Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rS1Lgw1jcLWepo0iymWOZIwOn48.roa
File:                     rS1Lgw1jcLWepo0iymWOZIwOn48.roa (raw, json)
Hash identifier:          JKnE5aPKDR05zgmNxpJjzNmG1f3pWuepvBHAeju7hKU=
Subject key identifier:   AD:2D:4B:83:0D:63:70:B5:9E:A6:8D:22:CA:65:8E:64:8C:0E:9F:8F
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0101
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rS1Lgw1jcLWepo0iymWOZIwOn48.roa
Signing time:             Fri 01 Sep 2023 01:33:17 +0000
ROA not before:           Fri 01 Sep 2023 01:33:17 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.168.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:17 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=AD2D4B830D6370B59EA68D22CA658E648C0E9F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:d1:52:2a:75:c8:81:93:a7:71:2c:40:94:
                    08:12:51:06:f2:2e:b7:58:36:85:6d:6d:68:d7:24:
                    80:19:0d:a4:3a:a8:90:e2:75:e2:62:e0:da:0c:ba:
                    54:63:10:67:17:6e:06:d6:18:46:d9:e4:ff:58:db:
                    47:9c:18:b5:b8:1b:05:f3:a3:c2:75:b7:4d:9c:17:
                    ac:cb:fb:1f:57:9a:30:92:7f:03:ce:ab:d5:7d:12:
                    38:95:7a:c1:45:f0:a9:19:3c:4f:69:f4:7e:e7:51:
                    4d:ec:2b:5e:c9:73:38:8f:c9:c1:f3:a0:07:00:ef:
                    aa:29:5d:35:65:86:27:b9:8a:89:e5:8e:ba:79:d2:
                    f6:ea:2e:3d:da:a5:73:70:e1:e9:f5:49:2f:be:73:
                    dd:a2:de:15:18:8a:e1:b1:ea:42:3a:79:99:d0:fc:
                    24:59:08:09:57:83:9f:4c:c7:b3:7b:68:99:fd:1a:
                    d1:d6:a3:04:22:f2:02:ef:21:4b:81:38:2d:7c:6f:
                    66:14:c7:a9:dc:49:29:3a:ee:09:bc:da:57:e8:f8:
                    84:51:7a:08:d0:19:4e:00:24:b0:f4:00:f2:48:4b:
                    8f:8f:18:c9:2d:ed:98:a0:7e:a6:11:b3:b6:ff:0a:
                    e8:a6:55:13:5b:4c:69:1c:03:78:d7:1e:27:46:fb:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2D:4B:83:0D:63:70:B5:9E:A6:8D:22:CA:65:8E:64:8C:0E:9F:8F
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rS1Lgw1jcLWepo0iymWOZIwOn48.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.168.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:53:62:a0:07:bf:87:24:67:e3:94:b7:bc:d8:00:26:72:
         2e:f6:95:f8:3b:fa:a1:65:04:13:29:70:c5:2b:a9:63:36:7b:
         b7:84:92:81:3e:da:ff:21:b3:3a:07:7e:55:84:7c:af:11:41:
         f2:51:b4:ed:e5:d4:96:ed:63:15:f2:3c:9d:ed:74:9f:f5:7f:
         02:17:75:f0:23:70:9e:0d:6c:39:14:e8:0e:0c:58:2c:14:74:
         de:86:92:42:f4:e5:69:b1:13:1b:38:fc:b2:0f:77:83:b7:91:
         2c:54:9e:ff:75:85:f5:d5:09:74:85:60:39:79:78:d1:1d:38:
         f2:2d:2c:1c:61:3f:09:19:5e:44:8c:51:bb:78:c6:00:e8:34:
         92:3a:aa:98:13:89:de:28:63:6e:d0:a8:90:83:c7:51:e8:a1:
         83:82:80:ce:95:63:02:fb:d5:91:db:98:e7:bb:f8:b0:67:c1:
         2f:7d:95:e1:0f:84:97:cf:40:de:da:2f:f2:e4:7a:d1:59:3f:
         7c:2c:fd:2c:16:06:6f:7f:3f:c5:44:e5:63:a1:01:2d:9d:26:
         8a:f2:1a:53:29:89:0e:e3:a4:89:a9:d9:63:5c:ae:98:ff:42:
         28:48:dd:9a:b4:a2:84:44:5f:ca:f5:e2:76:4e:42:e0:99:35:
         39:33:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org