Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/dMfINex1RIhekzzLNmAydL2IBkw.roa
File:                     dMfINex1RIhekzzLNmAydL2IBkw.roa (raw, json)
Hash identifier:          ir7ugBp5hns96JHqCYIJ2EvijmxdxlIefatSd8nUTqg=
Subject key identifier:   74:C7:C8:35:EC:75:44:88:5E:93:3C:CB:36:60:32:74:BD:88:06:4C
Certificate issuer:       /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial:       02
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/dMfINex1RIhekzzLNmAydL2IBkw.roa
Signing time:             Mon 02 Dec 2024 01:18:47 +0000
ROA not before:           Mon 02 Dec 2024 01:18:47 +0000
ROA not after:            Thu 20 Nov 2025 01:37:29 +0000
asID:                     17936
IP address blocks:        125.2.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
        Validity
            Not Before: Dec  2 01:18:47 2024 GMT
            Not After : Nov 20 01:37:29 2025 GMT
        Subject: CN=74C7C835EC7544885E933CCB36603274BD88064C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:b7:38:08:69:b4:95:04:96:5b:a1:df:81:
                    9f:b6:63:e8:93:9b:28:7c:33:55:71:cc:eb:7b:3e:
                    65:db:08:d4:b4:96:d1:f9:26:e9:bc:bf:e8:47:b8:
                    87:6f:56:d7:a2:9b:fd:72:0c:31:44:51:9e:05:de:
                    8a:66:e2:95:c3:a7:a2:4b:b5:4e:16:ce:5a:1e:c8:
                    0a:5d:ef:66:17:df:13:19:2b:e7:14:ae:a3:0a:4b:
                    a3:f1:22:ce:3b:2e:69:72:a3:bc:3f:22:fb:7e:1f:
                    7c:2c:d8:e5:b5:c5:04:fa:78:91:b9:b4:5e:ec:7e:
                    c1:c2:5a:ae:08:8f:2d:20:e0:66:73:13:21:11:a0:
                    09:b6:0b:57:34:5d:7c:73:db:bf:22:01:54:b1:08:
                    7b:74:2f:83:97:c9:7f:7e:0b:86:03:1f:cb:69:8a:
                    e8:72:db:6d:68:5e:29:a3:26:94:37:df:06:ca:a7:
                    16:5a:23:99:46:08:7a:22:32:ae:2b:72:bf:67:c6:
                    16:30:ba:1e:e2:f6:c8:ba:99:ad:0b:0b:ad:d2:66:
                    6c:81:77:2f:ef:d0:96:84:e1:b9:42:64:0e:02:69:
                    d0:50:42:0d:f8:60:59:4e:c2:62:75:9c:9f:59:5a:
                    f2:91:2b:91:a4:10:5a:21:94:e1:ba:a6:03:9f:f0:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C7:C8:35:EC:75:44:88:5E:93:3C:CB:36:60:32:74:BD:88:06:4C
            X509v3 Authority Key Identifier:
                keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/dMfINex1RIhekzzLNmAydL2IBkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:59:44:a1:b7:46:db:25:c4:11:29:be:d7:80:f7:92:1d:d1:
         4b:74:5e:8d:80:3d:1c:91:13:9c:59:71:52:24:7e:20:86:7f:
         65:3c:f8:ea:0c:fb:73:88:c3:51:11:ea:6b:1c:75:7b:58:2f:
         46:1b:0d:a5:f6:cb:54:bc:34:7f:da:2a:b6:07:46:7d:d6:0c:
         c0:cc:be:fe:14:89:e9:00:b8:e4:ed:ff:d6:e4:db:7a:b0:fa:
         c3:57:f7:5d:43:85:a0:cb:6a:3e:a2:e9:95:b4:81:26:e2:5b:
         89:d5:fb:1f:62:11:9d:7f:14:a1:fb:9e:f6:56:1b:ef:a7:6e:
         2c:fc:14:51:5c:62:89:3d:53:fa:54:36:18:bf:5f:a3:d2:bc:
         43:68:90:88:5a:9d:12:74:68:b9:e0:48:12:15:db:4a:31:c5:
         c3:89:78:e6:d2:7e:b0:b8:6f:7f:7e:e3:ed:23:19:75:31:0b:
         f5:bf:a2:1c:16:37:5b:35:61:d9:75:f2:56:06:52:62:8e:19:
         e2:14:e3:9e:1a:78:6a:b6:3b:7e:f0:f9:ce:bb:86:45:bb:10:
         75:8d:48:f3:25:77:62:7a:95:a4:dd:2c:40:63:03:4f:b6:91:
         a5:e4:16:3e:0b:1d:8d:02:38:b2:10:24:dd:58:2c:d4:31:5a:
         71:f0:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:55 2025 by rpki-client