Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/uv6ASuO6QkIp9WVIAMDClO-1MMI.roa
File:                     uv6ASuO6QkIp9WVIAMDClO-1MMI.roa (raw, json)
Hash identifier:          +0pg0kslr70Qbnwe6T2lp2qr0a8rLgsQPKvVjg1FKzk=
Subject key identifier:   BA:FE:80:4A:E3:BA:42:42:29:F5:65:48:00:C0:C2:94:EF:B5:30:C2
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D3
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/uv6ASuO6QkIp9WVIAMDClO-1MMI.roa
Signing time:             Fri 01 Sep 2023 01:30:53 +0000
ROA not before:           Fri 01 Sep 2023 01:30:53 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:53 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=BAFE804AE3BA424229F5654800C0C294EFB530C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:9f:10:34:b3:df:8d:bb:f0:26:0a:c3:87:
                    40:bc:9a:94:66:37:44:fc:d4:c0:90:f1:77:97:b5:
                    30:ce:74:b2:49:93:b9:c9:7f:bd:44:d2:de:c6:6f:
                    13:11:0f:1a:47:83:69:af:01:a8:aa:cf:c3:bd:1f:
                    0f:61:f6:d7:1e:4c:6d:52:34:6d:3a:15:5a:a0:9f:
                    8a:58:c5:bb:d9:5a:48:2f:7d:48:5e:78:82:ef:9c:
                    9a:10:02:08:a1:cc:28:4a:0d:ca:1a:43:4f:d2:d5:
                    68:a6:c3:69:cb:ed:fa:5d:68:e1:dd:c0:40:d8:8f:
                    2f:2a:1b:d2:10:82:95:d3:bc:42:63:7d:b6:6d:37:
                    ba:d2:57:e5:62:a1:56:fc:eb:8e:4b:7d:5a:9c:fc:
                    e1:b2:41:cf:83:67:fd:73:df:2c:ad:db:26:ff:01:
                    5d:11:4c:c3:1b:40:2c:a2:23:34:89:7a:e4:19:5f:
                    f7:f4:40:1a:f7:92:d9:87:91:26:73:f8:6e:cf:32:
                    b4:7c:f7:cc:63:ae:c2:3b:72:84:1e:c4:4f:9f:92:
                    88:54:4e:80:8d:37:23:bf:ce:4e:3a:ff:b5:21:00:
                    8f:f6:83:8d:a1:1a:71:6a:da:6c:1a:a3:75:b2:32:
                    66:aa:42:83:d1:cb:37:79:e5:f9:f4:35:1a:4d:4e:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:80:4A:E3:BA:42:42:29:F5:65:48:00:C0:C2:94:EF:B5:30:C2
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/uv6ASuO6QkIp9WVIAMDClO-1MMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:01:23:09:cc:70:cd:5e:e9:c6:d1:72:a1:ea:6a:27:37:aa:
         cd:c6:7b:96:43:91:ba:75:11:1a:2f:bb:eb:eb:1e:38:ad:2f:
         40:34:3f:34:b8:7e:f9:52:01:70:54:b0:6e:57:3f:0f:c1:c3:
         25:82:70:5c:44:33:ab:9b:ea:86:39:37:6a:b0:66:af:18:93:
         06:73:b6:c3:06:88:f9:68:9e:bb:da:71:5b:60:d9:19:e8:ea:
         24:70:03:c1:95:75:9f:d6:b7:98:1e:66:10:84:8b:f8:57:49:
         54:43:fc:3b:a6:78:de:fd:25:99:7d:59:77:ae:1f:3b:64:60:
         1b:f6:a2:e1:23:53:03:a0:57:6f:42:41:69:d0:b5:63:5d:05:
         69:96:b4:48:fc:15:a8:27:b8:72:81:32:76:78:47:c5:1e:ed:
         70:eb:50:31:71:fb:c9:26:9a:3d:b1:d0:7c:28:6e:74:9a:e6:
         6b:09:be:a3:70:ec:80:38:ba:c5:fc:54:0e:20:d5:21:d0:c2:
         04:05:97:eb:dc:1b:15:b7:52:f0:01:6c:9d:31:86:c4:3c:6f:
         61:dd:80:09:9f:80:d8:85:3d:56:48:cd:0e:fe:a5:87:b8:5c:
         9d:9e:c5:83:b9:ee:6a:27:04:97:3b:97:66:46:5e:18:a3:97:
         40:bd:5b:76
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMwNTNaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJBRkU4MDRBRTNCQTQy
NDIyOUY1NjU0ODAwQzBDMjk0RUZCNTMwQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZcp8QNLPfjbvwJgrDh0C8mpRmN0T81MCQ8XeXtTDOdLJJk7nJ
f71E0t7GbxMRDxpHg2mvAaiqz8O9Hw9h9tceTG1SNG06FVqgn4pYxbvZWkgvfUhe
eILvnJoQAgihzChKDcoaQ0/S1Wimw2nL7fpdaOHdwEDYjy8qG9IQgpXTvEJjfbZt
N7rSV+VioVb8645LfVqc/OGyQc+DZ/1z3yyt2yb/AV0RTMMbQCyiIzSJeuQZX/f0
QBr3ktmHkSZz+G7PMrR898xjrsI7coQexE+fkohUToCNNyO/zk46/7UhAI/2g42h
GnFq2mwao3WyMmaqQoPRyzd55fn0NRpNTgUtAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUuv6ASuO6QkIp9WVIAMDClO+1MMIwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny91djZBU3VPNlFrSXA5V1ZJQU1EQ2xPLTFNTUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAfG2zMA0GCSqGSIb3DQEBCwUAA4IBAQAlASMJzHDNXunG0XKh6mon
N6rNxnuWQ5G6dREaL7vr6x44rS9AND80uH75UgFwVLBuVz8PwcMlgnBcRDOrm+qG
OTdqsGavGJMGc7bDBoj5aJ672nFbYNkZ6OokcAPBlXWf1reYHmYQhIv4V0lUQ/w7
pnje/SWZfVl3rh87ZGAb9qLhI1MDoFdvQkFp0LVjXQVplrRI/BWoJ7hygTJ2eEfF
Hu1w61AxcfvJJpo9sdB8KG50muZrCb6jcOyAOLrF/FQOINUh0MIEBZfr3BsVt1Lw
AWydMYbEPG9h3YAJn4DYhT1WSM0O/qWHuFydnsWDue5qJwSXO5dmRl4Yo5dAvVt2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org