Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZRbhn2IG-cIeHqOsdYIkrV-36L4.roa
File:                     ZRbhn2IG-cIeHqOsdYIkrV-36L4.roa (raw, json)
Hash identifier:          2o7hG+OVauqL/qAgHk5MbkhbTAx+BICChkUndWdlMeI=
Subject key identifier:   65:16:E1:9F:62:06:F9:C2:1E:1E:A3:AC:75:82:24:AD:5F:B7:E8:BE
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       DC
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZRbhn2IG-cIeHqOsdYIkrV-36L4.roa
Signing time:             Fri 01 Sep 2023 01:30:56 +0000
ROA not before:           Fri 01 Sep 2023 01:30:56 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.228.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:56 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=6516E19F6206F9C21E1EA3AC758224AD5FB7E8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:74:f2:af:3d:69:99:2e:e7:d4:58:0c:cd:
                    0d:18:ba:2a:1c:e4:5f:d6:e1:10:43:6c:55:8a:3e:
                    38:1d:9b:9e:d8:f7:29:16:72:c8:9a:36:0d:0b:10:
                    db:48:88:25:1e:4e:c3:ec:b1:83:94:6e:f4:dd:ff:
                    2c:13:2b:61:4e:a4:f6:44:5a:8c:0e:d1:48:a2:f0:
                    af:b6:2c:31:59:a5:6d:6b:bb:0c:f3:f8:47:f7:a4:
                    82:12:e2:68:16:4d:9d:dc:17:af:f9:6a:6a:2d:7c:
                    d1:c2:f8:0a:37:7e:7b:75:75:e2:00:0b:c1:bf:cc:
                    9d:38:50:6b:80:ae:82:dc:e3:d2:87:57:bc:bb:50:
                    2b:f1:43:fe:a2:b4:c2:6c:63:ca:84:aa:40:d9:49:
                    2e:d4:f3:1a:97:75:c7:8e:5e:30:7d:d1:51:e9:41:
                    01:05:82:be:b7:81:d7:26:97:0c:a9:d3:23:db:f4:
                    3d:a4:55:b3:75:64:60:86:c6:b6:a4:17:0a:db:64:
                    91:aa:80:b5:5b:40:55:16:16:2f:3b:ae:b4:2a:d7:
                    86:b1:58:db:f5:a9:ed:f0:30:bd:b1:00:32:05:15:
                    23:0b:0b:5d:15:43:86:c4:97:87:91:99:ba:33:73:
                    a7:01:5a:fc:d3:b6:07:e2:0f:b1:4c:de:03:1e:c8:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:E1:9F:62:06:F9:C2:1E:1E:A3:AC:75:82:24:AD:5F:B7:E8:BE
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZRbhn2IG-cIeHqOsdYIkrV-36L4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:73:c4:a6:15:0d:2c:a1:1f:1e:bf:33:92:13:09:7c:f1:16:
         d9:b5:1b:40:38:13:2e:02:ba:93:bb:15:07:e6:fd:65:3a:30:
         3a:26:32:8b:ab:36:2a:ba:12:23:1a:32:bb:e5:6c:5b:84:b4:
         c8:15:94:41:2d:44:0f:7d:29:5e:06:c1:8d:16:f5:38:fe:40:
         6b:a9:72:32:1e:59:17:82:e1:0e:da:6b:df:e6:b2:ef:63:50:
         ea:ee:47:9f:99:25:66:b8:c5:ed:2e:47:85:1c:70:c0:e6:e0:
         df:27:67:4f:7b:4f:2c:90:76:93:bc:f6:2a:92:39:ca:d0:16:
         66:a9:74:fa:a6:b1:e7:1f:46:1b:fb:3f:99:1a:c2:fa:e2:c8:
         b8:3a:af:e0:a1:bd:0a:4f:15:08:33:a8:28:6f:69:9d:d3:ab:
         d2:e5:ba:cf:3a:3a:ce:93:2a:4c:60:af:c9:55:5a:ff:32:b3:
         30:de:dc:4d:a1:20:8e:f9:4e:af:21:81:35:32:d4:e7:0a:85:
         25:c6:da:67:05:e5:ee:d6:9a:3d:c8:49:ec:b7:5c:81:57:1d:
         b3:3d:f6:89:07:d8:19:a9:ff:36:15:ae:52:dc:ec:1c:e6:27:
         dd:a7:7f:de:ed:b1:f7:64:fd:a7:88:b7:18:07:ac:26:24:62:
         71:b7:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org