Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30037/RRhb0hvjClDCs594HpLnQFvfEKU.roa
File:                     RRhb0hvjClDCs594HpLnQFvfEKU.roa (raw, json)
Hash identifier:          d36rYhK3cIl+DVH3qmh3tPNypQ+MPFqvi4K1EpqRLak=
Subject key identifier:   45:18:5B:D2:1B:E3:0A:50:C2:B3:9F:78:1E:92:E7:40:5B:DF:10:A5
Certificate issuer:       /CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
Certificate serial:       0D
Authority key identifier: 1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/RRhb0hvjClDCs594HpLnQFvfEKU.roa
Signing time:             Fri 28 Oct 2022 09:04:52 +0000
ROA not before:           Fri 28 Oct 2022 09:04:52 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     0
IP address blocks:        2001:2a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
        Validity
            Not Before: Oct 28 09:04:52 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=45185BD21BE30A50C2B39F781E92E7405BDF10A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:c6:44:54:7a:f9:57:1f:fa:ec:2d:f5:aa:
                    99:0d:26:1f:bf:89:6a:32:40:6a:17:4e:4a:d6:ec:
                    34:4f:44:94:63:ba:3b:c6:54:eb:36:18:7b:60:2e:
                    5c:5b:79:7d:1d:6d:05:ee:fb:b9:af:c8:2f:b2:6f:
                    42:1e:f1:4e:20:67:d5:79:b5:01:af:57:fd:f7:1a:
                    4f:cc:f2:9b:ed:91:08:a0:62:98:d3:7e:b2:50:e1:
                    6a:5c:ef:4b:a0:95:b1:45:f7:4f:bb:67:95:77:c1:
                    f8:9e:ef:81:2c:95:6f:f7:fb:04:61:6a:1e:43:17:
                    ca:b0:e1:d4:fb:3e:82:91:dd:c3:e2:5e:89:a2:be:
                    c7:6f:2d:f1:1b:30:22:d9:bb:f0:f6:22:ca:78:a5:
                    54:01:cc:aa:a9:a2:af:0a:dc:aa:14:9c:c2:64:39:
                    83:e5:86:1a:c8:46:7f:50:88:ef:01:f6:82:d7:31:
                    06:30:cb:37:0f:b7:c6:3b:0e:ea:45:f5:b8:93:85:
                    0c:32:f2:32:c1:d4:0e:74:bd:be:d6:d2:2d:bf:a2:
                    c0:29:52:b0:70:f0:38:73:cd:11:e6:0e:cf:05:f3:
                    85:ba:44:8d:e0:98:c2:b3:0c:e4:23:ef:2d:d8:ea:
                    c2:7e:1a:82:e9:12:f6:7f:97:a5:ef:b1:55:48:33:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:5B:D2:1B:E3:0A:50:C2:B3:9F:78:1E:92:E7:40:5B:DF:10:A5
            X509v3 Authority Key Identifier:
                keyid:1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/GmvpIefaH1HzjCmfeS9ezAy2q54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/RRhb0hvjClDCs594HpLnQFvfEKU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:8f:6b:44:ea:c5:c9:70:97:48:1f:38:3e:9b:ce:26:f4:d6:
         f1:db:23:55:37:17:48:26:40:42:7f:88:cf:a2:28:9b:f3:de:
         cb:b2:6b:b1:82:81:4a:c8:c8:a5:81:16:1d:ff:2d:0d:a8:5f:
         cd:1f:75:2b:a6:93:68:f3:98:73:d5:8b:a1:63:96:2e:59:f0:
         9e:20:38:44:54:d4:4c:95:36:4a:e6:d6:02:d3:3d:63:2e:bf:
         ec:ef:c9:ea:01:89:e5:37:31:ab:f1:7c:08:ea:9b:d2:8d:ea:
         22:55:22:e7:5c:c2:94:05:dd:90:51:b1:60:7e:60:db:5f:f1:
         7c:38:6b:14:1a:8d:0f:55:7e:86:3f:f5:e2:d6:56:a8:51:24:
         b9:6b:c7:e1:b4:64:d8:8e:56:d9:0e:2c:c8:00:9f:68:b8:a9:
         50:22:61:b8:b8:fe:18:49:e9:2b:2e:16:63:2d:e4:62:cc:44:
         fa:83:ae:b4:b8:48:3b:63:6c:37:5c:94:3f:78:b2:2c:aa:c8:
         fe:1a:cd:59:e2:4b:83:2b:c9:06:6f:ca:db:de:79:75:b8:b1:
         3a:af:fe:6a:ea:16:0a:be:15:a1:52:03:1d:60:0c:de:d9:8a:
         8b:c5:c6:51:4f:32:0f:39:46:e0:38:09:3f:19:f0:fd:f7:5b:
         ff:39:ff:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQTZC
RTkyMUU3REExRjUxRjM4QzI5OUY3OTJGNUVDQzBDQjZBQjlFMB4XDTIyMTAyODA5
MDQ1MloXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNDUxODVCRDIxQkUzMEE1
MEMyQjM5Rjc4MUU5MkU3NDA1QkRGMTBBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKk1xkRUevlXH/rsLfWqmQ0mH7+JajJAahdOStbsNE9ElGO6O8ZU
6zYYe2AuXFt5fR1tBe77ua/IL7JvQh7xTiBn1Xm1Aa9X/fcaT8zym+2RCKBimNN+
slDhalzvS6CVsUX3T7tnlXfB+J7vgSyVb/f7BGFqHkMXyrDh1Ps+gpHdw+JeiaK+
x28t8RswItm78PYiynilVAHMqqmirwrcqhScwmQ5g+WGGshGf1CI7wH2gtcxBjDL
Nw+3xjsO6kX1uJOFDDLyMsHUDnS9vtbSLb+iwClSsHDwOHPNEeYOzwXzhbpEjeCY
wrMM5CPvLdjqwn4agukS9n+Xpe+xVUgzH5MCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRFGFvSG+MKUMKzn3gekudAW98QpTAfBgNVHSMEGDAWgBQaa+kh59ofUfOMKZ95
L17MDLarnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMzcvR212cEllZmFIMUh6akNtZmVTOWV6QXkycTU0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR212cEllZmFIMUh6akNtZmVTOWV6
QXkycTU0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDM3L1JSaGIwaHZqQ2xEQ3M1OTRIcExuUUZ2ZkVLVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQKgMA0GCSqGSIb3DQEBCwUAA4IBAQB/j2tE6sXJcJdIHzg+m84m
9Nbx2yNVNxdIJkBCf4jPoiib897LsmuxgoFKyMilgRYd/y0NqF/NH3UrppNo85hz
1YuhY5YuWfCeIDhEVNRMlTZK5tYC0z1jLr/s78nqAYnlNzGr8XwI6pvSjeoiVSLn
XMKUBd2QUbFgfmDbX/F8OGsUGo0PVX6GP/Xi1laoUSS5a8fhtGTYjlbZDizIAJ9o
uKlQImG4uP4YSekrLhZjLeRizET6g660uEg7Y2w3XJQ/eLIsqsj+Gs1Z4kuDK8kG
b8rb3nl1uLE6r/5q6hYKvhWhUgMdYAze2YqLxcZRTzIPOUbgOAk/GfD991v/Of9i
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org