Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/0iRkXHBdtYMC1WrW_BHlDNbWif4.roa
File:                     0iRkXHBdtYMC1WrW_BHlDNbWif4.roa (raw, json)
Hash identifier:          JNWWgGq++OGzaB1M+/TwY9booLd6+FKeTu4fBoYSzqc=
Subject key identifier:   D2:24:64:5C:70:5D:B5:83:02:D5:6A:D6:FC:11:E5:0C:D6:D6:89:FE
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       AD
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/0iRkXHBdtYMC1WrW_BHlDNbWif4.roa
Signing time:             Tue 18 Oct 2022 02:34:21 +0000
ROA not before:           Tue 18 Oct 2022 02:34:21 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:34:21 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D224645C705DB58302D56AD6FC11E50CD6D689FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:29:d9:8f:65:0d:5d:2e:9a:74:6d:87:ad:
                    0f:63:e2:8a:e8:6d:08:be:18:02:89:0c:a2:65:6b:
                    9a:27:27:9f:54:84:5a:2e:0e:1e:3e:ec:30:05:47:
                    a4:e2:63:cd:a4:8f:94:75:5f:5e:f9:f9:cb:78:db:
                    40:fa:3c:34:f4:47:21:29:a9:92:b2:72:f3:f9:a6:
                    6f:80:57:db:08:ea:3e:c2:32:0d:3f:ba:11:1d:63:
                    88:8e:23:18:a6:32:9b:0c:76:2f:4a:c2:06:fc:f7:
                    63:b2:8e:d1:2b:59:37:9e:eb:b9:80:8a:20:5b:7e:
                    9c:5c:7a:4d:bf:76:cc:94:10:56:9e:c2:3a:c4:28:
                    a7:c9:d1:7b:94:d5:98:d4:b8:48:16:82:9a:9a:59:
                    df:ba:69:63:42:eb:52:57:fb:de:11:f3:a6:96:fc:
                    32:4a:f1:76:a8:ec:17:5b:f2:2a:37:9f:6f:fd:41:
                    0a:59:14:27:a3:e5:bb:95:7b:8b:c0:a0:fd:3d:5b:
                    94:f2:e8:ab:5e:9f:29:06:3c:c7:15:f6:18:36:83:
                    06:f8:f1:cc:7a:f3:72:88:cf:3d:8d:33:cd:aa:da:
                    93:4c:f5:5d:38:8d:3d:8b:c2:cf:d7:7a:16:f6:b6:
                    67:0d:ec:8d:b3:ec:03:69:30:b8:74:6c:56:0a:92:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:24:64:5C:70:5D:B5:83:02:D5:6A:D6:FC:11:E5:0C:D6:D6:89:FE
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/0iRkXHBdtYMC1WrW_BHlDNbWif4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:7d:de:e7:90:a0:bd:8e:93:02:96:43:2e:60:a7:69:83:
         13:25:71:57:a8:34:50:6c:9e:06:84:ec:91:c4:25:0c:cd:03:
         d4:f8:76:28:08:fb:1a:9b:b2:e3:64:44:f5:1d:21:80:9f:d0:
         2f:98:db:09:bb:f0:ed:3b:01:9e:43:71:db:2a:73:63:0e:f0:
         2d:06:63:7e:35:74:7a:2d:0f:36:ca:1e:07:45:47:68:32:7f:
         97:06:24:55:7d:e9:c2:a3:91:20:75:2b:dd:73:2a:fc:bc:c7:
         fc:6e:20:cd:7f:2d:d3:ec:9b:e2:d0:7f:eb:2b:93:3d:9b:cf:
         4c:f2:a8:67:a1:c7:e6:6d:df:71:67:2c:ac:80:d3:dd:ed:30:
         99:84:57:a7:dd:e2:15:07:e4:e1:74:82:47:aa:3e:51:fd:c9:
         2f:fd:aa:8d:6b:69:b7:cd:16:51:df:1a:d1:fa:61:a9:dc:bf:
         f6:07:85:5d:70:28:7c:ae:41:bd:f4:cc:6e:31:19:77:15:d8:
         15:d5:80:1a:3e:d1:a0:cf:58:99:98:70:da:ee:cc:71:f5:0c:
         f7:27:e8:ad:74:ed:45:7a:45:93:98:69:08:d5:64:04:a6:14:
         e7:70:45:4d:eb:5c:c2:1a:a5:72:4e:6a:3b:fd:b0:c4:f1:4d:
         98:2b:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org