Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10215/YX03Gb4GcWZp6bv-Q5OyZgWqzoU.roa
File:                     YX03Gb4GcWZp6bv-Q5OyZgWqzoU.roa (raw, json)
Hash identifier:          1dupL+0yPdwWBFwmoAcW6S3131gLF71EbBczBewA7ug=
Subject key identifier:   61:7D:37:19:BE:06:71:66:69:E9:BB:FE:43:93:B2:66:05:AA:CE:85
Certificate issuer:       /CN=69219D546CF9CA57FB370DAB22D341F451CDE6E2
Certificate serial:       1F
Authority key identifier: 69:21:9D:54:6C:F9:CA:57:FB:37:0D:AB:22:D3:41:F4:51:CD:E6:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aSGdVGz5ylf7Nw2rItNB9FHN5uI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10215/YX03Gb4GcWZp6bv-Q5OyZgWqzoU.roa
Signing time:             Sun 01 Jan 2023 01:30:04 +0000
ROA not before:           Sun 01 Jan 2023 01:30:04 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     23805
IP address blocks:        118.27.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69219D546CF9CA57FB370DAB22D341F451CDE6E2
        Validity
            Not Before: Jan  1 01:30:04 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=617D3719BE06716669E9BBFE4393B26605AACE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:b0:b3:f0:55:9d:8e:c9:1b:e2:63:31:0c:
                    00:5b:b8:c6:dd:e5:de:fe:b1:78:dd:da:ca:06:de:
                    f1:11:ba:f2:0a:cd:a5:c3:f8:e6:dc:66:a7:52:b9:
                    8b:f3:db:03:5f:b5:d3:c6:fd:4a:53:2c:9c:ac:05:
                    7a:17:c5:f7:b8:3d:01:36:cf:d8:77:1f:8f:69:81:
                    45:ad:0a:e0:07:39:1d:6d:f0:57:1e:a4:99:f2:e0:
                    c4:b0:87:eb:26:19:0a:a7:f7:7a:79:b0:44:15:54:
                    8d:06:69:7b:bf:3d:47:0b:b7:0b:ac:a3:86:7e:7f:
                    00:17:fe:18:47:15:f9:91:98:a1:13:45:97:14:4f:
                    1b:ba:ee:c7:2a:96:f2:a0:84:d4:89:aa:fd:e6:93:
                    17:2a:ea:21:e7:a4:ff:05:ed:a4:aa:0c:0e:34:d6:
                    07:1b:7d:75:74:2a:39:62:37:70:0f:60:a8:c2:1a:
                    d0:6e:00:b3:47:1c:f5:05:23:e1:f5:70:f3:97:f1:
                    32:e2:eb:89:96:45:f0:a2:32:a8:f0:cc:e7:34:1c:
                    38:ed:0c:a7:80:86:78:2a:9d:84:63:75:fa:f0:2d:
                    c7:c1:1a:8a:20:5e:76:11:46:1c:f8:74:ea:53:49:
                    d2:a9:01:cb:71:91:f8:6b:f9:d4:94:bf:5f:90:78:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:37:19:BE:06:71:66:69:E9:BB:FE:43:93:B2:66:05:AA:CE:85
            X509v3 Authority Key Identifier:
                keyid:69:21:9D:54:6C:F9:CA:57:FB:37:0D:AB:22:D3:41:F4:51:CD:E6:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10215/aSGdVGz5ylf7Nw2rItNB9FHN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aSGdVGz5ylf7Nw2rItNB9FHN5uI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10215/YX03Gb4GcWZp6bv-Q5OyZgWqzoU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.27.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:68:81:59:03:8f:5a:f5:a5:d8:08:a7:79:5d:52:fc:13:19:
         bb:81:96:73:8f:c1:d1:98:8f:14:c6:1c:bf:b2:be:85:3b:7c:
         2c:59:53:49:96:ea:43:9b:43:f5:06:eb:4b:3f:4c:05:55:60:
         b2:5f:e8:0d:8b:fb:e9:53:2e:ed:bb:5a:09:d9:fc:66:75:8b:
         4e:c9:13:69:c6:2c:e6:9f:8d:ac:4e:ec:49:3d:1b:46:ca:b1:
         cb:bd:3c:d9:5a:40:e6:af:00:2d:6c:b1:85:00:11:cf:e2:f4:
         eb:46:9f:1b:5c:a6:51:4d:d4:f5:15:a9:8e:71:07:ff:a1:7d:
         7b:0b:df:87:91:1a:15:87:9a:e5:90:d3:43:1c:3b:c6:0f:d5:
         b4:af:05:16:ad:12:e6:e8:82:5a:58:89:a6:07:6c:c0:82:14:
         5a:f4:a1:68:c8:e4:c3:dc:ac:9b:ae:fe:ec:8e:61:38:1b:39:
         9b:a6:ca:12:b5:29:9b:2d:e4:de:6e:00:2a:84:bf:33:a2:8f:
         b2:11:7f:81:81:56:89:9e:f8:0a:e6:7f:da:e7:7f:73:96:4f:
         78:15:be:67:2b:a5:bf:03:e8:bb:25:6b:5b:18:66:34:2f:f0:
         e5:5a:96:2f:bd:0c:e5:62:5c:80:9d:3c:e6:d6:e4:39:6c:03:
         ff:d7:4c:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-ams.rpki-client.org