Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5hXUgakc_riZXhsGFXITCXKThv8.roa
File:                     5hXUgakc_riZXhsGFXITCXKThv8.roa (raw, json)
Hash identifier:          zFtiQdvKSH4jQltRkolxFt5lYXT+ijqbB3VRjt4Y7Y4=
Subject key identifier:   E6:15:D4:81:A9:1C:FE:B8:99:5E:1B:06:15:72:13:09:72:93:86:FF
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       012F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5hXUgakc_riZXhsGFXITCXKThv8.roa
Signing time:             Sun 01 Oct 2023 01:30:46 +0000
ROA not before:           Sun 01 Oct 2023 01:30:46 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.9.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:46 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E615D481A91CFEB8995E1B0615721309729386FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:4b:32:63:c6:1a:b8:9b:b4:21:1e:62:83:
                    47:cc:db:0f:2a:05:e4:e7:17:ca:b4:d6:8f:4e:c8:
                    d9:bd:7f:64:27:b2:14:64:27:6f:64:7f:e8:f8:51:
                    4d:78:86:9c:6d:aa:66:f9:28:3f:6b:98:7a:34:81:
                    ad:f6:4b:0a:4e:d7:43:db:d7:17:d7:76:f2:7d:9f:
                    d6:47:ab:ab:77:64:3f:32:3e:28:b3:ab:4a:1c:bf:
                    3c:64:96:4e:19:6a:bb:9b:8d:ff:9f:57:fb:87:cd:
                    93:af:78:52:b0:07:f4:07:65:6f:ea:bb:e1:57:82:
                    87:a2:41:20:59:62:70:f5:0c:ff:7b:7e:54:34:68:
                    99:02:16:de:be:70:a9:4d:d7:b3:eb:6f:28:5d:b9:
                    17:72:b3:1f:14:0d:66:30:dc:d4:5a:3d:f4:de:08:
                    69:7b:9c:36:bb:b0:59:70:a2:b3:20:1e:e3:5b:9d:
                    73:50:fc:6b:46:49:a0:78:9e:5a:38:29:d0:1b:b6:
                    55:10:a3:e4:2e:3c:34:55:56:d8:3a:f6:df:4c:64:
                    c5:4d:38:2c:b5:ff:07:e7:49:86:22:89:5b:b6:57:
                    57:7e:16:b7:56:c4:c4:82:01:ea:a1:1c:38:55:5c:
                    06:28:c5:2a:46:4f:7a:8c:4c:52:f9:6e:17:57:b1:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:15:D4:81:A9:1C:FE:B8:99:5E:1B:06:15:72:13:09:72:93:86:FF
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5hXUgakc_riZXhsGFXITCXKThv8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:3d:26:91:09:a7:31:aa:de:a6:00:38:71:46:c7:a5:8a:a1:
         ac:cf:fa:07:68:8d:eb:0e:d4:ed:03:55:37:d1:f4:90:48:bf:
         d1:a1:3e:ea:c1:a5:1a:ad:84:4c:7b:b2:5a:f6:5b:ab:e4:bc:
         94:9b:71:2c:ef:48:a5:62:ae:f9:66:e5:56:fc:c3:a4:aa:f7:
         71:6f:3b:59:c5:b0:69:c7:cc:bb:73:a9:10:29:c3:34:9e:bf:
         06:bb:f1:f6:50:db:f8:63:4b:b1:ea:cc:47:c8:ee:81:a3:ac:
         73:a6:3b:62:89:09:13:d5:18:ab:68:26:43:9f:05:64:40:8d:
         e7:c4:3e:bf:37:9f:c3:6a:65:7a:01:8d:84:2e:36:fd:d2:9f:
         c7:c3:b2:c2:c3:82:54:f4:de:66:1b:47:13:aa:80:90:35:e2:
         d6:6a:92:6c:ba:71:11:0e:10:e0:fb:89:54:20:6c:b3:c7:cd:
         98:fd:2f:f9:72:2f:17:28:6b:67:3a:74:f5:4f:54:15:6d:04:
         b1:54:02:81:33:9d:7e:50:94:91:d0:b1:fe:d1:22:ad:e7:9d:
         4e:c1:18:0d:cb:aa:58:76:81:ed:81:47:67:c8:26:a0:f3:1c:
         50:b1:40:70:4a:40:b2:d7:52:25:17:22:75:7c:7f:95:60:ea:
         e8:bf:c5:d8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwNDZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEU2MTVENDgxQTkxQ0ZF
Qjg5OTVFMUIwNjE1NzIxMzA5NzI5Mzg2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzAUsyY8YauJu0IR5ig0fM2w8qBeTnF8q01o9OyNm9f2QnshRk
J29kf+j4UU14hpxtqmb5KD9rmHo0ga32SwpO10Pb1xfXdvJ9n9ZHq6t3ZD8yPiiz
q0ocvzxklk4Zarubjf+fV/uHzZOveFKwB/QHZW/qu+FXgoeiQSBZYnD1DP97flQ0
aJkCFt6+cKlN17PrbyhduRdysx8UDWYw3NRaPfTeCGl7nDa7sFlworMgHuNbnXNQ
/GtGSaB4nlo4KdAbtlUQo+QuPDRVVtg69t9MZMVNOCy1/wfnSYYiiVu2V1d+FrdW
xMSCAeqhHDhVXAYoxSpGT3qMTFL5bhdXsQj/AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU5hXUgakc/riZXhsGFXITCXKThv8wHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny81aFhVZ2FrY19yaVpYaHNHRlhJVENYS1Rodjgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0wm+MA0GCSqGSIb3DQEBCwUAA4IBAQAtPSaRCacxqt6mADhxRsel
iqGsz/oHaI3rDtTtA1U30fSQSL/RoT7qwaUarYRMe7Ja9lur5LyUm3Es70ilYq75
ZuVW/MOkqvdxbztZxbBpx8y7c6kQKcM0nr8Gu/H2UNv4Y0ux6sxHyO6Bo6xzpjti
iQkT1RiraCZDnwVkQI3nxD6/N5/DamV6AY2ELjb90p/Hw7LCw4JU9N5mG0cTqoCQ
NeLWapJsunERDhDg+4lUIGyzx82Y/S/5ci8XKGtnOnT1T1QVbQSxVAKBM51+UJSR
0LH+0SKt551OwRgNy6pYdoHtgUdnyCag8xxQsUBwSkCy11IlFyJ1fH+VYOrov8XY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org