Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3-CJCGsosl82w_13b7NEKwrixVg.roa
File:                     3-CJCGsosl82w_13b7NEKwrixVg.roa (raw, json)
Hash identifier:          jT3SwsDNfPuPghpSwP1FTnEKf7DZCU0PMVRfjVU6aRY=
Subject key identifier:   DF:E0:89:08:6B:28:B2:5F:36:C3:FD:77:6F:B3:44:2B:0A:E2:C5:58
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       52
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3-CJCGsosl82w_13b7NEKwrixVg.roa
Signing time:             Tue 11 Oct 2022 09:48:23 +0000
ROA not before:           Tue 11 Oct 2022 09:48:23 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.224.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:48:23 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=DFE089086B28B25F36C3FD776FB3442B0AE2C558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:73:90:7b:bc:3d:1f:3c:ba:b7:63:4e:eb:
                    1b:c1:50:85:f8:9e:8f:18:d7:27:79:bc:4e:f3:bd:
                    21:d1:13:59:8c:45:9b:44:0a:c3:24:99:67:98:4a:
                    96:72:30:82:49:31:93:86:88:c9:6e:21:f3:38:d0:
                    a0:93:1d:be:9b:8f:5e:52:06:ed:1a:2a:42:f7:f1:
                    06:13:d4:4a:04:88:41:82:4a:81:22:76:4a:9a:07:
                    d8:bc:1e:65:23:ec:ce:2e:83:0c:80:86:ce:e7:c1:
                    9f:af:ea:12:04:5c:63:6b:93:28:64:c9:e9:f3:4e:
                    bd:ed:d0:e6:29:0f:71:4d:1e:36:81:81:25:a4:17:
                    a5:55:a7:34:06:a0:fa:70:43:e7:84:02:a8:dd:27:
                    b6:39:55:1b:be:84:b5:cb:50:30:a9:8b:90:84:4d:
                    73:40:b0:20:a9:85:dd:8b:79:92:ab:4c:38:e3:13:
                    66:77:a3:98:52:f8:df:7d:b5:e9:66:cf:39:d2:06:
                    54:e0:09:3b:f4:d3:c8:3e:a6:99:d7:69:ea:91:7f:
                    b2:e2:6e:ab:be:55:be:bf:1d:08:41:f6:9c:31:a0:
                    0e:3d:4e:64:f4:0f:a0:f0:ce:f0:fb:52:68:83:e4:
                    41:50:4e:2e:a3:28:2c:69:c0:24:29:c0:46:62:61:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E0:89:08:6B:28:B2:5F:36:C3:FD:77:6F:B3:44:2B:0A:E2:C5:58
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3-CJCGsosl82w_13b7NEKwrixVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:64:99:4c:a2:22:64:9b:56:17:71:fb:be:ad:1c:78:94:d1:
         02:3b:fd:fe:40:58:3c:af:10:19:32:9f:29:84:2b:36:be:f0:
         50:b6:9d:7d:3b:69:f5:7d:df:10:95:ea:44:0c:fd:b6:27:ed:
         20:7e:fe:a8:da:a2:7d:93:6d:65:f4:1b:93:1c:41:5a:11:36:
         03:9a:c9:16:57:48:ce:d9:f3:eb:58:28:e5:01:23:1e:22:86:
         8a:41:92:14:9c:b9:ba:75:0c:ea:09:3e:88:ba:3b:25:73:61:
         61:14:82:fb:48:be:23:82:3d:fa:71:ac:4f:72:b1:9e:ba:1d:
         85:68:db:da:53:42:9f:f8:1e:64:fd:61:4b:01:23:9d:4c:3c:
         5b:18:19:cc:a4:93:3c:83:e9:10:11:9b:69:ea:f6:4b:d2:7d:
         dc:f4:2b:45:97:32:e0:fe:72:f5:d3:a0:e7:4d:e0:eb:bf:e3:
         ca:2c:05:61:4a:99:19:d7:2f:dd:1e:38:e9:7b:97:fb:47:5e:
         05:a7:ee:b1:6f:ea:c3:b9:cc:99:32:97:a8:45:2f:d5:3a:9a:
         f8:4d:ec:ce:49:c7:cc:3b:53:5d:19:51:ce:5e:8d:3c:7f:69:
         c8:29:21:0b:50:1b:cf:0e:63:36:69:5c:d5:af:80:b7:bd:6b:
         b0:60:63:ae
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
NDgyM1oXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoREZFMDg5MDg2QjI4QjI1
RjM2QzNGRDc3NkZCMzQ0MkIwQUUyQzU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMXOc5B7vD0fPLq3Y07rG8FQhfiejxjXJ3m8TvO9IdETWYxFm0QK
wySZZ5hKlnIwgkkxk4aIyW4h8zjQoJMdvpuPXlIG7RoqQvfxBhPUSgSIQYJKgSJ2
SpoH2LweZSPszi6DDICGzufBn6/qEgRcY2uTKGTJ6fNOve3Q5ikPcU0eNoGBJaQX
pVWnNAag+nBD54QCqN0ntjlVG76EtctQMKmLkIRNc0CwIKmF3Yt5kqtMOOMTZnej
mFL433216WbPOdIGVOAJO/TTyD6mmddp6pF/suJuq75Vvr8dCEH2nDGgDj1OZPQP
oPDO8PtSaIPkQVBOLqMoLGnAJCnARmJhyfkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTf4IkIayiyXzbD/Xdvs0QrCuLFWDAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3LzMtQ0pDR3Nvc2w4MndfMTNiN05FS3dyaXhWZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXS4IAwDQYJKoZIhvcNAQELBQADggEBAM9kmUyiImSbVhdx+76tHHiU
0QI7/f5AWDyvEBkynymEKza+8FC2nX07afV93xCV6kQM/bYn7SB+/qjaon2TbWX0
G5McQVoRNgOayRZXSM7Z8+tYKOUBIx4ihopBkhScubp1DOoJPoi6OyVzYWEUgvtI
viOCPfpxrE9ysZ66HYVo29pTQp/4HmT9YUsBI51MPFsYGcykkzyD6RARm2nq9kvS
fdz0K0WXMuD+cvXToOdN4Ou/48osBWFKmRnXL90eOOl7l/tHXgWn7rFv6sO5zJky
l6hFL9U6mvhN7M5Jx8w7U10ZUc5ejTx/acgpIQtQG88OYzZpXNWvgLe9a7BgY64=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org