Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zob-fBdlim6kA3mj5W__f-eR4r0.roa
File:                     zob-fBdlim6kA3mj5W__f-eR4r0.roa (raw, json)
Hash identifier:          ZdXimJX+a6kXyjB6qwaF2I2CwBcjwzFZ4TrZ9y62qOQ=
Subject key identifier:   CE:86:FE:7C:17:65:8A:6E:A4:03:79:A3:E5:6F:FF:7F:E7:91:E2:BD
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0112
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zob-fBdlim6kA3mj5W__f-eR4r0.roa
Signing time:             Fri 01 Sep 2023 01:34:26 +0000
ROA not before:           Fri 01 Sep 2023 01:34:26 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:26 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=CE86FE7C17658A6EA40379A3E56FFF7FE791E2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:fc:3a:9d:48:39:60:dc:f8:fd:ff:03:e5:
                    9e:fa:ec:25:a6:6b:f6:86:a1:38:1e:1b:be:0d:35:
                    cb:a5:84:37:33:21:4c:a3:44:eb:b4:a2:d1:e0:70:
                    86:27:ff:0f:bd:67:29:65:9f:30:f7:ea:65:d9:09:
                    ab:45:e2:10:f9:ea:69:8a:be:c2:17:ca:cf:66:cf:
                    c0:21:b5:bd:6f:db:14:a6:85:4c:6c:39:48:e1:79:
                    75:4a:6d:8e:3c:aa:cd:ae:18:75:56:15:5c:3c:5a:
                    50:11:19:8d:65:8d:57:d3:94:79:d8:2b:04:cd:64:
                    3b:43:69:69:de:d6:14:92:88:67:4c:35:58:4d:7d:
                    d1:3f:98:b0:2c:4e:12:85:ec:5b:60:08:01:30:d2:
                    1f:56:62:bb:69:9e:e7:8f:f6:37:51:d6:66:13:31:
                    8e:c1:a2:5f:db:0c:de:27:38:bc:7e:47:73:52:a1:
                    7a:06:78:51:85:1f:65:ea:9e:1d:e7:19:f2:ed:d0:
                    8f:8a:5f:26:81:29:8e:9a:41:c8:30:66:64:3f:d5:
                    a3:3d:95:11:49:9b:f8:46:7a:c2:46:46:1c:49:f9:
                    49:66:cb:03:15:94:a9:0e:9f:3f:fe:5a:65:ab:7a:
                    7b:63:2c:f1:8f:62:74:ad:75:17:db:c4:2e:fd:42:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:86:FE:7C:17:65:8A:6E:A4:03:79:A3:E5:6F:FF:7F:E7:91:E2:BD
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zob-fBdlim6kA3mj5W__f-eR4r0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:6f:d0:a8:3b:d6:b6:6b:b5:1a:d4:1e:41:bd:e0:2c:a2:
         3e:2e:5b:a4:51:8c:58:09:48:95:fe:26:41:94:dd:23:7b:a5:
         59:a5:02:88:3a:2c:c2:37:9a:fc:48:52:90:76:28:1d:9b:c1:
         b7:40:08:dd:db:7a:58:f3:9c:c5:45:72:6e:99:74:aa:a1:57:
         67:81:91:fa:ff:d8:41:9f:14:39:36:57:86:f9:a1:22:d6:8b:
         f3:40:50:ed:3c:08:e7:ea:84:50:6a:1c:77:70:a9:27:5f:fe:
         2f:95:24:07:19:e2:b3:ea:ef:3d:30:16:ea:ff:05:b8:a7:4d:
         fc:4e:19:a4:33:eb:8e:b3:f0:65:e1:63:54:50:a2:e7:dc:94:
         8e:b8:70:af:97:ba:56:d5:40:fc:56:58:1a:1a:ce:b2:e5:97:
         4a:ce:cb:b5:03:d4:66:3b:f4:4e:8d:c2:24:e7:b0:bd:dc:0a:
         c3:2d:ad:1b:6a:f7:15:ce:04:bf:8b:8b:52:0d:3d:c6:77:c6:
         19:44:77:89:6b:6f:a7:66:9e:d3:48:e8:69:b9:ec:41:38:3f:
         42:ee:1f:ca:12:75:52:91:4f:f9:7a:35:9a:ee:85:33:3d:88:
         b9:13:d4:db:c0:4a:79:97:31:fe:b1:d9:61:80:9c:05:76:43:
         e0:1b:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org