Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GJxaSUz7Pqsx0LrBK6iMYhoVOp4.roa
File:                     GJxaSUz7Pqsx0LrBK6iMYhoVOp4.roa (raw, json)
Hash identifier:          fj7k1s+dg/NU1/2HDAyaCfStYNlF7Kt6F4G+Y/mRMEo=
Subject key identifier:   18:9C:5A:49:4C:FB:3E:AB:31:D0:BA:C1:2B:A8:8C:62:1A:15:3A:9E
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       5C
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GJxaSUz7Pqsx0LrBK6iMYhoVOp4.roa
Signing time:             Fri 22 Nov 2024 06:19:42 +0000
ROA not before:           Fri 22 Nov 2024 06:19:42 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        160.249.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Nov 22 06:19:42 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=189C5A494CFB3EAB31D0BAC12BA88C621A153A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:94:8b:1c:8d:a6:75:e2:7c:2e:af:2c:12:
                    ac:5d:d0:d7:01:b2:fe:db:38:4a:4c:0b:2c:a6:06:
                    8f:62:db:ad:7f:ab:80:48:36:f6:41:c2:21:47:1f:
                    12:f7:c6:67:7d:f1:ad:61:63:e1:40:de:2d:e3:f8:
                    02:84:13:64:d6:cc:77:e1:84:c7:a0:6d:6f:12:ce:
                    f1:62:6b:09:11:cb:3b:52:d0:a7:95:7b:12:da:29:
                    80:5b:79:dc:5e:77:62:c4:17:1d:4b:c5:64:5e:23:
                    92:2e:12:87:1a:d1:f0:aa:cf:11:f3:e8:e0:ca:dc:
                    ee:4d:c8:68:df:c6:77:04:46:8f:7a:cc:3f:36:52:
                    28:37:07:88:31:ba:dd:3e:e6:d4:ce:a2:11:c7:68:
                    77:77:09:78:8d:b3:cf:83:49:8e:6a:ce:cc:72:0a:
                    1c:ec:a0:4b:87:e7:cf:ff:e7:14:c5:14:0a:51:c1:
                    31:61:d3:96:41:e9:d0:23:34:8f:f5:9b:82:18:f2:
                    9c:89:76:09:7a:f9:b9:48:63:96:ae:c7:cd:a7:99:
                    8e:44:1b:23:5b:ff:da:86:45:ef:ff:d8:ec:3d:7d:
                    4a:43:a9:8d:de:f2:27:a8:cb:a6:ed:49:75:1b:7c:
                    eb:04:6c:a1:8a:7d:d6:1c:ba:16:42:60:9d:6c:c4:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:5A:49:4C:FB:3E:AB:31:D0:BA:C1:2B:A8:8C:62:1A:15:3A:9E
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GJxaSUz7Pqsx0LrBK6iMYhoVOp4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:24:48:9b:c3:9b:20:f4:0f:8c:e3:ec:a8:8e:aa:f9:51:
         96:89:c2:91:c7:e5:e4:1e:61:c4:2e:32:65:ee:51:6f:bf:30:
         05:9c:a7:c3:50:1b:51:ec:13:52:2e:37:ed:10:5a:19:dc:40:
         87:2b:6c:ad:a2:20:cd:a8:15:ed:5c:75:34:54:f6:dd:00:ce:
         9f:54:d4:c7:54:64:9f:39:de:25:91:c6:db:9f:56:27:1e:61:
         fa:f6:3c:e9:ad:ad:8d:27:ac:b9:59:58:13:63:14:0a:7d:ba:
         f5:28:ad:e2:d6:bc:2c:a7:b6:23:50:a6:56:41:91:20:23:70:
         24:63:43:68:2a:66:27:bf:9d:fa:ca:c2:37:05:51:86:2e:b3:
         d6:65:81:20:1f:4f:54:d2:57:36:a0:16:5e:f6:f5:66:fb:4a:
         b0:c0:30:a4:a8:56:60:96:44:7a:2b:4c:7c:a3:2e:20:0f:ca:
         67:16:0d:08:06:0d:2d:c8:9c:3a:e8:b7:bb:b5:69:73:1a:03:
         8c:97:ff:6d:12:2d:dd:4f:8a:80:51:19:a9:a8:cf:5a:e7:75:
         bb:29:bc:04:4f:d6:60:c3:7b:e4:4d:cc:53:88:8e:5d:2f:6d:
         53:26:02:24:c6:3c:a1:6a:ee:03:8f:77:e8:15:9e:b8:fa:aa:
         ae:71:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:17 2025 by rpki-client