Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oEFA74RRug6EbSdjumtpSLjaAI0.roa
File:                     oEFA74RRug6EbSdjumtpSLjaAI0.roa (raw, json)
Hash identifier:          51EO/WJEMn4yLqJ0/v9HmzSLCXnJl4H0/nhz7WprC3s=
Subject key identifier:   A0:41:40:EF:84:51:BA:0E:84:6D:27:63:BA:6B:69:48:B8:DA:00:8D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0486
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oEFA74RRug6EbSdjumtpSLjaAI0.roa
Signing time:             Wed 18 Dec 2024 02:26:29 +0000
ROA not before:           Wed 18 Dec 2024 02:26:29 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        222.10.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:26:29 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=A04140EF8451BA0E846D2763BA6B6948B8DA008D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:78:84:a6:d8:01:b3:c2:6a:39:dc:ea:87:
                    b3:43:2d:cf:02:4d:40:ef:39:d4:e8:c5:aa:14:24:
                    10:e4:a5:d0:76:f6:1e:0b:51:07:0a:94:d0:7c:df:
                    e8:63:40:4c:86:2a:59:4b:d6:e7:0f:ef:6e:75:7a:
                    6d:63:ab:6f:c5:2a:9b:ed:11:d1:27:3e:8d:6e:47:
                    03:fd:9c:ca:cd:0f:eb:5f:94:50:17:e8:47:c9:4b:
                    57:f0:9f:ce:1c:83:cd:e9:1b:0b:64:3a:a2:d1:c0:
                    19:0b:b6:e3:3e:51:3d:dc:41:55:df:0c:04:dc:96:
                    2e:58:41:bc:55:9b:7a:7b:f3:da:c7:bb:e4:0b:75:
                    94:e5:50:9f:a3:84:26:3e:ad:20:28:85:34:30:58:
                    c2:66:73:36:68:52:ac:f0:a1:06:21:6a:d7:57:e5:
                    67:67:06:4d:ba:f9:c1:42:ea:d9:88:63:2d:82:16:
                    d5:ca:93:c5:58:19:35:98:49:85:05:11:ff:53:73:
                    8c:d1:a2:d0:80:2e:73:73:e0:4c:05:6a:e1:35:b6:
                    e8:b1:f2:76:04:f3:2f:98:28:63:fb:ef:e2:c7:97:
                    0c:01:11:dd:6d:82:ad:88:aa:fd:52:b1:89:2b:00:
                    c9:72:46:ed:53:83:51:c5:bb:f6:04:7d:19:56:ba:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:40:EF:84:51:BA:0E:84:6D:27:63:BA:6B:69:48:B8:DA:00:8D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oEFA74RRug6EbSdjumtpSLjaAI0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:54:b4:e5:36:64:ff:49:ab:a4:26:f2:00:62:3e:84:07:67:
         4e:88:6e:7e:ff:2b:9e:b4:fd:16:90:22:4f:01:0e:76:4e:e4:
         d7:d7:2d:07:9a:5a:a6:3c:2e:6b:0b:1f:cc:28:32:78:a5:e8:
         ad:6e:b1:c6:2c:39:88:ae:40:1e:85:e8:af:cc:e8:66:2a:fb:
         e8:e2:2c:bd:1b:eb:56:a2:5b:6e:51:b8:ff:99:0b:03:98:67:
         ca:84:aa:3f:90:51:94:0c:63:f6:5f:94:36:7e:0d:f3:29:a6:
         91:d5:92:95:a3:af:d1:f7:a5:2a:52:ee:f4:d1:7e:73:60:1f:
         bc:2a:9a:67:b9:dc:4d:1f:0f:2d:15:d8:86:11:44:1b:c0:dc:
         ab:db:08:c4:9b:b2:80:97:44:94:6b:00:19:05:9e:7d:78:4e:
         1a:9e:3e:00:15:97:b2:4d:0b:e2:cb:26:d4:ac:34:5b:c1:af:
         17:f8:d1:03:a7:6b:e0:b7:a5:32:b4:68:92:b1:5e:3a:90:79:
         6d:d1:62:ff:02:1d:92:bb:30:2c:97:2c:e4:ed:78:47:e6:1b:
         02:e3:03:a9:60:16:30:6c:d1:9d:14:fb:3b:d0:60:2e:b4:ff:
         6c:22:df:9d:5a:56:db:6b:3f:a3:d9:14:63:7c:9d:2c:e8:d5:
         43:f1:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:18 2025 by rpki-client