Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa
File:                     wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa (raw, json)
Hash identifier:          JQq+OYTnAV6nmAPcWtFSl2R92R0e146RUT1+ASGKyb0=
Subject key identifier:   C2:6C:77:B0:0A:E9:C0:EC:31:60:8A:86:DC:E0:AA:D4:D9:E6:4B:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0AB4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa
Signing time:             Sun 30 Jun 2024 01:54:32 +0000
ROA not before:           Sun 30 Jun 2024 01:54:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.67.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740 (0xab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:54:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C26C77B00AE9C0EC31608A86DCE0AAD4D9E64B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:c9:5b:c0:2b:26:fe:30:f2:2d:5f:f1:87:
                    79:16:58:12:ad:9d:3d:8a:5c:c3:1a:5f:4a:65:09:
                    46:3a:b1:ac:0f:e7:aa:cf:f0:e6:d3:ba:3c:3e:b0:
                    f7:19:e5:05:76:79:74:f1:fe:3d:8a:34:cd:2b:22:
                    93:08:e0:12:f4:58:95:2f:bf:bb:ef:44:5f:bc:2d:
                    ec:c8:c3:f3:02:59:8b:e3:1e:44:21:45:65:16:6d:
                    2d:d2:26:0e:a4:7c:9c:49:63:b3:50:ea:72:18:22:
                    e2:1b:be:73:01:c6:a0:50:fe:14:11:3b:69:1e:19:
                    fb:99:80:69:d1:d9:f4:7c:a2:ef:62:8d:13:00:2f:
                    ea:5d:f2:39:e4:f0:ce:4b:c3:78:00:16:91:d0:e1:
                    91:27:ed:54:4b:a8:4a:2a:28:14:a7:47:71:dc:a6:
                    37:d3:64:eb:cb:93:3a:a9:e4:1a:9d:45:03:83:64:
                    c7:3b:fa:51:ea:f9:ad:ef:84:32:dd:1d:63:2c:89:
                    8b:4d:11:99:0e:2d:37:38:60:98:e5:0d:45:de:da:
                    ac:9b:2a:c1:09:c2:d8:c5:ca:a9:9d:16:10:9e:33:
                    d4:82:6b:79:5c:67:f9:2d:8d:80:24:06:21:ed:6a:
                    43:e4:74:e0:2e:a2:85:65:96:0d:99:42:25:12:e3:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:77:B0:0A:E9:C0:EC:31:60:8A:86:DC:E0:AA:D4:D9:E6:4B:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmx3sArpwOwxYIqG3OCq1NnmS1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.67.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:32:f5:e6:28:12:ea:f5:d4:fa:f7:9d:6d:67:62:df:8f:8c:
         15:bd:50:6b:0a:3b:51:40:4b:e2:9c:70:f1:ef:14:c0:95:29:
         30:d6:45:5b:8c:0f:fa:62:23:05:c6:a5:91:a2:a9:1e:90:01:
         f1:27:6e:2e:31:e6:a5:f2:42:e6:aa:11:75:4f:42:a5:00:0d:
         91:27:97:c2:51:52:76:0a:3e:9d:86:85:5d:76:23:c6:2c:64:
         d7:c9:67:4f:de:b8:98:5a:2c:68:12:fb:82:21:4e:91:ec:4b:
         2b:f0:e5:0a:65:f1:1c:5e:5d:23:53:de:fb:98:32:d9:0b:0a:
         ee:f5:bb:f1:c0:4d:55:a3:57:75:d6:40:54:a2:b7:58:f4:53:
         82:df:aa:60:6d:75:47:48:63:05:d0:ca:e2:ef:2f:ba:87:3a:
         62:b2:bb:2f:2c:ea:bf:01:d6:9a:7e:b8:40:20:56:e6:a9:9c:
         62:ff:36:74:c1:e2:b1:27:4a:c8:d3:d8:a6:9f:a3:35:77:ff:
         f2:4b:3b:7d:c0:3f:2b:52:86:7a:f4:5e:c8:95:b8:18:4d:3c:
         b0:24:dc:40:d6:6f:f3:ee:a5:49:38:f9:5e:ed:88:6f:eb:68:
         0a:2b:b7:54:ff:30:84:27:03:71:e9:82:85:95:1a:1d:05:cd:
         2a:fd:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:00 2025 by rpki-client