Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/EnyZOt9gQzAs749eQpwGySPkJ_8.roa
File:                     EnyZOt9gQzAs749eQpwGySPkJ_8.roa (raw, json)
Hash identifier:          YtRwmiaC2ptV0F7rGZGzTEkK5amSLbDyqzlu15HETKg=
Subject key identifier:   12:7C:99:3A:DF:60:43:30:2C:EF:8F:5E:42:9C:06:C9:23:E4:27:FF
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       95
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/EnyZOt9gQzAs749eQpwGySPkJ_8.roa
Signing time:             Tue 18 Oct 2022 02:28:30 +0000
ROA not before:           Tue 18 Oct 2022 02:28:30 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.12.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:28:30 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=127C993ADF6043302CEF8F5E429C06C923E427FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:f0:84:83:e7:15:07:42:2a:66:55:09:ae:
                    bd:35:0f:5b:1e:82:ff:87:ca:f1:44:1d:19:1b:c8:
                    c9:1b:48:2e:98:46:94:c1:e6:4a:b4:78:cd:be:ed:
                    e0:0f:49:52:00:9c:8d:01:81:f3:d6:1a:b0:a2:9a:
                    38:b1:12:9b:76:2e:6f:21:95:9b:24:10:ec:6c:ee:
                    b2:b3:93:35:f3:b3:1d:3d:fc:2d:8d:ed:72:c5:96:
                    a1:17:fe:21:64:ba:1e:53:27:62:ec:cf:54:29:67:
                    6b:f8:2f:e0:f4:09:1c:c5:6a:20:25:d6:70:06:af:
                    a4:5c:1c:33:ab:ec:c7:92:6f:ed:d5:71:99:22:c1:
                    be:2b:46:55:ea:ed:68:55:7f:b4:ae:9b:2f:d9:63:
                    0e:51:65:ee:67:d3:4c:66:b4:61:17:56:ce:9f:02:
                    d8:6a:8d:f8:84:af:34:17:12:02:4d:3e:9f:86:6a:
                    e4:25:ac:5a:66:32:e5:68:62:1f:3a:e1:e1:3c:4d:
                    95:f8:87:ad:86:73:39:f1:7a:ad:61:7f:c8:ef:76:
                    37:7d:8e:06:6b:c4:e6:17:82:67:01:d5:9f:94:f6:
                    85:93:a8:bf:7d:75:22:cb:99:68:c9:b7:ef:f2:9f:
                    1f:39:85:4c:9c:fd:fc:a6:ec:17:12:f4:e1:ce:9a:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7C:99:3A:DF:60:43:30:2C:EF:8F:5E:42:9C:06:C9:23:E4:27:FF
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/EnyZOt9gQzAs749eQpwGySPkJ_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.12.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:40:db:5f:b6:a8:72:91:8d:d5:af:60:60:f8:ef:83:66:1b:
         ef:c7:97:4d:35:18:e6:f1:14:81:c5:1d:e9:73:f5:08:55:92:
         55:a8:40:3d:5b:a7:53:4c:a8:d2:0b:68:8e:76:d4:9b:f4:e2:
         25:be:5e:33:10:3b:f7:33:95:fe:d3:2b:c6:26:eb:50:24:4c:
         33:80:62:7a:37:51:da:f3:06:77:6c:bd:b4:07:5b:59:96:8d:
         e2:db:70:fc:45:d1:d3:e2:07:1f:dd:c4:a4:40:a7:1c:f0:24:
         96:b6:82:e0:63:6d:2e:d3:2f:c3:18:bb:12:a8:cb:5c:69:9b:
         11:8d:03:97:a2:18:3c:8d:9d:da:1a:c0:41:ac:7e:ab:b9:c1:
         1a:84:12:ee:29:09:d7:08:be:08:f2:04:fe:3a:e2:53:8c:44:
         cd:f6:64:27:17:46:26:e4:a2:9e:c9:11:67:ac:20:4d:40:1a:
         92:dd:9f:ca:c6:15:ad:e9:a4:02:da:cf:51:f2:99:7a:05:04:
         37:c3:09:70:88:12:5e:dd:85:55:4a:62:c3:5e:ca:cb:f9:34:
         68:3d:a9:c5:53:99:d0:cc:56:c2:90:78:99:97:f6:77:9f:d7:
         62:a1:c3:ca:db:92:24:1c:3b:7e:45:a6:53:f6:75:b9:65:27:
         be:75:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org