Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZVOT94GqamuEBykaC2IoyAvvhZ8.roa
File:                     ZVOT94GqamuEBykaC2IoyAvvhZ8.roa (raw, json)
Hash identifier:          MS+bb9Y/uayLSy/CEeW9HUBOhQN3Iy0p6qZKBCGTVy4=
Subject key identifier:   65:53:93:F7:81:AA:6A:6B:84:07:29:1A:0B:62:28:C8:0B:EF:85:9F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0520
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZVOT94GqamuEBykaC2IoyAvvhZ8.roa
Signing time:             Wed 18 Dec 2024 02:42:22 +0000
ROA not before:           Wed 18 Dec 2024 02:42:22 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.40.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:42:22 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=655393F781AA6A6B8407291A0B6228C80BEF859F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:79:0d:bb:83:25:b5:57:da:88:8f:9a:ee:
                    38:c6:5e:fd:2a:ed:a8:5d:14:07:ea:bb:6c:eb:93:
                    a4:e8:3e:48:da:61:40:aa:7e:f1:fc:59:29:d9:7e:
                    66:13:c7:6c:01:0a:bc:4f:a0:32:33:36:6b:46:d3:
                    43:35:82:7d:75:3a:e1:a8:a4:35:63:85:d9:6e:cb:
                    7b:b0:1b:31:e2:ee:85:02:2b:e7:a0:c0:fe:1d:cb:
                    eb:55:da:d1:96:c5:e5:b9:5e:dd:73:d5:48:b2:9c:
                    de:23:86:a8:17:77:4b:a2:d7:34:c3:84:0f:09:4a:
                    9c:70:96:0a:d2:30:0f:df:84:57:2a:02:9b:3a:55:
                    0c:50:25:50:20:c2:12:e9:a7:fe:fa:f7:3d:c3:f0:
                    17:c8:45:fa:40:6f:6d:3d:8a:be:81:cb:1e:b8:0b:
                    05:48:1d:e3:ea:a4:ef:c5:d3:d1:40:7f:61:d4:59:
                    a7:2e:87:70:0f:06:8a:5b:ba:6a:1e:0e:25:2a:0d:
                    1f:14:4b:82:7e:28:8e:9b:5c:b6:11:9c:47:e9:85:
                    6e:16:28:ca:d3:f8:d5:f0:c6:c5:0c:aa:46:85:36:
                    84:c4:dc:c0:77:c7:66:3a:94:1e:45:e6:b4:69:88:
                    b0:ac:56:06:d8:0d:b9:4c:f9:5b:36:5d:39:e0:88:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:93:F7:81:AA:6A:6B:84:07:29:1A:0B:62:28:C8:0B:EF:85:9F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZVOT94GqamuEBykaC2IoyAvvhZ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:32:a4:2a:6f:49:f2:4d:84:ed:8a:d0:fa:5d:0c:ae:42:
         5d:2a:18:a1:ac:c1:6a:e8:e7:1f:6a:dc:d0:12:b1:e3:7b:76:
         47:05:76:35:72:85:9e:95:a7:31:ce:0b:f5:bf:b2:96:25:45:
         29:86:13:4e:2a:98:ec:7f:41:d5:fa:4b:42:e3:9f:0b:f5:88:
         13:12:71:f8:62:75:15:c8:17:67:69:71:2a:bf:9f:21:20:b6:
         38:21:f6:62:4e:f6:3c:d6:b3:4d:12:7a:8e:99:ff:59:48:5f:
         31:d8:74:e2:a6:b7:cf:04:fa:ec:95:b8:a0:73:3f:d9:6e:87:
         8a:47:cd:d6:35:8e:d0:8b:53:7b:8c:44:97:c4:ef:a8:0e:b9:
         92:5c:21:bd:53:90:70:2e:f9:77:f7:a2:23:c8:a6:d5:05:a8:
         f2:cc:a6:f4:87:53:d6:5b:9e:91:69:54:28:57:58:44:c0:30:
         a0:f3:8c:e2:b7:02:5e:a0:5d:60:24:01:65:2b:37:8f:23:4e:
         81:6a:1e:5f:2c:e4:d5:0d:46:22:3f:5c:d1:fd:98:2c:9d:91:
         7f:94:87:c2:dc:8e:92:35:de:d7:0f:92:3c:71:1f:9b:d8:35:
         c4:f9:be:81:ae:01:30:3d:a8:38:ef:48:1c:ea:27:f2:54:01:
         d8:5d:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:44 2025 by rpki-client