Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Cpixa3WG-57afYShSEmffZ5MV84.roa
File:                     Cpixa3WG-57afYShSEmffZ5MV84.roa (raw, json)
Hash identifier:          bzFwYxp/6tAIhWyOAd4kG1NuOK6bO1/xP+e1hyX4yDw=
Subject key identifier:   0A:98:B1:6B:75:86:FB:9E:DA:7D:84:A1:48:49:9F:7D:9E:4C:57:CE
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       2E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Cpixa3WG-57afYShSEmffZ5MV84.roa
Signing time:             Tue 11 Oct 2022 09:32:07 +0000
ROA not before:           Tue 11 Oct 2022 09:32:07 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.233.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:32:07 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=0A98B16B7586FB9EDA7D84A148499F7D9E4C57CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:98:fb:aa:5a:9f:1a:2c:3a:71:76:23:21:
                    73:0a:69:85:92:56:cc:fa:25:9d:34:b1:da:88:b2:
                    83:e8:32:46:7d:fd:ca:7e:06:49:76:67:4f:87:c5:
                    ed:fd:a5:35:e1:95:80:9e:e9:be:ab:76:24:33:e7:
                    fa:e2:e8:01:b0:63:79:0a:3c:8d:da:3f:29:2c:bc:
                    b7:59:36:b3:1d:ed:3a:a5:b8:dd:a1:af:51:e4:dc:
                    6a:f2:38:85:b6:21:b9:62:1d:fc:d0:28:94:6a:4e:
                    6c:a0:f3:98:2a:a0:7a:1c:0d:11:63:14:37:6e:4a:
                    68:9a:53:e5:f3:1e:6d:e9:65:23:89:9d:3c:37:86:
                    55:4d:d7:34:07:c9:65:2f:95:7f:ea:89:48:29:fd:
                    61:67:08:75:7e:26:07:76:a4:d9:cc:8b:14:c8:a1:
                    0f:62:75:79:e4:6f:e4:14:72:e2:4a:17:a3:45:66:
                    ff:06:74:da:4f:3b:ca:c2:50:ea:82:9e:e9:c5:de:
                    b9:38:e7:37:22:2e:ee:bf:db:4f:26:8f:20:af:d3:
                    de:41:e5:d6:e8:4e:b4:39:af:d6:e1:16:43:ea:d2:
                    0b:91:a4:b5:7d:71:ed:6e:7f:d7:26:1c:de:0b:71:
                    28:13:50:56:31:67:ea:07:d3:0e:8c:d8:d4:be:65:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:B1:6B:75:86:FB:9E:DA:7D:84:A1:48:49:9F:7D:9E:4C:57:CE
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Cpixa3WG-57afYShSEmffZ5MV84.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:73:81:0e:bf:38:44:f7:c5:25:55:9d:ac:bf:5a:3a:e2:36:
         83:88:12:da:f8:d7:11:54:9d:4d:7d:1b:0e:06:d0:a5:f5:a0:
         80:29:e5:fa:91:f7:1f:cb:2e:b3:cb:28:0a:2c:49:c2:cf:2a:
         35:37:0d:ff:b6:d1:18:2d:19:18:b4:32:de:4b:9e:98:4e:d7:
         73:46:77:97:28:e1:eb:f5:cd:e9:25:53:68:5a:d1:dc:bc:31:
         13:81:a4:10:90:52:ee:3e:0f:e2:8f:8d:c9:0c:19:ef:e3:6b:
         72:b8:0a:c4:50:8f:03:67:69:32:b8:21:8e:a6:17:2d:5b:2b:
         24:b8:03:c7:f8:cd:74:76:95:55:e5:aa:42:8f:ed:ff:7d:a1:
         7e:3d:7b:3c:46:9d:5c:a2:6a:b6:21:e0:5b:3f:4e:dc:61:b8:
         d9:38:c7:8f:0f:60:d5:22:7b:d1:f3:28:b8:7b:38:b1:fe:66:
         b0:34:c6:b9:58:e8:64:b7:46:ab:d4:15:4e:4f:a0:e6:1b:3a:
         24:cf:ff:6b:f3:5d:1f:05:27:dc:6a:b3:5a:83:41:b7:1c:96:
         b5:61:67:25:81:e4:3a:fa:6d:b6:4d:51:c4:25:4b:4d:6e:a0:
         59:68:08:08:15:81:bd:3a:4e:38:1b:cd:5b:e3:08:b0:21:a8:
         5f:cc:34:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org