Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/xGa6zPoQLw9ux2V4P0nK3yHzhhU.roa
File:                     xGa6zPoQLw9ux2V4P0nK3yHzhhU.roa (raw, json)
Hash identifier:          AON5GK0peTqfvhUSZtItL2eaPb41PuGUIfIJ8Z8+eQo=
Subject key identifier:   C4:66:BA:CC:FA:10:2F:0F:6E:C7:65:78:3F:49:CA:DF:21:F3:86:15
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0170
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/xGa6zPoQLw9ux2V4P0nK3yHzhhU.roa
Signing time:             Sun 01 Oct 2023 01:35:52 +0000
ROA not before:           Sun 01 Oct 2023 01:35:52 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.1.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:52 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C466BACCFA102F0F6EC765783F49CADF21F38615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:c2:23:ad:23:ed:28:1e:8f:ac:87:92:c3:
                    ca:aa:45:68:91:b4:e9:08:07:70:16:6c:03:5e:38:
                    06:35:e0:35:e5:c0:bb:a3:42:81:5e:af:a0:e5:fb:
                    11:6b:dc:2b:0a:d9:b2:8a:31:52:3b:1c:b9:5d:77:
                    73:ab:3c:e8:a1:4c:82:ad:a0:2a:54:49:da:de:98:
                    4e:1e:e1:ac:ad:cc:28:76:bc:a0:a5:9e:3b:61:3e:
                    fa:81:30:f9:4f:38:44:86:d7:64:1d:0b:7e:c2:56:
                    8f:a7:10:e3:06:48:80:9b:5c:76:45:cd:18:90:6d:
                    ec:64:58:74:e3:bb:b4:ab:c0:ec:58:24:a6:e2:2c:
                    ca:e4:fe:31:97:c5:26:3a:42:8f:21:0a:08:5d:3b:
                    cb:89:6b:d5:88:a4:62:0a:a3:7d:13:76:4c:53:31:
                    bf:be:88:b0:36:b6:7f:74:1c:2d:df:af:94:74:d5:
                    69:66:e7:4d:45:76:9e:df:dd:86:2d:65:0e:ab:76:
                    0f:f5:1c:2b:9d:98:d3:65:48:5a:f4:83:eb:52:48:
                    6f:76:b4:3f:47:6d:02:ac:2a:b4:75:0d:11:19:c4:
                    21:b4:fc:7c:50:49:62:cb:c2:31:c9:a8:9a:55:25:
                    76:61:90:50:8c:23:dd:5e:b1:1f:f4:41:d5:6d:df:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:66:BA:CC:FA:10:2F:0F:6E:C7:65:78:3F:49:CA:DF:21:F3:86:15
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/xGa6zPoQLw9ux2V4P0nK3yHzhhU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:ff:8b:bc:53:b0:db:76:8d:88:76:aa:f5:d9:2b:14:8e:
         9c:56:21:c2:d8:f1:58:0d:55:ec:c2:ef:3a:15:5f:76:bb:82:
         cd:3f:c8:36:10:e3:34:49:e5:43:2e:30:3a:16:fb:61:96:66:
         2e:d7:e6:3e:51:b4:12:97:e8:89:d4:c3:85:62:c8:d3:6c:28:
         06:57:a7:4e:9b:9f:e0:ef:31:67:81:48:e2:0c:c8:db:8c:86:
         bc:07:b9:88:10:ef:68:34:be:00:e1:93:05:98:ef:4c:5d:9f:
         e6:8a:5b:de:3f:55:22:ab:bf:63:c2:33:90:31:89:f2:0c:d9:
         2f:2c:81:ca:76:12:3b:b6:7a:b5:00:72:ec:e1:d1:87:fe:9b:
         dc:46:47:7f:a3:f6:28:74:ca:71:bc:54:8b:a1:36:df:69:ca:
         ed:90:31:47:da:d6:ae:ea:90:cf:c8:30:e2:7d:c7:cc:31:c3:
         5b:18:08:2a:13:da:3d:78:ff:7d:a3:04:fb:ce:9b:39:eb:04:
         22:da:45:84:3a:05:1c:4a:17:4c:bd:f9:8e:8e:2f:db:42:42:
         46:23:05:25:70:ff:89:46:dd:93:f9:0d:8a:d8:d2:d8:63:c6:
         22:8c:03:80:7d:12:b9:50:8f:ad:a3:3d:49:8f:41:f2:6f:fe:
         11:c5:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org