Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fOSh4Bbs9IZcwbG7vKzj31YWIsI.roa
File:                     fOSh4Bbs9IZcwbG7vKzj31YWIsI.roa (raw, json)
Hash identifier:          qHSYBHjJ0GX7D91fz5lWt9HHy9d5txQ4ayzg2dLECzc=
Subject key identifier:   7C:E4:A1:E0:16:EC:F4:86:5C:C1:B1:BB:BC:AC:E3:DF:56:16:22:C2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       048E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fOSh4Bbs9IZcwbG7vKzj31YWIsI.roa
Signing time:             Wed 18 Dec 2024 02:26:33 +0000
ROA not before:           Wed 18 Dec 2024 02:26:33 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        27.82.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:26:33 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=7CE4A1E016ECF4865CC1B1BBBCACE3DF561622C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:43:9b:d3:85:e0:47:e1:31:66:ce:5f:63:
                    8b:50:2b:5e:90:9f:9d:cc:03:af:94:e7:63:61:b2:
                    93:c8:e8:89:ff:d2:ae:40:91:88:b7:73:65:58:1a:
                    52:0b:43:d3:3e:45:6a:b5:af:43:03:a5:fb:13:2f:
                    3b:d2:7a:12:9a:a2:36:92:7e:b1:6b:a0:b2:ee:39:
                    76:29:ab:c9:05:92:56:77:67:95:8d:d2:ec:00:05:
                    42:4b:65:83:fe:08:30:8c:d9:e5:94:ec:1f:c5:f7:
                    67:fa:59:cb:98:fd:3a:5d:71:c8:06:ab:05:bf:77:
                    5f:55:a0:db:92:12:a7:bf:35:db:de:11:e9:b9:e3:
                    e6:89:81:b1:d9:6d:1c:07:55:7f:9a:1b:3f:84:87:
                    e9:4b:b6:54:db:f9:be:e2:f0:70:54:0e:2a:98:fa:
                    0b:94:ef:6a:6b:25:7f:0c:90:46:0a:5e:f7:79:e4:
                    ad:89:b3:ec:78:95:45:7d:95:8a:7e:6f:77:6b:41:
                    d5:77:d1:65:5e:91:8b:29:7c:7e:b9:ed:d4:54:f5:
                    89:f5:50:da:87:3c:2e:4f:8a:c2:22:44:09:44:25:
                    e5:96:30:95:b1:eb:4d:eb:9b:f7:c5:3c:49:51:fa:
                    45:0c:09:dc:f3:6b:6a:1b:e9:68:bf:bf:f2:af:71:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:A1:E0:16:EC:F4:86:5C:C1:B1:BB:BC:AC:E3:DF:56:16:22:C2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fOSh4Bbs9IZcwbG7vKzj31YWIsI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:40:91:dc:b2:40:0e:62:d8:24:f9:23:52:c7:b8:fb:39:8a:
         04:c7:08:1f:f6:47:da:7b:a3:f1:8e:a2:70:cf:c2:7c:45:04:
         78:39:3f:8e:9d:ba:aa:01:a2:69:3b:62:1f:7a:e5:63:82:c1:
         f3:0e:1f:57:25:c5:6c:ea:a6:a7:35:65:d6:13:f8:96:dc:6f:
         83:b6:bc:63:ca:5e:4f:b9:c6:15:74:a5:97:56:84:86:91:b5:
         49:36:29:89:91:e2:4a:59:35:3c:ce:61:26:3c:bb:b1:49:cd:
         57:95:bb:c2:ee:74:4e:f1:f4:77:f8:d9:a7:c8:f8:9a:35:96:
         cb:cf:d9:1d:b9:ae:1b:37:b7:5a:c2:4a:9b:7f:2a:31:7a:02:
         79:73:33:a9:07:c7:f6:c1:ee:05:64:1b:77:24:f7:5a:a2:2e:
         9c:5f:d7:03:e3:b0:f9:78:15:b2:e3:f1:c1:99:2b:e5:8c:a6:
         b9:50:d9:aa:32:8e:f2:ca:23:f1:76:b6:19:a9:f3:da:00:19:
         87:08:e4:b5:36:00:ee:95:99:1b:00:94:17:81:4d:9d:35:60:
         17:4c:6c:da:f0:23:43:21:64:49:7f:1d:83:0d:0b:54:ad:78:
         31:b3:9c:c0:77:08:64:1d:d0:72:89:0f:98:1b:f6:67:4b:4c:
         3c:15:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:16 2025 by rpki-client