Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zFLXaVoLlcjKth6N33I7kQM31iM.roa
File:                     zFLXaVoLlcjKth6N33I7kQM31iM.roa (raw, json)
Hash identifier:          YjdiherSO0A0Oo7MOi4hl4sVo0BqhnTyPWdOuzxzEdQ=
Subject key identifier:   CC:52:D7:69:5A:0B:95:C8:CA:B6:1E:8D:DF:72:3B:91:03:37:D6:23
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0115
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zFLXaVoLlcjKth6N33I7kQM31iM.roa
Signing time:             Fri 01 Sep 2023 01:34:27 +0000
ROA not before:           Fri 01 Sep 2023 01:34:27 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.141.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:27 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=CC52D7695A0B95C8CAB61E8DDF723B910337D623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:29:d4:fc:7a:64:c2:fa:e1:e5:cf:cf:7d:
                    a6:e5:0d:b2:a0:4e:12:39:a9:8c:5d:90:9a:e5:c4:
                    88:04:77:b7:fc:2b:b8:f1:64:4a:9c:b2:7f:22:ce:
                    43:a2:9d:2f:ec:e4:e8:41:4d:8f:7d:f5:2f:1f:c4:
                    e4:d7:75:39:14:0f:b6:ee:0f:73:b3:97:dc:22:f3:
                    11:68:3d:3a:71:7c:34:fc:9b:e6:15:a3:37:fe:73:
                    2b:9e:c7:54:02:92:1d:06:10:68:e6:c0:b2:c8:33:
                    b4:6a:ea:8a:ee:d9:59:91:2d:d8:1b:13:06:7c:18:
                    06:75:fd:10:3f:3a:c6:75:a5:ed:07:0a:74:b6:eb:
                    a4:45:37:c8:8a:a0:54:b9:40:66:36:58:cb:be:02:
                    ad:bf:00:e7:e6:f6:d1:1b:4d:92:71:2d:37:50:ec:
                    77:9c:04:27:4e:52:72:0f:11:70:b1:88:64:95:19:
                    de:0b:a8:cb:e0:f6:8f:70:13:75:07:5c:fa:fb:ac:
                    e5:39:cc:79:c8:28:ab:b9:5d:b9:ea:41:20:f6:3f:
                    eb:84:c0:6d:9b:e4:39:ae:32:3e:61:68:09:d6:a6:
                    a0:de:42:6c:69:b6:22:de:2c:c3:84:e9:0a:6f:75:
                    e9:24:db:b7:0e:8d:a4:8f:e5:71:41:0b:16:61:c2:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:52:D7:69:5A:0B:95:C8:CA:B6:1E:8D:DF:72:3B:91:03:37:D6:23
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zFLXaVoLlcjKth6N33I7kQM31iM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:e4:a8:63:53:d8:44:02:cb:e0:75:23:d3:25:03:24:97:55:
         e6:b4:c1:54:d6:c7:69:55:dd:3c:21:1c:52:a3:30:6f:e1:51:
         6c:b3:db:42:ca:4e:9c:77:20:48:ba:14:1f:fc:f5:eb:02:d2:
         b1:2c:6f:4d:49:51:94:a0:d4:d3:b6:4d:97:ef:4a:44:3b:64:
         de:8b:27:89:ea:68:7d:12:91:56:85:c2:d2:4e:35:71:a7:c7:
         60:d4:dd:ce:4b:2e:e7:75:44:b7:5c:48:4e:05:76:25:ff:d0:
         1d:6a:7c:44:40:27:5c:ac:67:fd:fc:ae:71:d6:ad:97:98:17:
         60:55:06:77:ac:8f:39:3f:2a:bf:c0:c2:d2:38:ef:c2:22:e4:
         88:bc:73:02:5e:bf:0c:ff:0d:a0:b0:20:d3:9e:20:77:78:6b:
         cc:57:80:fc:8e:09:0d:12:e0:fa:02:53:4f:21:49:7f:2d:52:
         a7:1c:04:3c:24:d3:69:34:0a:7d:71:e8:f8:3a:60:f0:23:78:
         06:00:be:6d:20:9b:43:ab:c9:f0:56:bf:dd:08:cf:20:0b:36:
         22:92:5e:a1:77:91:04:67:af:0c:a0:c7:9a:75:34:0c:7b:58:
         82:de:e2:5d:59:bb:59:0a:82:3a:06:48:c0:d0:15:e2:76:73:
         ce:a3:08:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICARUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTM0MjdaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKENDNTJENzY5NUEwQjk1
QzhDQUI2MUU4RERGNzIzQjkxMDMzN0Q2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaYCnU/Hpkwvrh5c/PfablDbKgThI5qYxdkJrlxIgEd7f8K7jx
ZEqcsn8izkOinS/s5OhBTY999S8fxOTXdTkUD7buD3Ozl9wi8xFoPTpxfDT8m+YV
ozf+cyuex1QCkh0GEGjmwLLIM7Rq6oru2VmRLdgbEwZ8GAZ1/RA/OsZ1pe0HCnS2
66RFN8iKoFS5QGY2WMu+Aq2/AOfm9tEbTZJxLTdQ7HecBCdOUnIPEXCxiGSVGd4L
qMvg9o9wE3UHXPr7rOU5zHnIKKu5XbnqQSD2P+uEwG2b5DmuMj5haAnWpqDeQmxp
tiLeLMOE6Qpvdekk27cOjaSP5XFBCxZhwvvrAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUzFLXaVoLlcjKth6N33I7kQM31iMwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny96RkxYYVZvTGxjakt0aDZOMzNJN2tRTTMxaU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQF0o3gMA0GCSqGSIb3DQEBCwUAA4IBAQBd5KhjU9hEAsvgdSPTJQMk
l1XmtMFU1sdpVd08IRxSozBv4VFss9tCyk6cdyBIuhQf/PXrAtKxLG9NSVGUoNTT
tk2X70pEO2TeiyeJ6mh9EpFWhcLSTjVxp8dg1N3OSy7ndUS3XEhOBXYl/9AdanxE
QCdcrGf9/K5x1q2XmBdgVQZ3rI85Pyq/wMLSOO/CIuSIvHMCXr8M/w2gsCDTniB3
eGvMV4D8jgkNEuD6AlNPIUl/LVKnHAQ8JNNpNAp9cej4OmDwI3gGAL5tIJtDq8nw
Vr/dCM8gCzYikl6hd5EEZ68MoMeadTQMe1iC3uJdWbtZCoI6BkjA0BXidnPOowgP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org