Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ulQKvWeY5-hJUe48ZGi6erAylvM.roa
File:                     ulQKvWeY5-hJUe48ZGi6erAylvM.roa (raw, json)
Hash identifier:          A5E6Bua6j7P5KMkjMrRgOkH5YVko5Z80ORYiCArh2jE=
Subject key identifier:   BA:54:0A:BD:67:98:E7:E8:49:51:EE:3C:64:68:BA:7A:B0:32:96:F3
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       F7
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ulQKvWeY5-hJUe48ZGi6erAylvM.roa
Signing time:             Fri 01 Sep 2023 01:33:13 +0000
ROA not before:           Fri 01 Sep 2023 01:33:13 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:13 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=BA540ABD6798E7E84951EE3C6468BA7AB03296F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:1d:f5:b9:58:3f:61:2c:4f:74:22:26:0b:
                    73:6c:82:c8:ef:c7:4d:33:01:d2:ff:c7:45:dc:14:
                    80:7f:88:e0:18:bd:01:47:5d:89:9e:a8:4d:c9:15:
                    36:c2:a3:7b:ae:e7:17:d6:27:cf:0a:83:fc:57:cd:
                    0f:f1:71:e2:82:80:14:69:02:89:66:de:49:6c:88:
                    71:8f:bc:ed:21:8e:59:12:1b:82:9b:7e:d3:ab:3b:
                    1d:c3:a1:af:2e:73:d3:12:b6:70:7b:21:cb:09:13:
                    0b:0b:b0:f2:4d:03:95:fa:a7:1a:9f:65:70:f8:3d:
                    1c:a4:99:9d:f6:4b:74:fa:29:81:7a:29:a4:27:84:
                    fd:b5:3f:6b:b4:c3:fc:1a:04:9e:3d:ef:e1:16:22:
                    bd:33:43:7d:c6:91:33:67:17:f9:dc:a3:76:49:6b:
                    0b:f9:bc:25:b5:02:09:5d:f4:11:3e:8f:27:3d:9b:
                    88:2f:86:12:2a:54:45:a8:9f:76:5e:bb:bb:6d:11:
                    d8:03:23:8f:a2:b9:ee:cb:8d:12:09:9b:be:3d:d9:
                    47:79:67:26:7f:94:a3:3f:42:86:1b:73:fe:fc:ac:
                    47:5a:9a:55:33:fd:89:3a:05:6b:6e:53:ed:50:79:
                    eb:e3:28:e8:21:ea:f1:85:f2:91:f0:43:a8:a4:13:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:54:0A:BD:67:98:E7:E8:49:51:EE:3C:64:68:BA:7A:B0:32:96:F3
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ulQKvWeY5-hJUe48ZGi6erAylvM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:1a:93:09:d1:ad:33:12:fe:41:97:bf:b4:3f:1f:b8:02:
         96:04:53:1a:76:80:56:96:43:9c:7a:75:d9:b0:63:ca:f9:37:
         61:b4:21:0f:2b:01:48:0e:84:fb:e6:59:61:fb:4e:ee:a4:c0:
         cc:af:3a:59:d9:11:a5:48:92:a3:0f:a7:c0:5a:b3:fc:aa:de:
         90:0b:88:37:90:20:a9:6c:6b:af:d7:1e:a0:33:e9:ea:61:cc:
         e1:b1:6c:4f:02:6b:e0:8b:7b:31:a9:a6:99:e1:38:7e:15:ec:
         a9:99:67:d7:c8:a2:69:4c:2e:87:2b:a8:b9:5c:63:88:4d:25:
         b1:0d:03:f1:85:4d:c8:92:9d:62:e1:1c:d7:5b:8a:e5:be:9d:
         0a:07:b5:e4:6a:05:db:69:67:a0:f0:db:30:34:bf:b2:c8:92:
         a3:e6:c4:cf:b6:6f:9d:4a:2c:51:14:d5:36:12:bd:97:74:ff:
         bc:61:5e:bb:d2:13:09:db:e2:3c:6d:79:0d:70:f0:29:c5:ec:
         a0:ec:9a:ae:17:a3:91:d7:c1:f7:13:e4:38:ae:fe:69:2d:ea:
         1e:38:ff:94:61:0a:4d:f4:01:0a:09:56:57:a9:d3:96:b6:62:
         12:b1:4b:c0:eb:a3:a8:53:86:7d:4f:7a:17:e7:9b:06:78:2a:
         c4:5e:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org