Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dD5lDzRY0zdFGGUFyCgAs70k6QU.roa
File:                     dD5lDzRY0zdFGGUFyCgAs70k6QU.roa (raw, json)
Hash identifier:          B9CwcFsZMbyr7h8nrwbOAh9iWlySHfNLXAWg+7t4NqY=
Subject key identifier:   74:3E:65:0F:34:58:D3:37:45:18:65:05:C8:28:00:B3:BD:24:E9:05
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D5
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dD5lDzRY0zdFGGUFyCgAs70k6QU.roa
Signing time:             Fri 01 Sep 2023 01:30:54 +0000
ROA not before:           Fri 01 Sep 2023 01:30:54 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:54 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=743E650F3458D33745186505C82800B3BD24E905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:52:00:c4:45:d8:95:8a:2b:c5:9d:0a:39:
                    b0:eb:46:0d:ff:5b:91:e1:18:d4:c5:fc:4d:18:95:
                    1e:65:a2:9d:d9:65:3c:77:17:eb:1e:d3:98:ec:1d:
                    ee:a4:ac:40:7b:3c:dc:d1:85:0a:42:6c:31:5d:de:
                    bf:ce:1a:37:71:61:f4:81:59:f5:0f:00:9c:7c:27:
                    79:16:df:e5:cb:36:54:d8:9c:ec:c2:58:86:5e:91:
                    fb:e1:b7:71:d6:2e:5b:f1:d6:6e:2a:4f:be:b0:5c:
                    6b:e8:8e:50:2d:75:7e:34:0e:cb:17:fb:9d:0f:59:
                    b8:ed:bd:95:7b:62:98:f4:19:e5:30:33:dc:d1:b8:
                    fa:82:b3:e4:1f:3d:3a:94:98:64:06:ac:f3:5e:71:
                    f0:fb:33:58:61:a1:89:8f:2c:b0:e2:82:07:86:3a:
                    74:a5:6b:f9:87:bb:dc:31:8b:b0:d7:5b:28:e4:bb:
                    fc:ba:8d:9c:37:ba:72:c9:df:74:75:3a:0d:db:63:
                    d3:c3:97:a6:76:d9:d9:67:c6:98:c2:61:7b:76:6b:
                    84:e6:9f:8b:cd:e2:3b:d2:75:e3:2c:f1:e2:fa:94:
                    87:12:21:51:8c:ea:6d:7a:43:70:74:d5:2c:7e:3b:
                    ca:4a:fb:2a:f1:9c:9a:69:49:3c:c4:fa:2f:19:fa:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3E:65:0F:34:58:D3:37:45:18:65:05:C8:28:00:B3:BD:24:E9:05
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dD5lDzRY0zdFGGUFyCgAs70k6QU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:b7:74:3f:a1:bb:a1:da:1f:1b:a6:b6:43:fe:36:f2:0d:81:
         01:46:6c:2c:fb:42:a9:a1:fc:5e:6f:21:09:89:5f:c3:ee:8b:
         a7:98:04:4d:bf:ba:b1:94:d8:f0:58:8c:2b:8a:a7:7d:46:1a:
         2c:2a:e7:cc:92:ae:76:7e:20:df:30:e7:01:a7:77:84:ea:c9:
         0f:e9:30:a1:e1:ac:ef:e7:3c:15:63:d7:36:9b:f7:3f:bf:d6:
         1d:6e:e7:e8:5b:3e:e3:ba:de:98:1d:5b:4a:64:c9:ed:8c:77:
         6c:5e:c6:09:67:cd:b3:68:ed:f4:27:29:18:51:be:b3:3f:a3:
         46:71:f3:23:df:46:53:03:7b:91:a3:45:52:db:86:e0:52:b6:
         36:52:5b:6e:d0:c3:80:d0:68:21:cc:e9:6d:3d:88:c5:3e:b5:
         f4:83:87:25:f0:be:b4:37:ae:5a:6d:4a:f4:07:f3:30:a6:b4:
         57:92:06:80:1c:4d:cf:ad:91:38:23:e1:78:5f:e5:75:b5:a6:
         e2:f7:8d:31:8a:23:68:ee:36:c9:65:d5:31:3f:3e:26:42:65:
         80:a2:88:d3:0d:e0:de:f2:1e:c1:cc:0a:d4:27:f7:4a:c0:4b:
         c3:33:86:20:cf:85:3d:4b:de:30:c2:9b:9b:fe:a3:29:54:7d:
         db:9f:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org