Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa
File:                     BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa (raw, json)
Hash identifier:          5PUtshULa4iiXyyoFPiFrjdZL0CJAlBDnNgRgfNqfrk=
Subject key identifier:   06:96:D1:12:E3:AD:6E:72:79:5C:C9:60:F6:F5:5E:4A:6A:DF:E1:15
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0145
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa
Signing time:             Sun 01 Oct 2023 01:33:20 +0000
ROA not before:           Sun 01 Oct 2023 01:33:20 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:20 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0696D112E3AD6E72795CC960F6F55E4A6ADFE115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:2c:ae:24:fa:34:72:fb:a7:4e:e7:58:13:
                    ab:03:b0:d3:eb:42:b0:9c:9d:f7:d6:5f:f6:4c:2c:
                    fb:d1:8e:09:de:12:05:df:2f:f6:d9:2f:d5:b9:4a:
                    fe:69:01:98:a1:82:9e:d2:ad:70:7d:21:91:88:89:
                    77:3f:1b:5c:65:98:67:94:8b:ff:22:bf:55:c7:9e:
                    02:0d:a0:7a:3a:4a:5f:70:d7:93:c9:e6:ca:43:35:
                    a7:c0:bd:7f:71:78:c9:dc:76:d0:0b:27:05:85:88:
                    1f:5d:ae:ac:9c:7d:bb:7e:17:1e:53:17:6e:95:d8:
                    bf:a6:1c:f2:a5:be:bb:d2:ed:68:99:33:77:3e:58:
                    c6:4b:03:ca:a3:33:75:d7:e2:f6:11:e7:33:34:99:
                    60:7e:c9:f6:45:d3:45:06:58:ab:7b:83:a9:bb:af:
                    14:da:39:c2:74:76:2b:19:59:83:4d:ff:22:e2:6f:
                    8c:36:75:3d:ee:e6:01:10:ad:45:8c:2b:bf:37:07:
                    69:fb:43:8b:db:f7:31:eb:a8:94:9e:e3:53:bb:dd:
                    27:bb:39:8e:5b:d3:50:29:0d:e0:ac:24:0e:16:e7:
                    a9:b4:97:99:0b:1e:93:7f:56:3c:e7:ed:8e:28:f2:
                    0b:de:c6:b0:11:44:fa:fc:61:99:84:ee:40:f0:86:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:D1:12:E3:AD:6E:72:79:5C:C9:60:F6:F5:5E:4A:6A:DF:E1:15
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BpbREuOtbnJ5XMlg9vVeSmrf4RU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:15:1e:f6:dc:67:c8:de:34:5b:59:cd:c8:e7:1e:c9:be:
         97:40:16:83:01:2d:95:db:89:e0:ac:14:48:28:e0:d4:f6:fd:
         49:da:9d:86:2d:b9:26:e3:92:e7:d4:9f:64:62:95:4f:55:34:
         fc:88:f7:0e:e3:4e:f3:68:52:65:d8:87:54:f1:92:2b:97:49:
         48:a0:fb:94:71:88:68:b3:52:fd:81:6d:6f:0c:d3:29:b7:e4:
         73:f2:14:0f:f6:51:9c:9a:24:4e:41:45:e8:77:db:db:00:e3:
         08:06:5a:80:89:03:50:b9:45:59:14:3c:43:5f:88:5c:00:22:
         08:2c:f3:cb:f9:0d:aa:3f:fb:71:38:92:5d:e9:f6:da:bf:da:
         ae:32:d6:ff:f9:9b:42:f0:ec:82:6c:5e:fe:b4:b5:ac:4f:f8:
         c3:6b:a2:41:13:0a:d5:68:4f:42:7b:75:3a:3d:22:ad:dc:fd:
         46:62:85:d3:62:3b:30:7f:15:70:5b:ed:27:c1:05:08:60:5b:
         c7:28:73:84:21:14:d2:ed:f3:2d:9a:5b:26:c4:3d:43:62:55:
         d2:7f:cb:6d:03:1f:e9:a5:17:35:bd:78:e7:23:06:23:58:74:
         3c:64:68:1c:63:c2:b0:2c:bf:12:b2:ff:f7:04:20:c4:d5:5e:
         bc:2f:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org