fd:
                    1e:67:7a:c3:49:6e:c4:a6:fe:a1:35:13:13:1b:c9:
                    a1:e6:d5:a0:05:5b:75:da:0d:c0:11:e8:df:a1:f0:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:ED:E2:3F:AD:B8:49:11:A6:81:BD:EB:EA:A9:92:35:7C:72:51
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/uCft4j-tuEkRpoG96-qpkjV8clE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:d1:16:36:3e:0f:a4:52:b8:d1:68:b7:42:41:ed:c7:9d:
         b5:e5:41:e4:88:ba:1b:1e:7d:44:b4:5f:f4:a7:c4:46:20:c9:
         55:a8:71:d2:cb:ee:de:81:49:64:48:92:fe:dd:e4:a2:5c:77:
         f9:1b:59:97:e4:6e:5d:42:5d:df:09:a0:0c:37:c1:61:a5:5d:
         ca:39:7f:97:74:98:67:e1:59:ed:f7:43:48:5d:d8:a8:a3:17:
         d7:52:4f:11:1c:3d:83:9f:0e:f1:54:1e:4b:d9:35:98:93:b7:
         33:ef:e8:2b:68:44:17:63:09:ee:6c:b2:c0:ec:53:f8:fa:19:
         fe:a6:5b:9b:9a:bd:ef:f7:0d:66:f3:3b:92:04:f0:18:ba:e2:
         67:03:7d:77:39:ce:79:79:d4:e0:0c:3f:6f:3a:53:e4:6e:a9:
         e8:93:e6:66:b0:0b:c6:6d:18:bf:76:f3:0d:93:57:aa:7c:b2:
         5f:2f:65:07:c9:1b:a5:f1:f3:ba:4b:14:f6:df:bd:55:8e:ff:
         1e:dc:bd:15:08:48:6c:b8:b7:49:cd:fe:a7:43:d2:e6:80:5a:
         6e:03:d0:23:65:ad:50:89:cc:c5:39:68:ea:58:c5:56:12:61:
         c2:08:79:9f:16:a0:57:05:a8:b2:8d:ff:96:7a:9d:dd:b7:23:
         2c:99:7e:07
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMzMThaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI4MjdFREUyM0ZBREI4
NDkxMUE2ODFCREVCRUFBOTkyMzU3QzcyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDST0TqCa4psWTExEzOKyRJTEDx86tLQ1KApUl7gfV7WrFJgnvC
sOlWKKaEVbvQJ38gn3A2X890f4Nip5EZuCfMyVcPnM+7ky6AQ6WJ0PIpC81kG9XX
RW2/OG1t4FpA9W5Dt8dIF/HLYJEQHzCPxlzAPMACwmYkaYAdJZoj+8zDxpfjdS8S
t83zcQ/glUhalBA+fe4tFzVETZbsAtF9rFbGlfa1+6dfFUN4CCLO22/r4Sr9hhzf
M4noZx6yzdU5Go5R/HxL7dqRUrj6XrrqdL6j8Bu4a3KvIV8VwhrAsay7/R5nesNJ
bsSm/qE1ExMbyaHm1aAFW3XaDcAR6N+h8EhfAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUuCft4j+tuEkRpoG96+qpkjV8clEwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny91Q2Z0NGotdHVFa1Jwb0c5Ni1xcGtqVjhjbEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQHfG2AMA0GCSqGSIb3DQEBCwUAA4IBAQA87dEWNj4PpFK40Wi3QkHt
x5215UHkiLobHn1EtF/0p8RGIMlVqHHSy+7egUlkSJL+3eSiXHf5G1mX5G5dQl3f
CaAMN8FhpV3KOX+XdJhn4Vnt90NIXdiooxfXUk8RHD2Dnw7xVB5L2TWYk7cz7+gr
aEQXYwnubLLA7FP4+hn+plubmr3v9w1m8zuSBPAYuuJnA313Oc55edTgDD9vOlPk
bqnok+ZmsAvGbRi/dvMNk1eqfLJfL2UHyRul8fO6SxT2371Vjv8e3L0VCEhsuLdJ
zf6nQ9LmgFpuA9AjZa1QiczFOWjqWMVWEmHCCHmfFqBXBaiyjf+Wep3dtyMsmX4H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org