Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/YobCZrPe7--5rynek5XP7fdqlCs.roa
File:                     YobCZrPe7--5rynek5XP7fdqlCs.roa (raw, json)
Hash identifier:          +/C9L5gVnJsgnj7O4qvh1ElTbnEcxItGslbUXr5jmw4=
Subject key identifier:   62:86:C2:66:B3:DE:EF:EF:B9:AF:29:DE:93:95:CF:ED:F7:6A:94:2B
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       09
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/YobCZrPe7--5rynek5XP7fdqlCs.roa
Signing time:             Thu 26 Sep 2024 21:13:39 +0000
ROA not before:           Thu 26 Sep 2024 21:13:39 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        221.118.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep 26 21:13:39 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=6286C266B3DEEFEFB9AF29DE9395CFEDF76A942B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:bd:bd:57:a0:97:0b:2d:51:63:d4:37:07:
                    16:85:6c:d6:5d:fb:59:6d:13:e2:b6:a5:a5:5a:67:
                    f6:18:e4:cc:dd:9f:81:c4:67:55:d7:3f:78:ee:42:
                    00:3a:26:c2:65:92:13:2f:16:c9:d6:c6:58:97:4f:
                    0c:d4:bf:39:eb:c8:b8:2a:78:e7:21:d8:30:41:53:
                    d1:e7:ec:bf:c3:2e:e3:24:3c:19:46:15:7f:b4:5d:
                    4c:c9:d9:72:f4:1c:1d:aa:82:9d:14:eb:1d:3d:ef:
                    15:1f:a6:5b:9a:39:d1:d0:00:49:ee:de:be:27:11:
                    b9:7b:61:27:50:41:a3:02:71:82:eb:13:84:9b:cc:
                    e5:e6:c7:b8:80:c5:e5:e2:e4:44:c7:6b:81:b4:50:
                    72:61:af:74:90:e8:9e:6e:48:de:4e:4b:3e:78:68:
                    c4:a1:40:cf:5b:39:ac:0d:3b:fa:07:94:f5:49:bb:
                    2a:31:a6:be:44:06:87:af:50:b1:f9:8d:ff:43:d7:
                    0d:ab:aa:68:49:a1:67:21:48:26:49:b2:3c:98:9b:
                    0f:ef:16:1a:9e:47:04:c1:07:90:37:55:b1:2f:2e:
                    11:85:3b:25:d4:f9:1d:fc:03:8f:f4:ac:a8:b5:4c:
                    07:84:cb:c6:69:8a:8f:35:a3:be:26:a4:b2:2a:57:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:C2:66:B3:DE:EF:EF:B9:AF:29:DE:93:95:CF:ED:F7:6A:94:2B
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/YobCZrPe7--5rynek5XP7fdqlCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.118.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:78:8d:c7:26:58:a1:d6:de:29:e0:aa:2c:f5:5d:ef:6e:
         46:db:ce:3b:b2:4f:95:52:9b:4d:0c:c3:64:b4:76:2f:1f:3d:
         a3:a7:54:72:b4:33:3f:7f:6b:1f:76:30:dd:99:6f:82:b4:af:
         54:ee:a5:33:b9:8a:db:76:54:92:9c:9c:bc:78:1a:74:4e:56:
         58:81:95:29:2a:de:fe:d8:2f:ed:7b:31:8c:ff:22:e9:ed:84:
         c7:34:f1:ca:6a:88:64:eb:11:b1:a4:3a:8a:bf:a9:ec:41:d5:
         7a:16:01:f1:eb:04:1a:46:14:59:0d:e1:55:de:95:ac:e5:b3:
         b2:8e:f2:9c:b8:fd:7e:6f:c4:94:70:2b:92:ca:9e:90:ef:0d:
         07:b1:1f:de:ff:08:11:f0:64:70:d2:11:96:bd:77:75:cb:4b:
         18:bc:f3:05:00:26:64:7d:95:03:e4:e6:53:13:94:3c:81:fc:
         94:c9:32:1e:30:e9:83:c5:79:12:04:32:07:c8:be:b4:2a:53:
         5e:43:4a:99:c8:93:ef:0b:cd:c0:62:98:c3:e4:da:b0:8f:f8:
         46:d9:7c:77:78:73:2b:48:a4:1f:24:5b:54:ab:33:0f:5b:b2:
         37:ad:aa:f2:2f:ff:d8:0b:84:d8:a3:5d:fb:8b:09:71:12:6c:
         30:69:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:04:51 2025 by rpki-client