Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2eKLvBkdCT_AwH6pTaLyVCiCjCw.roa
File:                     2eKLvBkdCT_AwH6pTaLyVCiCjCw.roa (raw, json)
Hash identifier:          +0/bAi1ol3LDGW+5Muc4Vm7yrchddwqI4OiG+L7tPyI=
Subject key identifier:   D9:E2:8B:BC:19:1D:09:3F:C0:C0:7E:A9:4D:A2:F2:54:28:82:8C:2C
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       17
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2eKLvBkdCT_AwH6pTaLyVCiCjCw.roa
Signing time:             Tue 11 Oct 2022 09:26:12 +0000
ROA not before:           Tue 11 Oct 2022 09:26:12 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        124.109.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:26:12 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=D9E28BBC191D093FC0C07EA94DA2F25428828C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:9c:a1:76:5c:65:c6:ef:a0:bf:4a:f3:1a:
                    17:21:3c:a6:ee:19:8e:99:a1:38:f5:5b:d5:1a:96:
                    4d:80:59:0a:e7:a0:98:56:b2:e4:a2:32:53:79:9d:
                    4a:54:fe:0e:a4:3e:f3:28:2c:26:ed:ac:0b:30:ea:
                    90:d5:9c:b3:5f:ac:0f:13:1c:71:74:23:72:11:a4:
                    6a:64:2c:75:38:99:57:7c:bd:a2:a3:2c:04:62:0a:
                    22:29:98:65:d4:89:40:f8:e7:29:df:24:d6:2a:1d:
                    46:ca:84:80:99:e8:f9:ab:e1:5f:d6:5d:b6:4f:66:
                    af:46:77:e9:61:0d:f8:46:d6:66:96:84:fa:81:81:
                    79:6f:0c:f7:bd:3b:11:0b:61:57:f3:70:c9:1d:68:
                    fe:b0:9b:36:49:d0:65:8c:3a:23:df:e3:a8:1c:40:
                    f5:62:2a:e1:69:98:99:f4:4a:4e:cb:0e:38:dd:0c:
                    2c:8e:1d:51:9f:ae:82:77:a1:0f:77:27:e3:aa:3c:
                    c2:c0:ce:9f:0b:bb:7e:4b:5e:f2:1c:ec:03:31:c4:
                    33:48:44:7e:a5:17:2c:9e:12:50:5a:3f:2c:06:64:
                    90:b1:7d:d9:43:27:b9:13:fe:95:3e:1d:dd:c0:06:
                    b2:03:3e:dc:f8:fb:05:fc:40:d9:67:f6:c4:7c:c3:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E2:8B:BC:19:1D:09:3F:C0:C0:7E:A9:4D:A2:F2:54:28:82:8C:2C
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2eKLvBkdCT_AwH6pTaLyVCiCjCw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:81:93:2e:43:cb:d7:b5:59:da:d9:62:d9:39:3b:89:97:f7:
         d9:44:f8:f0:22:98:1a:e5:c9:1f:b7:61:41:21:6b:9b:e1:d8:
         b8:63:ba:8e:2a:36:9c:ec:be:a9:c4:53:f2:51:60:7d:cf:09:
         70:8e:df:40:50:87:a5:00:38:2c:e4:4d:4c:52:62:e8:08:16:
         de:f1:ba:84:29:cc:fb:bf:5b:49:8e:95:8e:82:cf:77:81:c3:
         42:6b:db:83:f2:f8:12:79:2c:c9:a3:94:c0:c2:ac:c3:b3:02:
         85:21:3a:4e:96:13:0f:b0:00:f9:e2:21:98:b9:14:24:31:b6:
         97:f9:51:8e:2c:29:f4:75:6d:fd:96:14:ff:b7:66:cf:42:e9:
         76:31:dc:70:00:20:9e:0d:fb:3a:3f:f6:b1:27:2a:89:79:5f:
         0e:75:93:e1:8b:c5:04:15:e5:a7:f6:33:2a:5e:53:54:b7:be:
         ec:48:9d:b2:c3:a1:49:2a:ce:0e:00:bd:90:86:37:b3:7f:39:
         29:3e:66:21:21:46:24:61:4e:26:22:9c:6e:d7:92:ed:11:08:
         ec:b4:0c:15:6f:05:5e:00:ea:a6:76:08:44:d1:c5:26:69:be:
         29:36:32:87:77:05:eb:f1:ee:6f:ff:f7:d9:e8:4c:e1:b6:22:
         ac:91:09:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org