Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/22aMv4ETW8IxnX6XBLT-qeMVnrY.roa
File:                     22aMv4ETW8IxnX6XBLT-qeMVnrY.roa (raw, json)
Hash identifier:          1wrzLhxHtaxy7cE27jBTd0lJx8dbpxErv/g3wEKP/gA=
Subject key identifier:   DB:66:8C:BF:81:13:5B:C2:31:9D:7E:97:04:B4:FE:A9:E3:15:9E:B6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0116
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/22aMv4ETW8IxnX6XBLT-qeMVnrY.roa
Signing time:             Fri 01 Sep 2023 01:34:28 +0000
ROA not before:           Fri 01 Sep 2023 01:34:28 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.143.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:28 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=DB668CBF81135BC2319D7E9704B4FEA9E3159EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:31:24:c0:11:c9:4c:61:63:7c:c0:f9:ea:2d:
                    5b:4e:33:46:0f:d4:24:24:40:4c:ac:29:a9:7a:01:
                    3a:8d:58:e5:fd:a3:48:17:c6:f3:fa:64:8d:48:86:
                    87:61:3a:e5:9c:00:db:e3:0b:cc:b2:67:27:2c:be:
                    e9:25:fe:99:90:35:ff:fb:e2:21:23:61:df:95:38:
                    c9:14:18:65:55:6e:74:45:bf:18:69:f8:c5:37:be:
                    8a:90:ba:d1:b9:97:33:98:6d:a3:ad:26:12:a3:54:
                    d9:86:28:d4:11:b7:9a:b7:f4:fd:7c:3f:15:cd:86:
                    e7:50:8f:d5:a5:0a:0b:0f:f7:3f:5d:17:40:1e:bd:
                    cb:ab:55:af:1f:25:03:a5:52:bb:d2:16:b6:34:ef:
                    72:76:98:c1:b0:2a:7d:e0:d7:ce:5b:3a:6d:4f:28:
                    ec:57:20:35:c2:6f:b3:9e:0b:dd:f4:f8:15:4f:d6:
                    e9:69:50:0a:05:aa:fd:8f:ee:36:1b:d2:bc:4d:f5:
                    a2:93:00:b3:9f:5e:7d:6d:7a:15:c4:a3:ba:41:ab:
                    e9:3c:0a:b6:db:a5:68:42:7f:58:c8:37:74:01:e9:
                    20:b0:60:f2:46:74:e5:fb:35:23:10:d2:d5:ce:ae:
                    a9:6d:55:76:90:4f:8e:3c:6b:5e:7f:b2:d9:3f:20:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:66:8C:BF:81:13:5B:C2:31:9D:7E:97:04:B4:FE:A9:E3:15:9E:B6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/22aMv4ETW8IxnX6XBLT-qeMVnrY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:06:f3:1b:56:a0:76:85:21:52:86:bd:9a:01:ca:87:55:c4:
         99:7e:40:79:0c:51:5d:46:b2:a8:0d:ae:ed:f6:c1:60:7f:af:
         4b:a1:7c:d1:62:07:18:0e:14:ec:bf:85:38:73:ba:48:6a:c6:
         51:04:fb:20:01:85:77:e7:b5:14:31:53:de:e5:28:b2:8c:fd:
         8c:5d:30:aa:ef:32:ee:e1:b5:cd:60:34:90:15:e3:6f:22:72:
         2f:5c:9a:b5:72:58:63:89:77:33:ed:17:1b:13:dc:8d:91:b2:
         fb:bb:32:6f:70:d4:30:aa:e2:d9:c0:1e:78:4c:42:20:d6:46:
         24:96:25:73:da:24:5c:9f:97:15:15:03:2c:f8:3d:f1:65:28:
         cc:c2:08:f2:c3:cf:c6:c8:93:eb:26:59:fe:97:b1:6a:cb:c3:
         82:9c:a3:e0:64:56:16:23:de:a2:d7:71:f5:38:9e:86:bb:04:
         ba:a3:05:36:c1:ac:7a:fa:9d:fd:36:f0:0f:c1:6d:21:c4:d8:
         4e:56:80:f3:3b:96:f4:37:14:5e:59:d6:01:fa:fe:4e:cd:10:
         64:ef:8d:72:f7:57:3a:d3:1e:3f:d4:81:9a:ad:b0:ef:8f:83:
         42:e6:cd:b2:dc:7b:e4:a3:e4:6a:30:e1:3b:e8:84:e4:56:84:
         40:d3:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org