Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9si8g7Pfjxnixybbdkqa26Lz1X4.roa
File:                     9si8g7Pfjxnixybbdkqa26Lz1X4.roa (raw, json)
Hash identifier:          Ueo5HkNvz0ZXuNeLk/c/Qll8mNRDFcf+AlCGB+skP1w=
Subject key identifier:   F6:C8:BC:83:B3:DF:8F:19:E2:C7:26:DB:76:4A:9A:DB:A2:F3:D5:7E
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       9B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9si8g7Pfjxnixybbdkqa26Lz1X4.roa
Signing time:             Tue 18 Oct 2022 02:30:23 +0000
ROA not before:           Tue 18 Oct 2022 02:30:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:30:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F6C8BC83B3DF8F19E2C726DB764A9ADBA2F3D57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:b1:88:cb:ee:7e:4d:5e:a3:6a:eb:ae:02:
                    77:0e:8e:fa:92:6a:2b:c2:8f:03:fb:c7:bd:05:6b:
                    a0:4e:ba:a1:39:c3:e6:3c:1c:f6:a6:b6:5c:76:38:
                    db:fe:ff:86:fb:0f:ef:2c:56:fc:75:b1:66:84:5c:
                    d7:62:f8:70:1c:1c:1b:de:be:56:6a:aa:3d:34:63:
                    8a:46:f8:89:9b:22:8b:d8:4f:94:62:58:a4:45:e3:
                    db:78:ac:78:df:41:ed:b1:16:3a:32:d1:54:98:98:
                    b8:02:12:a3:dc:4e:fe:94:f7:5c:c2:92:83:98:7e:
                    bc:48:6d:b6:29:6c:56:df:7f:09:c8:56:ae:dd:c9:
                    a8:3e:39:69:4a:72:57:a9:c2:5e:32:47:be:43:8c:
                    24:17:1a:b2:d4:ae:03:72:90:75:12:9b:e8:fa:e3:
                    5f:ea:16:87:85:d5:4b:38:e7:cb:d2:96:b8:c9:6e:
                    2b:fb:6b:b9:d5:b6:84:b6:62:c7:51:75:24:91:5f:
                    c0:f8:a5:84:ae:22:94:cb:c4:bf:69:e0:92:ea:0d:
                    de:2b:c0:c0:30:9b:7f:c9:99:1b:a1:0b:40:e2:78:
                    9d:93:b5:59:49:4e:c1:0e:83:15:fd:5d:17:e5:e6:
                    92:35:ce:dd:c6:13:ea:9e:5d:81:9a:f5:5c:b0:fb:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:BC:83:B3:DF:8F:19:E2:C7:26:DB:76:4A:9A:DB:A2:F3:D5:7E
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9si8g7Pfjxnixybbdkqa26Lz1X4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:88:6e:85:82:fd:4d:3d:03:db:5a:77:f8:c7:03:07:91:1f:
         63:cf:a4:9e:8d:19:25:37:d2:4e:57:5f:8a:d0:3d:11:8d:11:
         d5:1a:ee:40:1f:3d:76:c7:8c:8e:c3:f7:b8:67:b3:34:e3:d7:
         a5:4c:ae:ae:35:11:b9:06:13:98:29:78:47:66:68:3f:3f:e5:
         14:fc:11:5e:bc:d5:4a:6d:05:7a:cb:5c:fa:d5:0b:8b:e6:d2:
         af:0b:46:b7:c8:19:4c:94:43:9a:94:ac:72:4a:56:3f:6c:90:
         bd:10:4a:40:44:cc:31:f3:b8:5a:4f:28:36:df:68:70:30:6f:
         80:a9:3a:a0:f4:c6:ea:1e:9e:c7:be:f6:44:fc:2e:a1:f1:54:
         ba:2f:8f:a7:a8:b6:5d:35:04:0d:03:50:ff:20:4d:18:5f:a8:
         f1:26:12:90:44:b3:11:b4:a8:4c:2a:2e:f2:3c:03:07:2d:fb:
         79:9e:6f:2c:13:bb:25:03:44:d2:b3:a3:c3:38:52:88:31:e3:
         54:c5:df:40:be:a2:58:a4:53:45:2f:f5:7e:73:6a:26:19:9a:
         81:f2:48:19:1e:97:7c:6d:30:44:cf:f2:f1:9e:cc:1e:a3:f7:
         b1:1e:e3:1d:a4:d2:c0:3c:12:43:fd:c5:93:45:d1:12:47:8c:
         b2:b5:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org