Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CYkl3ndws8tePH_CcNa5NgA3oRE.roa
File:                     CYkl3ndws8tePH_CcNa5NgA3oRE.roa (raw, json)
Hash identifier:          P1Pao6GpHOcgnfS2qmyRl5MKX/EbXGjc9ytnuoeJaV4=
Subject key identifier:   09:89:25:DE:77:70:B3:CB:5E:3C:7F:C2:70:D6:B9:36:00:37:A1:11
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       80
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CYkl3ndws8tePH_CcNa5NgA3oRE.roa
Signing time:             Tue 18 Oct 2022 02:22:23 +0000
ROA not before:           Tue 18 Oct 2022 02:22:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:22:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=098925DE7770B3CB5E3C7FC270D6B9360037A111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:71:1e:84:d4:05:2b:e8:d7:26:ce:98:a0:f9:
                    71:81:52:7d:cf:f5:96:ab:52:d8:28:05:68:8b:fb:
                    13:9e:45:d6:e8:a8:a8:55:17:68:43:7a:96:76:8d:
                    d6:0d:67:06:46:56:e0:db:48:fc:f0:f8:f6:38:65:
                    1a:e1:9c:c2:af:21:ed:2f:83:96:26:b9:f0:4e:3b:
                    de:b6:20:d1:f6:37:b6:5c:80:a5:0d:06:9d:93:97:
                    38:e5:5f:de:8d:93:e6:a1:bb:db:13:aa:8a:76:b9:
                    06:f0:24:4e:e4:fa:6c:b9:3d:45:10:61:8a:5a:82:
                    f1:29:08:14:10:61:81:c3:04:81:48:b7:db:49:cb:
                    9d:78:bc:a2:57:64:1a:df:46:08:37:43:35:3b:24:
                    de:fa:24:ae:6a:09:a7:0c:54:d3:b7:21:c3:20:ec:
                    93:63:af:3b:f9:bd:d8:cb:25:f4:4d:c6:46:56:e9:
                    52:2e:e0:15:73:14:80:56:53:ef:ab:93:00:ff:06:
                    43:81:2d:ae:a9:6b:66:fd:39:58:42:f5:e9:d1:e1:
                    cb:80:7f:a2:26:72:04:be:c6:44:b4:41:20:0b:1b:
                    d6:f9:36:52:ea:bf:20:30:85:73:40:db:e9:ee:f9:
                    7a:e6:46:bf:18:fc:92:c2:cb:10:a2:57:6e:c0:87:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:89:25:DE:77:70:B3:CB:5E:3C:7F:C2:70:D6:B9:36:00:37:A1:11
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CYkl3ndws8tePH_CcNa5NgA3oRE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:51:c8:ed:f6:f1:03:97:f3:d4:47:a3:08:a1:aa:54:9a:
         b5:ed:3a:6d:2c:47:03:1f:0f:e5:8b:bf:5c:0f:b5:af:57:7e:
         46:6b:14:fc:44:3f:75:c7:e7:de:a0:be:70:99:35:d7:7e:f4:
         7c:2f:cf:ee:5a:39:69:62:ad:df:3c:17:60:b0:d9:10:92:b3:
         c5:f3:3d:a1:d4:81:1c:5f:5f:3e:06:e7:f8:41:4e:d1:1c:20:
         47:12:09:84:b0:94:73:3f:4c:a5:7a:64:b9:49:14:7d:36:63:
         0f:bd:9a:c2:a8:73:7a:62:93:3a:42:a8:21:b8:23:c1:51:4d:
         71:3a:fe:d4:66:14:02:81:3e:31:68:87:17:67:d5:e7:ce:fe:
         28:8c:8e:74:3a:ac:c8:42:5f:0c:d9:3d:4b:76:a2:54:d3:1c:
         c1:72:fb:ef:7d:5e:1e:fa:d0:18:b5:f8:67:4d:6e:a1:a0:71:
         86:73:aa:39:19:d0:d2:85:6f:dc:e7:4d:b9:bc:7a:03:71:b9:
         2c:49:c1:22:2f:9d:8f:72:46:55:77:5d:8f:7f:c2:be:bf:dd:
         ca:5b:68:27:93:fa:4c:68:36:ef:8b:eb:01:3a:1d:0f:f3:0a:
         6c:2a:a5:02:9b:cf:fa:18:cc:b7:41:5c:55:39:b8:78:a1:82:
         f7:54:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org