Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/htvx9lCQZTar3ezB_BPyiloro2Q.roa
File:                     htvx9lCQZTar3ezB_BPyiloro2Q.roa (raw, json)
Hash identifier:          W7XW0qKuLRPniPBxLDZohGbvGVykr+LFhPKHGaMee7Y=
Subject key identifier:   86:DB:F1:F6:50:90:65:36:AB:DD:EC:C1:FC:13:F2:8A:5A:2B:A3:64
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       2F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/htvx9lCQZTar3ezB_BPyiloro2Q.roa
Signing time:             Tue 11 Oct 2022 09:34:16 +0000
ROA not before:           Tue 11 Oct 2022 09:34:16 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.233.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:34:16 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=86DBF1F650906536ABDDECC1FC13F28A5A2BA364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:e1:4b:e3:eb:10:19:95:dc:60:42:7e:59:
                    44:8b:b4:bf:0a:1c:c6:36:48:82:0f:68:99:ea:1c:
                    27:b4:1a:07:75:40:64:df:8c:ad:48:6d:76:60:25:
                    62:84:87:94:47:0b:34:9d:5e:00:a7:63:b5:45:e6:
                    ee:d4:ce:41:19:e8:b0:c7:f1:11:1b:e0:07:a5:86:
                    3b:8c:6f:9c:45:da:b4:a8:7f:3a:43:72:e1:08:e0:
                    65:12:a8:6d:f7:68:b2:07:11:3b:00:25:f1:14:6b:
                    37:d4:97:34:54:a8:a3:01:78:e6:35:16:d5:6a:31:
                    96:c3:80:ce:cc:31:25:c3:b6:77:80:66:c0:c1:30:
                    48:d9:a6:6f:34:0b:96:3b:b2:26:43:c2:d8:dc:7a:
                    fb:02:89:ef:0e:09:58:ad:b4:81:f4:25:31:42:8e:
                    36:60:67:06:17:d6:68:af:97:f7:fa:cf:ee:71:aa:
                    74:00:68:51:23:56:8c:5c:a6:89:96:ff:86:c3:de:
                    d5:a1:1e:b9:20:5d:75:86:7f:a3:f7:c7:f5:3e:7d:
                    92:0b:80:46:07:46:6a:c9:81:a5:4c:c5:ee:a8:46:
                    93:4e:21:7c:a8:34:29:3b:08:fb:ca:15:d2:50:04:
                    89:c6:ee:4f:4f:b2:70:60:06:29:f0:75:0d:91:a2:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:F1:F6:50:90:65:36:AB:DD:EC:C1:FC:13:F2:8A:5A:2B:A3:64
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/htvx9lCQZTar3ezB_BPyiloro2Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:07:78:3e:e4:59:70:92:ea:24:dc:6b:1f:17:c8:cc:72:59:
         24:e4:7c:0c:0f:17:ae:80:56:9c:cc:43:12:f1:9d:74:c3:9e:
         a8:cd:93:fa:89:0a:07:9f:0c:c2:05:8f:1e:16:af:c6:a2:85:
         80:24:f0:78:7a:07:4b:76:44:98:d3:31:3c:cb:b1:26:59:b5:
         2c:6b:f8:1e:98:4c:0e:d2:6c:5e:61:75:1d:c2:2d:70:1f:80:
         ab:29:81:39:ae:b7:49:8b:ec:5c:6c:03:bc:1a:23:87:cf:49:
         5a:03:89:19:89:52:e4:7f:5a:80:dd:ba:4b:eb:a1:99:b6:cf:
         6c:ab:4a:ee:70:2e:d4:c8:62:50:2d:11:90:a2:e3:cb:6f:44:
         4b:9e:b4:73:67:2b:32:00:60:7b:0e:5e:61:9a:a5:3d:64:fd:
         f0:2f:52:2e:aa:75:24:3a:84:ad:b9:e2:88:8b:84:2c:9d:a4:
         b8:bd:33:f9:2f:73:c3:93:e3:ae:d5:f9:ad:6a:77:b0:45:da:
         c0:86:00:cf:27:2e:dc:65:4a:03:94:22:a4:1f:e5:ab:55:91:
         96:81:81:6d:3a:cb:99:7e:53:2e:d5:ec:a4:33:c6:f6:54:13:
         c7:82:d9:0b:f9:ca:74:7a:d8:24:91:11:15:5f:e4:91:24:26:
         47:83:d8:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org