Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/JDdLBdwg5I3bQlIfBKLJPfALe1M.roa
File:                     JDdLBdwg5I3bQlIfBKLJPfALe1M.roa (raw, json)
Hash identifier:          qnT9H1UTnoEk/DybmX688yOZyyk7xS8lLrnOyVQetds=
Subject key identifier:   24:37:4B:05:DC:20:E4:8D:DB:42:52:1F:04:A2:C9:3D:F0:0B:7B:53
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       16
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/JDdLBdwg5I3bQlIfBKLJPfALe1M.roa
Signing time:             Tue 11 Oct 2022 09:26:11 +0000
ROA not before:           Tue 11 Oct 2022 09:26:11 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.198.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:26:11 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=24374B05DC20E48DDB42521F04A2C93DF00B7B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:af:3b:d9:d9:bc:63:d7:f7:15:1f:59:49:
                    65:51:13:0c:c7:15:7d:58:f4:57:dd:54:1e:7a:ea:
                    7c:0b:37:5f:e4:4a:7f:05:a3:b5:1e:18:06:13:b9:
                    b4:7a:15:a7:bc:3c:bd:1b:be:9c:45:1b:b5:16:7a:
                    a4:14:30:ad:a6:da:8b:d6:a2:3f:5c:7c:66:11:48:
                    9b:65:16:f1:df:08:2f:b5:2a:94:96:7e:76:0a:32:
                    ae:83:89:bf:fa:3e:1e:3d:d0:f3:a7:aa:fd:3d:27:
                    04:4d:ed:31:c9:72:08:4e:af:6f:27:56:aa:b3:3d:
                    a0:de:42:df:b9:60:b1:16:2c:45:17:6c:68:4e:44:
                    ec:aa:46:d5:0e:5f:5b:cb:ca:85:7b:22:2c:29:e9:
                    16:02:62:0b:be:cf:f2:76:37:52:05:53:8f:09:0d:
                    64:3a:72:9c:ea:d2:82:8d:d9:84:f9:89:c6:87:a9:
                    8c:06:eb:59:5b:77:c8:05:36:fc:a2:09:1a:2b:c9:
                    f9:a9:c5:0a:90:c0:e8:b9:a1:b7:ab:32:d2:2f:b5:
                    9a:64:50:f5:39:a4:db:5c:4a:ca:6a:1c:22:10:84:
                    d1:a5:4e:12:1c:0a:56:44:42:42:63:17:50:85:24:
                    12:0b:3c:53:1b:ff:ba:8e:0c:d1:38:72:fc:07:66:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:37:4B:05:DC:20:E4:8D:DB:42:52:1F:04:A2:C9:3D:F0:0B:7B:53
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/JDdLBdwg5I3bQlIfBKLJPfALe1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:90:08:71:01:62:d1:7e:fb:3f:d9:9b:09:77:d6:38:c1:5c:
         7f:41:d3:1e:51:14:a6:a9:38:d3:53:54:57:c4:82:b3:b0:f1:
         75:6a:65:7d:3d:df:5e:41:ba:0c:b1:38:12:ba:96:3e:21:f0:
         bf:7a:88:68:f9:ad:91:9a:f4:ab:2c:f1:00:6f:8b:46:13:b3:
         6c:08:73:70:28:8f:dc:34:f3:7e:0d:3e:81:a2:d1:ed:df:c7:
         ac:1a:fd:ae:01:c4:e5:ec:60:95:64:89:db:11:0a:39:ef:4f:
         62:34:89:5c:a9:28:89:f5:8f:9c:12:4a:2e:28:71:5f:d2:c0:
         f4:b7:21:db:53:08:2a:dc:1c:04:fe:11:d6:d8:3b:2f:da:b8:
         c5:b2:6b:08:bf:34:89:1e:06:e2:c4:1b:7c:5e:17:82:7d:72:
         bf:84:bb:c8:83:6f:50:c7:d8:ff:d2:c1:9b:39:5b:8f:80:87:
         4f:16:a4:d1:c6:54:86:bf:85:93:cb:56:27:5e:59:d4:f3:1e:
         0e:67:69:1b:56:fb:02:ef:48:9c:c6:ec:0a:15:19:0c:7e:82:
         54:d7:b9:43:3c:2e:03:9a:37:70:27:d7:5a:a9:9d:68:ec:b0:
         04:28:34:b4:09:10:72:3d:35:b7:56:33:6a:fc:73:4e:2b:ef:
         42:46:b5:43
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MjYxMVoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMjQzNzRCMDVEQzIwRTQ4
RERCNDI1MjFGMDRBMkM5M0RGMDBCN0I1MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOAirzvZ2bxj1/cVH1lJZVETDMcVfVj0V91UHnrqfAs3X+RKfwWj
tR4YBhO5tHoVp7w8vRu+nEUbtRZ6pBQwrabai9aiP1x8ZhFIm2UW8d8IL7UqlJZ+
dgoyroOJv/o+Hj3Q86eq/T0nBE3tMclyCE6vbydWqrM9oN5C37lgsRYsRRdsaE5E
7KpG1Q5fW8vKhXsiLCnpFgJiC77P8nY3UgVTjwkNZDpynOrSgo3ZhPmJxoepjAbr
WVt3yAU2/KIJGivJ+anFCpDA6Lmht6sy0i+1mmRQ9Tmk21xKymocIhCE0aVOEhwK
VkRCQmMXUIUkEgs8Uxv/uo4M0Thy/AdmcvMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQkN0sF3CDkjdtCUh8Eosk98At7UzAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L0pEZExCZHdnNUkzYlFsSWZCS0xKUGZBTGUxTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHSxlowDQYJKoZIhvcNAQELBQADggEBAIKQCHEBYtF++z/Zmwl31jjB
XH9B0x5RFKapONNTVFfEgrOw8XVqZX09315BugyxOBK6lj4h8L96iGj5rZGa9Kss
8QBvi0YTs2wIc3Aoj9w0834NPoGi0e3fx6wa/a4BxOXsYJVkidsRCjnvT2I0iVyp
KIn1j5wSSi4ocV/SwPS3IdtTCCrcHAT+EdbYOy/auMWyawi/NIkeBuLEG3xeF4J9
cr+Eu8iDb1DH2P/SwZs5W4+Ah08WpNHGVIa/hZPLVideWdTzHg5naRtW+wLvSJzG
7AoVGQx+glTXuUM8LgOaN3An11qpnWjssAQoNLQJEHI9NbdWM2r8c04r70JGtUM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org