Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5jgGqz0wGEEQnkntdfpTRWHQf8Y.roa
File:                     5jgGqz0wGEEQnkntdfpTRWHQf8Y.roa (raw, json)
Hash identifier:          FJM/wLPfbIpQLQwEi36eUaYTaPxTzpmH2+csmIdFT+A=
Subject key identifier:   E6:38:06:AB:3D:30:18:41:10:9E:49:ED:75:FA:53:45:61:D0:7F:C6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       AF
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5jgGqz0wGEEQnkntdfpTRWHQf8Y.roa
Signing time:             Tue 18 Oct 2022 02:36:22 +0000
ROA not before:           Tue 18 Oct 2022 02:36:22 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:36:22 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E63806AB3D301841109E49ED75FA534561D07FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:77:ae:c9:6d:7e:24:d2:64:73:9d:02:bf:
                    ab:ef:e6:ec:45:c1:64:3c:79:82:15:bd:19:71:f1:
                    4c:52:ab:fd:33:86:b7:e2:d1:7a:ea:4d:a4:a1:e0:
                    d4:2c:be:f8:99:04:12:19:c5:cb:86:e7:b0:32:23:
                    32:a2:78:cc:13:26:2b:84:70:a8:f1:74:3b:58:4b:
                    3c:b6:9b:6c:65:5c:e7:00:91:f7:d2:78:ca:3c:92:
                    64:fc:80:2e:b8:f3:16:63:d3:b0:12:e7:4d:8b:a0:
                    37:75:38:3b:40:af:e8:cf:3e:86:49:06:28:26:94:
                    4e:74:da:aa:10:e6:9e:95:e5:14:56:c2:f4:38:9c:
                    02:2d:f0:3e:57:62:64:6e:64:ef:1f:5d:85:a0:73:
                    23:97:9f:f1:b3:5d:19:17:93:25:2c:a7:ce:ba:26:
                    9b:75:0f:4e:15:b8:c4:d1:57:e5:6a:b7:eb:a9:6a:
                    84:c3:c1:8e:73:b8:8f:79:3b:de:e0:e1:95:9a:ba:
                    be:28:61:d3:91:4f:da:eb:c5:7c:b9:88:f9:dd:78:
                    2b:50:2f:41:ff:e6:80:78:06:09:43:ea:b4:57:be:
                    6c:ab:f2:e6:6c:e2:2c:19:16:0c:53:0b:40:05:75:
                    5a:f5:b7:73:a4:b0:13:1e:fe:55:8a:09:0f:91:67:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:38:06:AB:3D:30:18:41:10:9E:49:ED:75:FA:53:45:61:D0:7F:C6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5jgGqz0wGEEQnkntdfpTRWHQf8Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:07:b9:ba:22:97:84:20:52:d9:d1:61:79:dd:91:be:d2:
         73:6e:a3:99:c4:27:f4:02:32:03:e6:41:e6:ea:87:ae:3d:1c:
         2d:73:dd:09:18:ba:b6:ce:2c:d0:9a:d2:21:32:75:74:d2:09:
         b0:74:c4:a0:31:b2:f9:2b:8d:b4:68:60:0b:af:37:9b:ca:74:
         5e:70:41:81:2e:dc:f9:6a:71:44:85:51:dc:a1:31:1e:48:54:
         1c:86:a8:19:d0:d7:aa:0d:33:f3:45:91:5d:37:60:de:0a:7c:
         20:7b:32:32:bc:a5:f4:37:15:35:74:97:d3:c6:3e:d0:ca:fb:
         b0:a4:5b:85:f0:bb:7e:3e:4a:f5:8d:a8:ce:0d:0e:05:a4:d0:
         1c:fc:b5:e6:f5:38:bc:5f:81:9e:f6:d8:eb:91:30:f8:04:39:
         21:3f:32:ae:b0:8c:a8:1e:e2:be:89:da:80:3a:4f:8e:12:d6:
         56:79:f9:93:27:41:19:e2:ee:b6:a3:da:07:38:3e:21:6c:97:
         e0:51:7f:4b:5b:69:89:9b:21:90:2e:2d:b8:26:04:67:9f:29:
         5b:07:32:55:9b:28:91:cf:16:fa:c3:46:7e:9b:3a:94:67:63:
         dc:e8:d6:f6:40:b0:57:d9:e3:66:52:32:65:22:bc:0d:d8:a3:
         b3:c2:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org