Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5vLJJ2Q6LVwPtCiSRs6UBVPyQKQ.roa
File:                     5vLJJ2Q6LVwPtCiSRs6UBVPyQKQ.roa (raw, json)
Hash identifier:          8uSkZoU/MmRJfBe2kDVn5+dbOcw+kz4IbcgcOahnBFk=
Subject key identifier:   E6:F2:C9:27:64:3A:2D:5C:0F:B4:28:92:46:CE:94:05:53:F2:40:A4
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       1A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5vLJJ2Q6LVwPtCiSRs6UBVPyQKQ.roa
Signing time:             Tue 11 Oct 2022 09:28:16 +0000
ROA not before:           Tue 11 Oct 2022 09:28:16 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.199.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:28:16 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=E6F2C927643A2D5C0FB4289246CE940553F240A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:f4:46:50:aa:29:c3:63:0a:ba:e4:25:3c:
                    51:2d:70:7b:b3:30:21:f7:1b:ad:5e:70:84:8c:e5:
                    d7:1a:47:16:f5:e9:7e:69:75:78:92:12:f3:ef:c3:
                    09:c1:8c:9a:64:e6:03:1d:b7:e1:4e:6e:75:2e:7d:
                    91:75:56:fc:43:b5:ad:08:b5:4d:61:6f:68:1b:b0:
                    6c:04:ac:c1:99:8e:1d:90:e8:3e:15:7f:f5:c0:a3:
                    89:5e:99:e8:2d:f7:a6:df:1f:2a:4a:b6:92:16:eb:
                    8e:af:36:cc:1e:3f:84:4c:19:e0:7b:a3:e3:e7:56:
                    c9:ba:64:f2:ec:19:12:70:6c:a5:c0:cb:a6:77:83:
                    88:12:b6:44:a9:3d:c1:6d:d6:95:ff:29:ac:f2:97:
                    33:89:2c:21:a4:68:90:07:32:bc:f3:8b:46:3f:3b:
                    d9:18:44:61:9d:c0:b7:fe:84:a4:84:fb:2e:9f:ec:
                    60:ef:db:05:00:51:56:e8:5e:3e:26:26:32:64:3c:
                    4f:af:26:b3:0f:75:4a:b2:e1:08:ec:74:be:e9:77:
                    47:2f:57:ae:b5:e9:b4:8b:88:2a:09:41:82:20:5f:
                    25:79:73:0b:38:ec:6d:b3:cc:3f:4f:e2:53:48:78:
                    9b:7c:13:91:db:53:5f:07:b8:3d:38:7d:b6:04:df:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:C9:27:64:3A:2D:5C:0F:B4:28:92:46:CE:94:05:53:F2:40:A4
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5vLJJ2Q6LVwPtCiSRs6UBVPyQKQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         90:82:01:ca:ca:ce:e4:c8:21:c5:b5:64:32:73:16:2d:0b:ba:
         42:55:16:60:fe:76:79:35:7f:cc:4b:61:c0:b2:d0:90:60:32:
         29:03:19:78:3b:a6:2d:b3:dc:8b:df:14:40:d7:70:12:4d:ae:
         03:7d:84:15:81:c8:4b:f1:c2:ef:81:38:00:7b:68:cb:ee:ad:
         8c:3e:34:b6:c3:8f:20:eb:a1:6c:30:5c:f2:df:8d:81:46:ad:
         06:30:44:c9:58:15:de:e3:1c:68:6b:c5:87:52:a6:43:25:60:
         9b:6a:ef:1d:2f:70:93:d5:b3:a4:26:22:05:a0:a6:7d:cd:3c:
         c0:ac:ff:e2:da:e5:5f:2d:e2:61:e4:32:3e:fd:34:9d:6f:98:
         af:00:41:45:63:c2:fe:bf:f6:5c:72:a6:9a:eb:98:9a:25:6c:
         79:f0:23:61:4b:c1:f7:67:96:cb:dc:e8:e4:56:8a:7a:fb:1c:
         87:f4:bf:8f:de:d8:1c:e2:4f:5d:05:07:77:0b:f4:3d:86:54:
         cf:86:5b:03:c8:61:f4:0f:29:14:ef:b5:a3:07:40:71:23:af:
         df:f9:af:6d:65:c2:73:99:0a:58:2b:1d:45:a0:8d:34:63:21:
         ac:e6:22:c2:d5:b8:6c:e3:18:da:78:84:05:78:22:02:14:e0:
         96:60:60:02
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MjgxNloXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRTZGMkM5Mjc2NDNBMkQ1
QzBGQjQyODkyNDZDRTk0MDU1M0YyNDBBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANGs9EZQqinDYwq65CU8US1we7MwIfcbrV5whIzl1xpHFvXpfml1
eJIS8+/DCcGMmmTmAx234U5udS59kXVW/EO1rQi1TWFvaBuwbASswZmOHZDoPhV/
9cCjiV6Z6C33pt8fKkq2khbrjq82zB4/hEwZ4Huj4+dWybpk8uwZEnBspcDLpneD
iBK2RKk9wW3Wlf8prPKXM4ksIaRokAcyvPOLRj872RhEYZ3At/6EpIT7Lp/sYO/b
BQBRVuhePiYmMmQ8T68msw91SrLhCOx0vul3Ry9XrrXptIuIKglBgiBfJXlzCzjs
bbPMP0/iU0h4m3wTkdtTXwe4PTh9tgTfkM8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTm8sknZDotXA+0KJJGzpQFU/JApDAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3LzV2TEpKMlE2TFZ3UHRDaVNSczZVQlZQeVFLUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAfSx4AwDQYJKoZIhvcNAQELBQADggEBAJCCAcrKzuTIIcW1ZDJzFi0L
ukJVFmD+dnk1f8xLYcCy0JBgMikDGXg7pi2z3IvfFEDXcBJNrgN9hBWByEvxwu+B
OAB7aMvurYw+NLbDjyDroWwwXPLfjYFGrQYwRMlYFd7jHGhrxYdSpkMlYJtq7x0v
cJPVs6QmIgWgpn3NPMCs/+La5V8t4mHkMj79NJ1vmK8AQUVjwv6/9lxypprrmJol
bHnwI2FLwfdnlsvc6ORWinr7HIf0v4/e2BziT10FB3cL9D2GVM+GWwPIYfQPKRTv
taMHQHEjr9/5r21lwnOZClgrHUWgjTRjIazmIsLVuGzjGNp4hAV4IgIU4JZgYAI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org