Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/grr46zxL5vp8-CtVlwR5RyuA0qk.roa
File:                     grr46zxL5vp8-CtVlwR5RyuA0qk.roa (raw, json)
Hash identifier:          tqAlgQ4qdIepzWWTyVdBCa1PNR2aP9Z3hhjHJOpRjCQ=
Subject key identifier:   82:BA:F8:EB:3C:4B:E6:FA:7C:F8:2B:55:97:04:79:47:2B:80:D2:A9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0576
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/grr46zxL5vp8-CtVlwR5RyuA0qk.roa
Signing time:             Wed 18 Dec 2024 03:00:59 +0000
ROA not before:           Wed 18 Dec 2024 03:00:59 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:59 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=82BAF8EB3C4BE6FA7CF82B55970479472B80D2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:9c:79:fc:80:f7:28:0e:a2:14:dc:96:58:
                    b8:e4:06:c6:65:ba:de:7d:d4:f2:3b:22:b7:f3:b0:
                    c8:a3:99:07:09:16:82:c6:37:84:86:6f:8f:d4:c8:
                    31:ae:72:b2:e0:91:eb:62:3d:ff:26:86:45:07:e0:
                    e2:fd:0a:d3:56:60:f5:1c:5d:d0:5d:73:e5:23:13:
                    d8:b6:be:ed:a6:ac:20:4e:7a:3d:47:48:1d:0a:d8:
                    7f:34:3b:38:68:94:68:08:01:31:aa:6d:f2:56:29:
                    db:cc:ee:b5:ec:ac:fe:1b:92:87:3f:c0:6e:08:ea:
                    94:ec:ac:e5:8d:7a:a0:50:6c:5c:92:84:27:42:6f:
                    fd:f1:34:0e:6f:cf:64:fd:3b:81:aa:63:34:a2:e5:
                    ea:ef:5c:11:d9:e7:b1:95:88:f5:d6:fd:72:82:d9:
                    13:73:31:93:6e:a2:70:23:3c:0c:6c:88:30:67:db:
                    94:4c:62:f9:47:ea:8a:28:72:21:25:16:91:01:8b:
                    f9:ae:36:62:89:03:3b:d7:f3:00:41:85:81:3f:ac:
                    73:7e:8b:c4:52:8b:54:a1:5d:6e:14:e2:74:0a:64:
                    7b:77:ba:10:39:b2:0c:89:70:f8:bc:dc:6b:b5:ee:
                    24:48:ef:31:ca:67:db:a1:18:28:68:08:3d:b8:64:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BA:F8:EB:3C:4B:E6:FA:7C:F8:2B:55:97:04:79:47:2B:80:D2:A9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/grr46zxL5vp8-CtVlwR5RyuA0qk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:78:8b:57:b9:a1:7b:44:8d:81:bd:81:62:dd:2a:34:67:
         7f:c8:e6:49:da:67:59:92:8c:0a:bf:c8:a7:62:f1:15:03:fd:
         d3:62:dd:9a:92:0f:18:63:9b:21:1d:0f:b9:52:35:1d:a9:b4:
         2e:b0:96:d4:76:6f:7b:0c:dd:81:a9:8f:aa:0b:f2:3d:b7:c5:
         b2:c8:d6:22:9a:42:d5:22:99:7b:99:66:d6:8d:f8:2a:52:78:
         63:d4:64:da:ab:43:00:b5:be:ed:cf:12:16:a5:60:bd:88:6e:
         ed:b5:65:bf:68:60:00:af:83:83:ea:68:28:74:65:3d:33:8c:
         c6:43:9a:f9:ee:15:16:61:b8:b8:bb:12:a1:d8:1d:9b:e8:05:
         ce:38:c8:59:05:e4:d1:b4:5d:2e:27:b1:de:ac:57:ba:ad:79:
         c3:7e:b8:cf:40:3c:e6:e4:31:77:44:f2:e4:c2:82:9d:a5:d5:
         11:ac:67:bd:63:2c:6d:80:30:9a:3d:e6:9a:6d:72:82:45:05:
         99:53:4d:d5:da:f6:f5:01:f3:2f:71:e2:6e:d5:aa:70:ab:bb:
         d7:15:83:15:33:69:08:92:a9:71:23:cd:79:0a:15:b8:15:a4:
         33:55:ca:c4:ce:a8:4f:02:58:46:d4:04:75:b9:04:6a:ee:0f:
         42:bc:83:3b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MzAwNTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyQkFGOEVCM0M0QkU2
RkE3Q0Y4MkI1NTk3MDQ3OTQ3MkI4MEQyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC23Zx5/ID3KA6iFNyWWLjkBsZlut591PI7IrfzsMijmQcJFoLG
N4SGb4/UyDGucrLgketiPf8mhkUH4OL9CtNWYPUcXdBdc+UjE9i2vu2mrCBOej1H
SB0K2H80OzholGgIATGqbfJWKdvM7rXsrP4bkoc/wG4I6pTsrOWNeqBQbFyShCdC
b/3xNA5vz2T9O4GqYzSi5ervXBHZ57GViPXW/XKC2RNzMZNuonAjPAxsiDBn25RM
YvlH6ooociElFpEBi/muNmKJAzvX8wBBhYE/rHN+i8RSi1ShXW4U4nQKZHt3uhA5
sgyJcPi83Gu17iRI7zHKZ9uhGChoCD24ZFgrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgrr46zxL5vp8+CtVlwR5RyuA0qkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2dycjQ2enhMNXZwOC1DdFZsd1I1Unl1QTBxay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbTBwAwDQYJKoZIhvcNAQELBQADggEBAD+eeItXuaF7RI2BvYFi3So0Z3/I
5knaZ1mSjAq/yKdi8RUD/dNi3ZqSDxhjmyEdD7lSNR2ptC6wltR2b3sM3YGpj6oL
8j23xbLI1iKaQtUimXuZZtaN+CpSeGPUZNqrQwC1vu3PEhalYL2Ibu21Zb9oYACv
g4PqaCh0ZT0zjMZDmvnuFRZhuLi7EqHYHZvoBc44yFkF5NG0XS4nsd6sV7qtecN+
uM9APObkMXdE8uTCgp2l1RGsZ71jLG2AMJo95pptcoJFBZlTTdXa9vUB8y9x4m7V
qnCru9cVgxUzaQiSqXEjzXkKFbgVpDNVysTOqE8CWEbUBHW5BGruD0K8gzs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:01 2025 by rpki-client