Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KFqgPsv_fTf1qc4Jct12OaS7_YI.roa
File:                     KFqgPsv_fTf1qc4Jct12OaS7_YI.roa (raw, json)
Hash identifier:          dEAsNEn832z6kGnxRv0idivx+Bqn/NOTIDJwmGGcswY=
Subject key identifier:   28:5A:A0:3E:CB:FF:7D:37:F5:A9:CE:09:72:DD:76:39:A4:BB:FD:82
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       EF
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KFqgPsv_fTf1qc4Jct12OaS7_YI.roa
Signing time:             Fri 01 Sep 2023 01:33:09 +0000
ROA not before:           Fri 01 Sep 2023 01:33:09 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.237.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:09 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=285AA03ECBFF7D37F5A9CE0972DD7639A4BBFD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:de:b6:37:59:84:e3:29:29:62:da:33:85:
                    4a:e5:88:ae:64:dd:a4:79:4f:7c:04:a7:a8:6b:a0:
                    9e:5b:c2:41:79:0f:f8:e1:5b:ff:e6:90:64:70:4b:
                    4b:ba:34:01:ad:7f:5c:03:88:7d:c4:f5:1c:14:e9:
                    e4:d8:ae:43:69:f8:b1:fd:4b:b6:90:c0:7f:7f:7c:
                    32:08:63:36:e4:41:83:25:31:b4:27:d1:3f:43:3c:
                    d3:a6:d9:30:ba:dc:45:47:55:96:58:88:86:30:7e:
                    ec:4a:fe:4f:2a:5a:b2:81:ff:3a:38:f7:f8:4d:2a:
                    97:8a:e2:0e:4f:f7:90:0e:a5:a5:47:02:0b:71:f6:
                    af:4b:3b:20:e8:03:8a:1b:91:ee:48:7f:06:20:28:
                    ed:46:37:7b:a9:6c:82:24:f1:33:da:18:99:b5:f5:
                    46:a9:b2:bf:33:51:2a:07:52:ca:d8:1e:9f:b2:64:
                    c8:cd:db:f3:8d:2d:43:56:62:2d:e7:59:3b:52:8d:
                    f9:e4:b8:86:bf:41:f3:78:5b:a1:70:75:fe:ae:b8:
                    27:c4:fd:cb:b2:27:47:7a:88:f5:98:c9:98:a4:7a:
                    45:fb:4e:bc:5c:e4:f8:c3:f4:d6:3a:54:d5:c3:01:
                    16:04:47:ac:b6:7a:58:b3:cf:53:fd:c7:0b:50:95:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:A0:3E:CB:FF:7D:37:F5:A9:CE:09:72:DD:76:39:A4:BB:FD:82
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KFqgPsv_fTf1qc4Jct12OaS7_YI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.237.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         03:94:af:c2:fc:39:51:31:6d:b1:6f:bb:8b:a3:97:d1:6c:2e:
         e5:96:95:86:26:cb:fd:f5:a9:37:e5:84:38:1e:ed:a1:f1:1c:
         52:e5:9d:cb:08:9d:1b:4e:ff:e3:05:7c:a5:a0:35:ca:a4:17:
         7e:6e:1f:18:b2:ee:37:f3:f3:39:d8:d0:22:a0:94:cd:28:48:
         92:e9:22:69:bc:49:4a:e8:15:e8:1c:03:02:52:33:f7:6d:02:
         45:98:6c:7c:5d:1c:55:26:4e:8b:72:a6:c5:88:2a:09:7c:86:
         ae:32:aa:55:e9:b8:e8:39:75:57:23:5e:d1:9b:29:59:f0:72:
         87:13:7c:ff:bd:8e:28:b3:84:ba:cf:ee:c7:75:f1:8a:dd:91:
         e3:7a:6c:be:2a:36:6f:5d:c8:e2:60:01:77:31:03:95:3c:20:
         0e:d7:41:32:7e:8d:88:8d:52:c0:2a:6f:dd:98:4c:bd:e0:9e:
         87:ae:2b:d8:a6:7d:ff:02:02:f0:1b:d9:5f:bf:a4:44:7c:ff:
         02:4f:59:55:d7:fd:83:84:bc:6c:97:fa:93:5c:11:43:57:b8:
         4b:e1:b7:c4:42:49:d9:4a:43:48:f9:78:1e:13:5b:4b:7e:a3:
         4e:8c:ed:60:5d:61:42:80:7c:f5:9b:8c:a9:e1:a0:e2:8d:a3:
         16:b5:3d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org