Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/8gi234OUzId1Pf_hZhegVn-BS7w.roa
File:                     8gi234OUzId1Pf_hZhegVn-BS7w.roa (raw, json)
Hash identifier:          Pd30OSz7g+bPwsFUwAmMYCgiDwIDV9CD0lw+gBPba9s=
Subject key identifier:   F2:08:B6:DF:83:94:CC:87:75:3D:FF:E1:66:17:A0:56:7F:81:4B:BC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0167
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/8gi234OUzId1Pf_hZhegVn-BS7w.roa
Signing time:             Sun 01 Oct 2023 01:35:50 +0000
ROA not before:           Sun 01 Oct 2023 01:35:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.1.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F208B6DF8394CC87753DFFE16617A0567F814BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:cc:1f:86:ef:59:e9:00:e0:9f:47:b8:a4:
                    b5:96:45:08:b8:b4:b6:50:ad:c5:91:d0:e5:57:9f:
                    6a:9f:fd:6a:de:e4:68:f4:9a:48:85:05:c5:5b:07:
                    67:0c:94:c4:90:c5:cb:a5:85:09:b4:72:a7:93:f7:
                    fa:22:7a:d5:fa:eb:91:94:76:05:36:9a:f3:af:e9:
                    5b:13:21:83:ef:58:94:84:0c:47:b4:00:1b:de:42:
                    1b:1c:ed:b8:07:da:9d:64:14:16:33:1a:77:f6:1f:
                    2a:f8:d6:b7:74:a6:78:e4:94:db:aa:f7:0f:87:d5:
                    10:46:57:2e:5d:17:c9:3d:82:ac:6f:da:cc:aa:98:
                    73:f4:3a:d5:24:03:a9:77:d1:7b:37:c3:3a:74:a3:
                    17:22:1e:ae:71:29:d1:53:9a:8c:8e:af:83:80:51:
                    a8:f7:42:8b:65:46:e5:37:94:7f:aa:50:eb:e6:d4:
                    7f:67:da:f7:03:8f:63:a1:bf:85:1c:45:6d:d4:73:
                    58:89:96:30:f8:94:86:de:35:aa:01:60:d4:96:2f:
                    8c:29:80:d0:0f:17:4e:ad:34:78:f1:54:a7:ad:c5:
                    56:f9:68:70:82:5c:7e:a8:9a:0a:c4:9c:00:b7:48:
                    5e:c3:1e:14:8b:54:58:16:50:c2:89:b9:02:24:30:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:08:B6:DF:83:94:CC:87:75:3D:FF:E1:66:17:A0:56:7F:81:4B:BC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/8gi234OUzId1Pf_hZhegVn-BS7w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:21:ae:88:23:da:d7:b6:6a:69:8e:01:60:04:a1:f0:39:24:
         4f:89:db:62:92:49:90:70:11:7e:a6:71:00:18:1c:04:b5:02:
         c4:f1:02:2a:94:bd:1e:66:c4:a1:83:f5:f6:e1:8d:9f:62:d4:
         44:26:eb:b6:b5:12:9a:ed:37:7c:25:7b:34:42:b6:65:50:80:
         93:b4:6c:e7:e3:6f:58:53:42:d1:dc:41:e3:29:44:b6:2c:2d:
         3c:6a:b0:77:37:e9:ce:9a:5f:1e:e8:e0:bf:77:af:84:60:3e:
         12:52:86:f1:f4:b2:d3:1c:f4:6b:a3:0e:91:58:d2:24:e3:35:
         13:3b:d4:c5:65:8d:8d:50:4d:c0:4e:30:5b:af:22:33:e2:97:
         24:06:86:2a:cc:04:af:a3:2c:7f:f4:fd:91:09:9b:3c:89:ea:
         cb:35:49:ce:24:85:1e:c6:c8:4a:fd:39:b0:3f:c4:e9:5d:b5:
         d4:f7:9b:e6:86:db:c6:06:20:49:c3:27:8f:e0:f9:fe:d8:77:
         e1:1e:c5:59:ed:75:25:2a:10:d2:45:7c:d4:ed:d3:55:88:88:
         cb:da:50:0a:fa:72:8c:82:b6:81:48:f7:80:b8:39:59:52:62:
         16:f9:36:0d:3c:8c:5c:f8:6e:36:ad:5e:17:cd:b8:96:43:bb:
         44:72:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org