Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/tgUZZNRHDXBAFPHTCxmUOdkXsPY.roa
File:                     tgUZZNRHDXBAFPHTCxmUOdkXsPY.roa (raw, json)
Hash identifier:          qSh5dZVt/KILvhbxUBG/tbQ4MMBOtDCYaj8OWklVkWA=
Subject key identifier:   B6:05:19:64:D4:47:0D:70:40:14:F1:D3:0B:19:94:39:D9:17:B0:F6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0105
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/tgUZZNRHDXBAFPHTCxmUOdkXsPY.roa
Signing time:             Fri 01 Sep 2023 01:33:19 +0000
ROA not before:           Fri 01 Sep 2023 01:33:19 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:19 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=B6051964D4470D704014F1D30B199439D917B0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:f9:e5:31:58:7b:de:fa:aa:f5:02:d2:23:
                    8c:48:6e:f7:79:9d:78:9b:bf:d1:60:36:eb:c5:e1:
                    6d:9e:9e:f0:31:10:b4:aa:bc:0b:75:b0:07:52:9c:
                    14:7b:6a:ac:b1:e5:b8:0a:ef:09:c4:9b:00:92:47:
                    70:4f:ff:8c:de:b6:be:66:b7:42:31:7c:b3:48:19:
                    c2:e4:62:c2:d7:49:df:b4:4f:f4:35:9c:56:d8:16:
                    7c:9e:c9:ab:d0:ca:ac:19:5b:6f:03:8c:f6:1f:0b:
                    0c:a5:74:49:a1:58:8d:f7:75:6b:11:7f:07:55:22:
                    d1:96:bc:7e:1f:15:59:33:61:b9:70:9c:bc:ce:00:
                    03:2b:d7:ed:f9:08:b6:27:3a:df:9b:67:49:13:14:
                    d1:d2:81:7a:dd:55:b0:13:18:6a:3c:14:10:d7:c3:
                    5b:f7:77:8d:6b:1b:5e:c3:a7:c4:b6:43:b7:bd:8f:
                    dc:58:0a:ec:0d:a2:c1:e6:d1:5e:bc:85:35:4c:87:
                    63:b9:97:ac:52:3d:4c:d7:14:d4:ef:1c:8e:91:57:
                    84:15:23:cf:a2:b5:69:ca:4b:e1:86:61:cb:5e:19:
                    7d:f9:38:19:be:61:39:fb:10:9b:08:6b:d7:ea:c9:
                    50:bf:bf:54:ee:60:a9:08:0e:e7:f5:e4:fd:6b:a9:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:05:19:64:D4:47:0D:70:40:14:F1:D3:0B:19:94:39:D9:17:B0:F6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/tgUZZNRHDXBAFPHTCxmUOdkXsPY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:7a:9c:5a:8f:53:9a:97:6d:7e:9d:b0:bf:61:c9:c6:98:
         b9:29:6c:64:14:e7:ff:be:e1:32:48:44:47:48:0b:81:87:9b:
         d1:ec:5f:89:f9:0f:c5:c1:02:1f:27:c8:38:cf:1e:7c:f6:1b:
         14:2c:91:5a:46:73:11:e7:5d:fb:81:cc:01:cb:fe:05:19:d7:
         da:90:08:21:34:dc:86:13:59:be:07:61:ed:bb:e0:4f:8b:5a:
         17:11:ed:35:32:57:6e:ee:5b:ca:f7:eb:0a:25:00:2d:bf:73:
         78:5a:cf:c6:28:d7:96:2d:9d:8e:4a:34:78:88:2e:68:8a:b2:
         2a:51:a0:b0:a9:89:95:90:c9:8c:ae:0b:b4:8c:1e:e1:40:0f:
         f8:cd:ea:b6:61:b3:9e:0a:98:9b:4a:34:b5:bd:71:5e:66:76:
         21:4b:2c:69:c0:61:c9:1c:56:d4:f3:0d:d9:36:cd:e0:d2:27:
         17:92:01:96:d9:76:71:d0:1e:54:e0:db:4c:95:46:da:50:a3:
         ff:66:09:2f:ea:9b:15:80:a2:7e:03:f8:a0:f2:e2:89:b0:85:
         1d:13:c2:92:3f:ea:0c:f3:ec:a4:9c:c1:29:98:9a:fc:d4:68:
         1c:d0:f2:14:d9:5d:1f:8f:34:89:f0:6d:b4:f7:31:19:19:5d:
         a5:fa:52:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org