Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NFqIdtNf6OZUBAPnFKDVX1r2Mu8.roa
File:                     NFqIdtNf6OZUBAPnFKDVX1r2Mu8.roa (raw, json)
Hash identifier:          gt8HQl+UmY8hmzsCwhEuZPdtbQciejBamx/ymV5pNRY=
Subject key identifier:   34:5A:88:76:D3:5F:E8:E6:54:04:03:E7:14:A0:D5:5F:5A:F6:32:EF
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D4
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NFqIdtNf6OZUBAPnFKDVX1r2Mu8.roa
Signing time:             Fri 01 Sep 2023 01:30:53 +0000
ROA not before:           Fri 01 Sep 2023 01:30:53 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:53 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=345A8876D35FE8E6540403E714A0D55F5AF632EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:c6:d2:a1:37:e8:15:43:48:68:b8:89:8f:
                    6a:c8:8c:9c:68:91:28:d8:64:d6:af:af:9f:7a:5f:
                    e7:9f:43:13:03:48:dc:ab:0a:58:c5:57:74:04:74:
                    64:43:0e:16:12:42:29:6d:dd:b9:60:05:cf:2c:ab:
                    9d:c7:c0:1f:63:57:a0:26:d3:0a:f9:f9:67:59:b2:
                    16:31:67:f0:85:99:9c:45:1d:6c:b4:7f:8d:e2:3c:
                    8b:a6:71:cd:82:c1:6b:49:b3:f5:c2:0f:85:7b:4a:
                    9b:bd:4c:95:fc:44:cd:32:97:f3:86:db:08:4d:c7:
                    f3:24:27:22:43:f8:b8:1f:d2:2b:8b:5a:8a:bb:7f:
                    83:52:6f:3b:fc:34:7b:92:0e:ac:f7:71:34:ef:54:
                    f0:7b:41:46:a1:9f:ec:c4:f8:2f:35:01:8f:54:9d:
                    f3:a1:f0:8b:07:10:1d:18:8b:a7:b0:61:92:8a:cd:
                    da:34:0b:67:13:1d:d8:b7:ef:f6:82:b3:81:e8:2d:
                    e7:45:92:59:fe:1a:31:28:de:31:d2:0b:25:d3:1f:
                    0e:b0:37:82:de:28:04:c9:f2:00:ea:05:0a:8b:bc:
                    f4:a9:20:54:4e:63:c6:f2:b6:8f:05:0b:7e:45:df:
                    5c:bf:e0:a3:34:18:6c:b8:4e:5e:92:ca:75:11:c3:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:88:76:D3:5F:E8:E6:54:04:03:E7:14:A0:D5:5F:5A:F6:32:EF
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NFqIdtNf6OZUBAPnFKDVX1r2Mu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:94:59:ba:b8:33:ec:24:e4:6d:2b:a1:32:c8:f3:99:d7:
         11:31:27:25:d5:58:81:8b:6f:81:4a:55:c2:1e:4f:a1:c4:14:
         ab:b5:25:4e:59:d0:74:45:27:bd:c9:44:1d:54:9b:ed:52:49:
         b0:01:42:44:50:bc:e4:51:13:02:0c:71:53:8c:d5:76:05:85:
         83:55:a4:a5:f9:30:b9:a2:53:2a:f5:a1:c0:56:ce:10:32:75:
         69:17:0a:41:1a:62:a1:b8:96:68:fd:5d:39:4e:c0:33:ff:ab:
         33:ae:8d:a2:7d:b5:04:9c:e2:c6:a2:00:b8:d0:03:1f:b8:d8:
         2b:b0:41:29:b8:ef:86:16:aa:d1:b1:fa:39:f3:7c:97:ee:23:
         b1:5d:ad:08:30:94:ab:c8:5b:ab:24:22:03:bf:a1:80:ab:ff:
         43:17:b4:12:84:ca:ae:6b:b2:84:67:5a:22:24:40:48:53:eb:
         7d:ee:15:59:6e:ae:d4:8c:a1:30:cb:55:ce:48:43:c2:da:7c:
         28:7f:b3:f5:87:fb:04:81:97:ae:dd:2f:d0:9a:6b:4d:b8:62:
         73:53:5a:b9:77:5a:61:bb:cf:4b:77:cd:04:c4:0f:ea:f7:06:
         64:90:84:76:98:98:27:57:0c:fe:40:f5:ae:37:44:3a:94:1e:
         a6:89:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org