Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gloXslGoHYQQJgmaJT2ai85Cros.roa
File:                     gloXslGoHYQQJgmaJT2ai85Cros.roa (raw, json)
Hash identifier:          31pS5ZULAvvqzojDOvBXM9zPvTWYa9lwruuzdRrfr6Y=
Subject key identifier:   82:5A:17:B2:51:A8:1D:84:10:26:09:9A:25:3D:9A:8B:CE:42:AE:8B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03BC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gloXslGoHYQQJgmaJT2ai85Cros.roa
Signing time:             Wed 18 Dec 2024 02:13:01 +0000
ROA not before:           Wed 18 Dec 2024 02:13:01 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        14.8.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:13:01 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=825A17B251A81D841026099A253D9A8BCE42AE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:b8:d8:39:ec:f7:1d:70:cc:43:36:71:61:
                    33:dd:bb:14:66:63:10:35:20:c8:10:f3:f8:65:12:
                    7e:d6:52:d5:8d:9c:e5:04:38:b5:9c:6a:85:2a:0a:
                    a3:d6:8e:12:d3:9b:09:23:c4:ae:cb:79:22:83:2f:
                    e8:c1:c3:01:a4:9b:98:7b:9a:b6:4d:92:c8:3c:e1:
                    89:2a:70:a4:49:35:62:ee:82:f7:c3:eb:62:11:78:
                    e7:ba:a8:0b:27:ba:17:e2:61:46:3f:27:10:a1:28:
                    27:91:8d:97:ec:e3:96:4e:b8:9c:7e:37:8a:c9:4c:
                    50:e9:77:82:05:c3:2f:bd:69:3a:1a:8b:94:d7:57:
                    6c:65:1d:b3:49:52:7a:a0:d7:54:29:bc:4c:05:ec:
                    13:a0:47:ba:47:c2:95:84:74:af:2a:9b:b3:21:8e:
                    d2:8c:cb:69:1a:49:63:65:c7:cf:23:5e:c8:cb:85:
                    26:4c:3c:84:b5:f8:99:46:7d:d5:79:5c:d8:e4:ea:
                    87:bb:d9:36:d1:79:7f:25:a8:a8:63:04:5f:79:06:
                    11:89:fd:28:07:2a:4d:e3:52:21:4d:2b:d8:e5:49:
                    36:49:12:29:a9:51:dd:28:dd:ad:54:a7:fb:0a:50:
                    82:e3:f3:22:8a:48:72:73:ac:4b:3a:15:a1:72:6a:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:17:B2:51:A8:1D:84:10:26:09:9A:25:3D:9A:8B:CE:42:AE:8B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gloXslGoHYQQJgmaJT2ai85Cros.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.8.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:0c:ce:6a:12:00:2c:3a:a2:b7:0d:ea:74:fe:d4:28:42:
         f6:49:f1:59:57:c9:0a:75:0b:f2:4b:6a:e8:15:71:94:7a:18:
         c5:6f:6b:96:22:08:c7:ab:a5:ea:b3:26:38:f8:9f:82:9f:50:
         fa:00:04:10:ea:18:84:94:e6:07:ff:d7:7b:47:40:b8:5b:0b:
         b3:b0:94:c5:49:33:4f:86:e8:f9:4d:0b:1a:09:d7:99:b9:ab:
         b0:88:6b:bf:2d:9d:ae:99:b8:23:57:74:6b:cb:f4:5f:c5:9a:
         c2:42:4f:74:96:cb:03:ed:4f:60:ad:c7:52:c3:78:3c:19:80:
         a7:ed:39:2a:f6:5a:e3:a6:61:40:73:c3:99:3f:88:bf:3e:2c:
         e5:b2:13:47:01:85:5b:68:f3:31:3f:0d:d3:9c:d9:60:7d:88:
         15:19:bb:3a:dc:13:c8:95:aa:db:07:fb:34:7f:64:6e:36:2b:
         ac:63:b8:44:81:9c:19:d9:46:e8:35:cf:7a:5d:a1:38:4a:e7:
         c1:46:3d:74:75:84:6c:06:5a:33:1f:e3:99:e2:20:9a:d9:cf:
         50:5d:41:ba:5d:ae:90:22:e8:54:f4:d1:b8:26:b8:83:ba:b7:
         d7:42:a6:b7:36:01:75:06:5c:5e:89:80:3f:92:99:29:74:17:
         c2:26:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:39 2025 by rpki-client