Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MBgSjOYlGRSY98zPveIk_HlZMRI.roa
File:                     MBgSjOYlGRSY98zPveIk_HlZMRI.roa (raw, json)
Hash identifier:          ASrpMzauw0c/2DYHSKQbHEer06zHY3JqoefFlnLOsWg=
Subject key identifier:   30:18:12:8C:E6:25:19:14:98:F7:CC:CF:BD:E2:24:FC:79:59:31:12
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       015F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MBgSjOYlGRSY98zPveIk_HlZMRI.roa
Signing time:             Sun 01 Oct 2023 01:35:47 +0000
ROA not before:           Sun 01 Oct 2023 01:35:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        219.118.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3018128CE625191498F7CCCFBDE224FC79593112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:1b:c4:da:d0:43:41:37:56:66:41:68:67:
                    49:58:cf:2d:ea:66:a4:78:01:9e:f6:7c:cc:be:c3:
                    f8:b3:86:fc:fd:80:28:ef:0b:94:0f:3d:bf:ac:74:
                    63:8b:ce:4e:80:09:46:de:cd:05:07:66:19:0d:07:
                    07:13:ad:a4:3a:ab:a1:0f:8b:9b:18:12:e4:db:ff:
                    e0:29:cb:75:f1:68:63:56:5f:7c:00:2d:d5:0a:f7:
                    33:c6:6f:6d:27:98:24:d6:2d:32:80:ad:67:33:d5:
                    64:33:da:7f:ee:9a:95:bb:20:7d:7e:0b:fc:81:3c:
                    af:32:88:fa:5c:3a:29:1f:53:aa:9e:25:ca:9e:06:
                    80:95:c3:d8:0d:99:74:03:be:5e:d3:55:cb:48:cd:
                    5f:36:c3:a4:12:a8:7f:db:cd:e3:75:09:93:b7:69:
                    8c:61:f5:13:23:0f:ae:e0:1c:74:a3:8a:74:5a:96:
                    b8:d4:dc:53:2d:5a:7b:80:05:86:96:24:89:9c:2b:
                    a9:b6:99:6b:15:c2:20:0a:12:12:83:97:00:b4:05:
                    8a:87:03:66:de:1d:ff:26:e2:99:cb:49:14:e1:96:
                    52:c4:1a:77:99:e3:bb:86:0b:d0:d3:0d:2c:c8:5d:
                    49:b7:d9:06:f2:55:10:9a:57:a8:7d:ef:9b:03:e8:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:12:8C:E6:25:19:14:98:F7:CC:CF:BD:E2:24:FC:79:59:31:12
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MBgSjOYlGRSY98zPveIk_HlZMRI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:61:d0:74:ff:01:e1:5a:06:15:e6:53:a7:df:7b:e8:f8:
         91:e4:38:4a:5d:ef:47:1f:1a:10:6c:64:93:b9:67:cd:ef:66:
         d9:2f:08:33:c1:23:e4:ed:77:2e:27:12:63:42:6e:a6:9c:ca:
         a5:a2:15:ea:38:00:3b:13:f0:99:3e:bf:12:ed:7a:76:43:7a:
         fe:9d:b6:0e:e3:8b:c8:e6:1b:3b:16:f7:cc:de:06:ff:bf:8f:
         b0:d5:a6:59:eb:cc:f1:35:6d:67:8d:00:4b:94:62:62:99:9b:
         ed:40:6d:1e:18:0c:61:87:e6:28:80:ba:da:e3:77:2c:42:d6:
         0a:dc:ce:be:f5:42:ed:4a:89:35:7d:97:f2:a2:c1:11:06:8b:
         68:40:d5:47:40:4e:88:a7:35:42:75:c4:4f:a1:db:d5:cc:4a:
         56:01:0e:cd:02:4b:4b:e9:85:4c:a2:62:a3:32:11:1d:8d:c0:
         f6:30:7d:3e:39:57:f7:40:dc:85:4f:13:cb:7f:e4:50:e0:ec:
         b3:1e:84:dd:cb:f9:fe:8f:c1:b3:46:8a:39:64:27:d8:c7:45:
         89:f6:77:b1:d2:f6:41:46:55:dd:f0:f3:e2:ae:5b:f7:3b:8f:
         60:4d:21:d2:20:9d:e1:46:9b:1c:fe:f7:1a:51:90:34:09:68:
         61:af:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org