Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4WhmDuHL2KENdSUW06E7uDFkacU.roa
File:                     4WhmDuHL2KENdSUW06E7uDFkacU.roa (raw, json)
Hash identifier:          IZe4AX8mg2a1latW9iTNInTVAaIwon3IVPERtPk3hEc=
Subject key identifier:   E1:68:66:0E:E1:CB:D8:A1:0D:75:25:16:D3:A1:3B:B8:31:64:69:C5
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       AB
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4WhmDuHL2KENdSUW06E7uDFkacU.roa
Signing time:             Wed 04 Dec 2024 19:34:59 +0000
ROA not before:           Wed 04 Dec 2024 19:34:59 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        61.213.172.116/30 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:34:59 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E168660EE1CBD8A10D752516D3A13BB8316469C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:75:69:a7:a3:0e:73:f2:e1:23:a0:5d:90:
                    18:ce:e7:63:3e:9e:f6:e2:66:43:79:f1:e5:1e:f4:
                    09:d0:e0:76:fd:eb:31:26:fa:23:fc:4e:00:41:a0:
                    59:f0:d1:6d:e1:db:b4:db:ee:07:38:fb:99:ee:e5:
                    74:6b:d4:36:f7:49:c5:ab:da:ae:32:ca:0e:44:a8:
                    95:50:09:9c:31:c8:6b:22:12:26:b9:df:4e:61:e1:
                    7e:86:d9:a9:b6:40:ba:5f:60:96:e6:c6:e8:0a:4e:
                    af:17:e6:9b:e6:a5:63:9c:3b:80:d8:3a:f5:e7:bd:
                    8c:3b:a2:1d:1a:ac:4c:7c:48:5d:ac:aa:36:6e:07:
                    ca:88:a2:ce:1a:df:81:26:d5:21:bd:4a:d2:f3:70:
                    a7:06:52:58:00:f7:4e:5b:99:97:2f:7a:13:48:0e:
                    39:ce:37:44:30:85:79:05:ff:08:b1:03:73:6a:11:
                    24:41:96:37:c3:81:89:b5:36:11:c8:f1:17:55:67:
                    91:03:f0:9a:4c:74:51:2a:8b:9a:0e:5b:ca:86:ee:
                    93:f2:e4:72:85:5e:ec:19:27:b8:89:f7:98:c8:ba:
                    40:de:0a:06:22:49:76:5d:eb:c2:fb:f6:bc:1c:d4:
                    2a:96:9e:57:52:68:b1:cd:a2:bc:b5:3c:6a:8a:17:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:68:66:0E:E1:CB:D8:A1:0D:75:25:16:D3:A1:3B:B8:31:64:69:C5
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4WhmDuHL2KENdSUW06E7uDFkacU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.172.116/30

    Signature Algorithm: sha256WithRSAEncryption
         3e:d5:ec:ae:a5:89:ad:1f:b0:ab:96:ad:00:c9:af:32:ff:ae:
         67:a9:6d:9c:c9:32:27:9a:d7:dd:c4:18:d9:5b:77:e1:9b:36:
         79:71:12:1c:3e:0e:4f:4b:ae:5c:32:7c:83:c8:18:6a:d1:37:
         2c:5b:1f:fe:0a:11:42:dd:fd:38:dc:a0:a2:57:fc:b6:0c:df:
         f3:17:d0:66:07:e2:e0:6a:10:ec:f4:fa:64:a7:4f:d4:85:b0:
         d6:97:83:f2:f3:51:9e:59:47:40:cc:1d:e0:c0:c1:50:b7:bb:
         94:b9:f4:f6:1b:9d:26:ca:d9:c1:53:b5:a4:8c:00:f3:44:83:
         97:9d:84:c9:34:7a:ca:9e:1e:05:66:55:b8:6c:cc:ca:ca:e6:
         ff:b7:b2:6e:43:ab:6d:d8:1d:d0:a4:74:f6:af:0c:df:b2:41:
         db:52:d9:fe:d7:a5:b6:ad:fb:b4:c2:ce:e5:cb:02:ab:78:fa:
         8f:7f:d2:28:a7:37:cf:dc:e0:a3:e5:f6:0c:6d:37:40:8c:07:
         75:36:ad:79:42:48:f6:a3:d7:7d:1e:69:47:a3:c2:ff:f1:b3:
         81:b1:4c:c5:3a:5c:48:84:ed:e8:0a:0c:b0:cf:d3:64:cf:e1:
         4e:f0:fb:ec:3a:c2:1b:a7:38:76:9a:ec:a1:3d:4f:10:2a:af:
         04:fe:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:39 2025 by rpki-client