Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/DIUTuhwZ6Slvf6hgJdmD0mHgFmI.roa
File:                     DIUTuhwZ6Slvf6hgJdmD0mHgFmI.roa (raw, json)
Hash identifier:          4wY5lQKsnOoVZluhWhXQezYtZjDZ220lYfjqUfVnL+s=
Subject key identifier:   0C:85:13:BA:1C:19:E9:29:6F:7F:A8:60:25:D9:83:D2:61:E0:16:62
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       8D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/DIUTuhwZ6Slvf6hgJdmD0mHgFmI.roa
Signing time:             Tue 18 Oct 2022 02:26:19 +0000
ROA not before:           Tue 18 Oct 2022 02:26:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:26:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0C8513BA1C19E9296F7FA86025D983D261E01662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:79:8b:ca:9f:05:01:03:1a:96:8f:48:07:
                    13:1a:a1:0d:99:f0:d1:f3:70:e4:29:76:eb:88:ef:
                    c4:75:b6:57:8b:ff:f4:06:4a:48:1b:2f:50:54:57:
                    5d:33:cd:26:4a:5b:2b:73:41:08:bb:75:b0:4d:d8:
                    76:a2:99:89:84:82:87:a0:98:88:7d:21:66:51:72:
                    9e:b1:f6:4f:ad:6d:88:e7:5f:64:0d:7e:51:35:4b:
                    71:c4:72:c5:cc:74:bb:28:b6:0a:6a:34:9b:9c:2b:
                    04:9f:c2:22:45:7f:2b:90:4d:3f:c9:ff:d4:51:c7:
                    6f:f8:08:d7:73:eb:aa:2f:35:79:dc:b2:70:58:97:
                    f6:ab:95:f9:98:9a:4b:ad:ad:a0:e9:d6:f3:b6:f5:
                    8a:c7:0b:7f:e1:5e:27:ad:83:1b:1b:14:69:64:a5:
                    16:f1:9c:fe:16:1e:b5:64:7d:e3:d4:ec:71:b0:47:
                    7f:34:5b:ef:28:28:06:f9:bc:16:c8:c9:d4:54:07:
                    36:aa:1c:41:aa:40:70:b4:ec:fb:34:22:45:94:65:
                    61:2f:e9:c1:d8:c5:e6:02:1a:78:28:d8:37:8c:09:
                    c0:68:57:aa:d9:4f:a4:bd:ce:b4:a6:50:f7:89:8a:
                    c6:26:9f:ce:22:fa:9a:d3:08:b8:05:bf:27:ec:26:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:13:BA:1C:19:E9:29:6F:7F:A8:60:25:D9:83:D2:61:E0:16:62
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/DIUTuhwZ6Slvf6hgJdmD0mHgFmI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d1:15:04:fd:94:4c:38:80:68:0a:fc:ce:63:bb:f2:b2:a7:
         5f:a5:da:56:f3:2e:53:07:e7:67:55:0d:ec:44:15:9e:91:b2:
         6a:d8:be:45:5b:72:07:5c:1b:ce:20:7d:e5:00:56:34:f5:5e:
         bd:ee:b8:f2:63:e0:98:64:a7:c6:4c:a4:91:d1:cc:f1:fe:8b:
         cf:32:fb:18:6c:4e:b3:65:a1:0e:05:1e:45:d2:14:b7:57:b6:
         e7:40:a6:0d:30:aa:2c:56:db:2e:05:73:48:62:ab:e7:41:f4:
         63:4c:a6:88:9e:1a:b0:cf:9c:f5:63:ce:cd:89:fd:7e:95:6f:
         1e:06:fd:01:ab:20:25:9a:f0:50:58:b2:a6:40:16:d3:27:44:
         22:e3:05:1e:9f:96:5a:9b:99:70:15:77:94:3f:3b:79:5f:dd:
         b9:ad:de:4e:76:cb:15:c4:e4:63:2e:9b:8e:9a:3d:bf:7d:f8:
         33:48:36:d4:9c:bf:f3:f1:a3:4c:4a:32:64:fe:ac:6a:9d:7f:
         6e:a6:ae:7e:7e:6a:28:79:df:d8:ea:b2:74:66:b1:4f:8c:1c:
         31:28:df:97:9c:f8:fb:cc:83:c8:2a:6e:a3:64:28:58:dc:87:
         4d:b4:bf:f3:b8:7f:61:58:ce:ca:65:f0:41:e3:bc:e9:d7:2d:
         c8:3b:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org