Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/prXatjs7qsNCDX9R3SzVU-9-qMo.roa
File:                     prXatjs7qsNCDX9R3SzVU-9-qMo.roa (raw, json)
Hash identifier:          sVqUA3WvWEYTzcFV48AmS5l5ohIxoBIy4VvmwVQbPKU=
Subject key identifier:   A6:B5:DA:B6:3B:3B:AA:C3:42:0D:7F:51:DD:2C:D5:53:EF:7E:A8:CA
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0164
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/prXatjs7qsNCDX9R3SzVU-9-qMo.roa
Signing time:             Sun 01 Oct 2023 01:35:49 +0000
ROA not before:           Sun 01 Oct 2023 01:35:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A6B5DAB63B3BAAC3420D7F51DD2CD553EF7EA8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:68:30:43:7e:30:08:91:51:d2:19:1c:2c:
                    e7:4e:b8:51:83:30:bc:c0:d9:35:b2:97:69:12:66:
                    27:8e:64:61:fa:d6:51:d0:35:5b:c2:86:8a:44:cd:
                    e2:37:46:73:24:73:3d:d5:8f:9c:fa:52:cd:b5:7c:
                    2c:26:dc:85:e5:b6:02:14:27:56:6b:c4:f0:d3:69:
                    6a:84:79:cb:14:12:ec:6d:df:21:86:a5:6a:a3:a9:
                    75:6d:1b:bf:5f:dd:f3:f9:c7:0a:09:9d:2b:f5:ca:
                    ee:11:00:22:95:b6:d2:c5:37:a1:64:d7:47:6e:f3:
                    30:55:ae:3a:6c:37:0c:b0:03:78:cd:76:64:d7:ce:
                    f6:74:2c:bb:fe:22:dd:23:57:51:fe:77:eb:29:da:
                    2c:3c:1e:d2:89:f2:08:2e:b8:7c:54:d8:72:21:55:
                    e1:09:71:70:a4:a9:15:4f:8c:60:a3:c8:54:00:a9:
                    a8:63:06:e7:8c:26:f8:4c:b3:dd:64:9b:8a:06:28:
                    2c:db:f0:32:c0:98:f0:c8:db:e6:f5:b1:cc:78:88:
                    fd:ab:88:9d:96:52:b4:b7:d8:b6:ed:0d:87:13:9f:
                    57:35:65:f8:93:4f:22:f8:bc:03:3b:c6:73:2d:9e:
                    e7:b1:5e:01:67:18:be:9e:94:7f:cf:e5:2e:6e:8e:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:DA:B6:3B:3B:AA:C3:42:0D:7F:51:DD:2C:D5:53:EF:7E:A8:CA
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/prXatjs7qsNCDX9R3SzVU-9-qMo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:9b:1a:07:22:ab:03:49:e7:a4:e1:00:15:ff:6d:23:81:
         17:f2:35:af:62:42:df:5c:60:e2:f9:8d:90:95:c4:a0:71:6a:
         b8:a0:7a:ac:1e:0f:33:f2:cb:96:be:37:e1:ba:d3:f1:15:88:
         ff:e7:52:ed:0d:d4:3c:ce:85:c6:a7:c2:16:36:f6:63:a3:fa:
         fe:00:a5:42:0c:06:c0:a3:24:24:cd:ff:ca:a3:e2:bb:24:e9:
         f3:c1:67:3e:a4:d7:74:45:6b:1d:be:ae:d3:8d:9a:5f:51:d4:
         2e:ad:54:a9:ed:56:4b:34:50:ee:0d:80:ba:fa:b5:1c:2a:55:
         0f:55:f3:0b:0a:c5:a6:9f:d3:0f:61:99:b0:93:c9:54:3d:1c:
         c3:38:f1:82:7e:12:73:10:93:ac:bd:d2:d3:18:ca:a1:15:66:
         32:47:2b:a2:f6:17:8f:bd:99:d7:0b:11:ed:2e:dd:63:f8:be:
         b8:ce:67:55:be:ad:5f:ab:b2:31:c1:c2:d7:1b:69:d2:0d:b8:
         6f:93:a9:df:25:20:45:d8:47:09:3e:dd:a4:79:c3:f2:95:20:
         b9:94:1c:be:e6:64:f5:6d:bb:c8:30:dd:d2:db:94:67:24:57:
         ce:f9:ad:90:7b:e0:d0:96:b1:b8:b4:b0:77:57:db:50:63:b3:
         b6:e4:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org