Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9K04zyfkfSctiJteMraufRPG1ew.roa
File:                     9K04zyfkfSctiJteMraufRPG1ew.roa (raw, json)
Hash identifier:          s4gT5ZCfqKD1+BpYav/B+rUsOtGHa44zSp/zuiNoCuY=
Subject key identifier:   F4:AD:38:CF:27:E4:7D:27:2D:88:9B:5E:32:B6:AE:7D:13:C6:D5:EC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       62
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9K04zyfkfSctiJteMraufRPG1ew.roa
Signing time:             Tue 18 Oct 2022 02:14:11 +0000
ROA not before:           Tue 18 Oct 2022 02:14:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:14:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F4AD38CF27E47D272D889B5E32B6AE7D13C6D5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:15:2c:f4:3c:da:dd:12:06:7b:d6:7d:c2:
                    84:9f:dc:ff:50:89:6e:9b:39:36:ff:b1:91:cc:d8:
                    be:9c:7c:17:d4:1f:fb:34:65:91:4d:36:b9:80:94:
                    8e:f1:74:25:a0:ad:0d:8c:63:d9:9d:71:39:3a:9b:
                    63:7b:cd:f7:79:c0:94:90:25:33:1d:1e:fe:f6:9e:
                    cc:3a:e8:42:17:5e:b8:b8:49:92:17:9f:64:29:5f:
                    22:da:f0:ac:3c:07:73:8d:ea:fc:1a:e2:89:07:7f:
                    c3:4d:4d:d1:65:61:76:a5:f2:38:63:06:4c:c2:58:
                    a0:a4:c0:d0:2f:db:06:25:30:c9:d5:19:0c:35:48:
                    a9:42:08:e1:13:37:0e:fc:23:e1:c6:25:c9:b8:da:
                    6b:12:26:45:0a:aa:7b:db:8f:ed:94:f1:23:24:15:
                    8b:b3:a4:33:ba:6a:f2:f6:e4:6d:22:c8:6c:0e:e8:
                    58:0c:47:ec:7b:be:85:6a:26:bb:21:5b:54:e8:4e:
                    1e:ea:98:90:40:7d:fe:3b:f9:c6:29:b4:a3:c3:11:
                    ab:63:b7:57:ee:21:2e:fb:2c:87:58:6c:cd:7f:17:
                    c6:82:73:60:71:60:75:b3:e5:d9:3e:48:b5:ba:49:
                    75:e1:86:b0:49:1f:ef:c2:a9:a1:3e:65:17:02:38:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AD:38:CF:27:E4:7D:27:2D:88:9B:5E:32:B6:AE:7D:13:C6:D5:EC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9K04zyfkfSctiJteMraufRPG1ew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:3c:af:2b:45:18:22:f5:32:95:56:71:cb:f8:9c:b2:f0:
         12:99:42:65:07:c3:2e:9c:c3:ba:da:c5:6a:60:c7:5a:46:6a:
         0a:31:47:63:82:fe:bc:91:98:ff:73:3e:5a:83:d7:a9:47:c3:
         0b:49:28:5d:0f:4a:19:2b:52:04:e5:cf:b7:6d:e0:24:f8:0f:
         42:3a:88:ac:b2:47:1c:45:73:58:2f:89:05:4c:41:6a:a1:61:
         ae:bc:86:27:1f:b5:7b:7a:34:29:f6:64:e1:38:3c:f5:8d:ff:
         30:5f:ac:f1:4a:29:d0:61:03:58:d6:28:34:e2:b1:a2:d9:ad:
         53:fb:47:a1:01:90:c3:9a:71:1f:e6:6a:ef:bc:4e:d5:be:23:
         5c:d6:cb:b3:85:6b:fc:4e:fe:d0:59:9f:f8:f6:52:0a:d1:d5:
         cc:1b:c8:23:73:05:8b:da:28:2a:18:ca:f0:95:41:a8:ca:bc:
         99:a6:55:36:a3:44:e5:0c:e6:ad:54:c3:b8:64:b2:d5:e2:5d:
         19:a2:b3:35:e1:e6:9b:b8:ee:d6:cb:ab:39:1d:e0:c3:05:ba:
         2e:b9:29:d2:04:ae:25:78:15:63:45:1d:b4:6f:9c:c1:97:b9:
         b9:72:fa:63:0a:48:bf:7b:dd:e6:90:41:ea:20:15:cf:4c:3f:
         ca:42:ea:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org