Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1jY8nLPmttz6vZ_5JMb-EnMcpqY.roa
File:                     1jY8nLPmttz6vZ_5JMb-EnMcpqY.roa (raw, json)
Hash identifier:          ZSX8UwTZZmSgeGMHdvZOiRsZr2NXlphdAtLB+hTPr/M=
Subject key identifier:   D6:36:3C:9C:B3:E6:B6:DC:FA:BD:9F:F9:24:C6:FE:12:73:1C:A6:A6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0131
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1jY8nLPmttz6vZ_5JMb-EnMcpqY.roa
Signing time:             Sun 01 Oct 2023 01:30:48 +0000
ROA not before:           Sun 01 Oct 2023 01:30:48 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:48 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D6363C9CB3E6B6DCFABD9FF924C6FE12731CA6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:bc:8b:d5:d6:bb:3a:a1:68:82:9e:27:1c:
                    a2:22:19:86:9e:c0:db:a5:1e:49:6b:80:df:63:1f:
                    4e:b4:4a:62:be:89:c4:0d:d9:3c:e2:90:14:77:e0:
                    b6:d8:4e:75:67:3a:f8:9c:6f:cf:bf:e4:1b:a7:12:
                    db:7a:81:7c:53:ea:89:7e:8a:c8:f7:ee:8a:a2:af:
                    81:b0:72:65:b5:f4:e3:3b:ba:ff:96:0d:90:4e:fd:
                    89:c4:01:86:6d:50:e1:bf:e7:9f:91:35:74:f8:01:
                    29:df:0c:bf:0a:f5:f5:69:5c:f7:65:93:39:16:9c:
                    ca:9f:05:a1:b3:2d:d1:fe:c4:0a:a1:68:ff:d4:7d:
                    da:33:bb:13:6f:3c:b5:fe:49:31:76:06:b8:5f:2e:
                    f3:4d:02:58:91:9b:77:16:4e:59:c7:64:f7:a1:80:
                    16:19:5e:34:ef:20:d0:f7:f1:8e:5e:62:db:18:b6:
                    ff:ce:c6:79:d0:3c:8f:a0:7b:9e:49:52:84:12:3a:
                    57:bb:bd:44:98:e0:33:31:26:76:61:7d:5b:1e:0f:
                    c9:72:13:b5:31:90:19:ba:95:49:80:6b:da:56:59:
                    23:82:b4:52:c7:3b:5e:fa:b2:7f:21:c0:08:47:5a:
                    af:1a:47:10:e9:a2:4c:49:f8:35:a8:df:7a:19:8b:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:3C:9C:B3:E6:B6:DC:FA:BD:9F:F9:24:C6:FE:12:73:1C:A6:A6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1jY8nLPmttz6vZ_5JMb-EnMcpqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:de:89:87:3f:82:3e:3e:69:ec:ee:d1:3a:01:52:19:1d:91:
         64:35:f9:a6:fa:32:ef:3f:f7:fe:ef:2c:37:89:32:25:f5:ac:
         74:9b:9c:b9:a5:7f:bf:1c:18:b8:48:6c:bf:f8:37:27:d5:7e:
         5b:fa:ed:2c:bb:3e:c6:39:58:d1:ce:96:ce:69:60:22:6c:c7:
         a9:d7:4f:b5:4f:d3:22:dd:0a:6c:af:8a:5d:72:af:38:41:04:
         75:38:df:8b:d3:67:14:2d:8a:b0:5f:59:f1:42:5a:02:d7:10:
         9a:fb:56:97:27:bb:9d:46:90:c7:1b:fd:73:64:27:e7:2f:d9:
         fc:0e:5c:35:66:2c:75:19:47:85:35:0f:cf:17:39:54:2c:1a:
         ca:7f:44:2c:fc:ba:9e:45:23:9a:be:18:65:e3:48:50:99:ea:
         fd:03:b2:22:5d:aa:33:90:a6:14:f3:5d:f8:98:bb:68:d3:8d:
         50:0b:d2:71:b8:e0:eb:8c:79:58:22:95:70:bf:3d:6b:07:fb:
         c4:81:d9:27:87:27:f2:37:21:6f:93:47:c0:ab:0c:4d:b4:cb:
         8c:51:4f:75:2f:52:c2:13:5c:f4:64:2e:98:b1:ef:3f:85:20:
         05:d3:64:e6:62:90:8c:4e:b2:f2:15:bd:41:40:8a:30:a6:ea:
         87:ba:65:aa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICATEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNDhaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ2MzYzQzlDQjNFNkI2
RENGQUJEOUZGOTI0QzZGRTEyNzMxQ0E2QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2M7yL1da7OqFogp4nHKIiGYaewNulHklrgN9jH060SmK+icQN
2TzikBR34LbYTnVnOvicb8+/5BunEtt6gXxT6ol+isj37oqir4GwcmW19OM7uv+W
DZBO/YnEAYZtUOG/55+RNXT4ASnfDL8K9fVpXPdlkzkWnMqfBaGzLdH+xAqhaP/U
fdozuxNvPLX+STF2BrhfLvNNAliRm3cWTlnHZPehgBYZXjTvIND38Y5eYtsYtv/O
xnnQPI+ge55JUoQSOle7vUSY4DMxJnZhfVseD8lyE7UxkBm6lUmAa9pWWSOCtFLH
O176sn8hwAhHWq8aRxDpokxJ+DWo33oZi+tBAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU1jY8nLPmttz6vZ/5JMb+EnMcpqYwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny8xalk4bkxQbXR0ejZ2Wl81Sk1iLUVuTWNwcVku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0wqFMA0GCSqGSIb3DQEBCwUAA4IBAQB23omHP4I+Pmns7tE6AVIZ
HZFkNfmm+jLvP/f+7yw3iTIl9ax0m5y5pX+/HBi4SGy/+Dcn1X5b+u0suz7GOVjR
zpbOaWAibMep10+1T9Mi3Qpsr4pdcq84QQR1ON+L02cULYqwX1nxQloC1xCa+1aX
J7udRpDHG/1zZCfnL9n8Dlw1Zix1GUeFNQ/PFzlULBrKf0Qs/LqeRSOavhhl40hQ
mer9A7IiXaozkKYU8134mLto041QC9JxuODrjHlYIpVwvz1rB/vEgdknhyfyNyFv
k0fAqwxNtMuMUU91L1LCE1z0ZC6Yse8/hSAF02TmYpCMTrLyFb1BQIowpuqHumWq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org