Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ISu6LMHdNePBfcEzMLyZ-40Fgb4.roa
File:                     ISu6LMHdNePBfcEzMLyZ-40Fgb4.roa (raw, json)
Hash identifier:          XRXWxMQ9OTFFlJ/mccGPH9+UWNSOnpHt1fkL+aYksZg=
Subject key identifier:   21:2B:BA:2C:C1:DD:35:E3:C1:7D:C1:33:30:BC:99:FB:8D:05:81:BE
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0136
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ISu6LMHdNePBfcEzMLyZ-40Fgb4.roa
Signing time:             Sun 01 Oct 2023 01:30:51 +0000
ROA not before:           Sun 01 Oct 2023 01:30:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=212BBA2CC1DD35E3C17DC13330BC99FB8D0581BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:38:47:7c:ef:79:01:27:f5:47:94:70:5e:
                    98:45:f7:32:16:07:da:c4:1e:38:0e:e5:ea:31:d4:
                    70:f9:bf:3a:64:c5:d0:14:2a:41:98:b6:2d:1a:45:
                    ed:a3:c6:84:de:6c:7a:73:3b:e9:1d:86:7b:56:39:
                    40:4c:3b:77:9c:6d:47:2e:ac:eb:94:25:1b:19:77:
                    a6:a0:bf:46:0d:47:11:f1:4d:5d:0d:24:74:0d:fe:
                    a2:93:d6:00:b6:ed:b6:04:01:9a:29:bf:a5:69:b4:
                    1f:84:75:da:a1:cb:d3:15:b3:2e:cf:d6:7f:3a:42:
                    46:0a:43:7f:67:e9:56:1e:a3:23:f2:97:28:9c:cc:
                    39:66:1f:46:30:c2:c6:11:57:c6:58:5a:37:0d:53:
                    1a:e3:30:83:a1:70:66:d5:5e:11:b9:6e:ab:85:c5:
                    bc:be:3e:33:95:59:84:ce:15:4a:b4:87:4f:36:0b:
                    48:64:0b:4e:23:83:23:64:f4:c0:c3:87:1e:ed:5e:
                    70:68:f6:d4:70:89:d3:f9:eb:17:f7:e3:a6:57:cd:
                    da:9c:30:f8:08:a7:3a:74:64:cf:63:c4:8e:b9:a0:
                    0e:93:5d:21:02:9e:4b:b2:db:ee:4e:fe:de:60:c8:
                    e0:8f:a5:ec:fe:93:e1:06:28:02:80:ac:a2:e0:d6:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:BA:2C:C1:DD:35:E3:C1:7D:C1:33:30:BC:99:FB:8D:05:81:BE
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ISu6LMHdNePBfcEzMLyZ-40Fgb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:fe:81:e8:13:e8:8e:12:5c:7c:b2:59:06:cb:ae:aa:8a:
         f4:15:b2:9c:55:fa:49:e5:fb:b4:a7:94:0f:82:aa:99:68:a7:
         7f:08:6b:b4:2e:b2:91:ba:93:f8:5c:10:ca:bf:40:1a:fd:bf:
         74:2d:01:42:63:97:6a:6b:f8:29:8b:f7:04:de:94:ac:67:64:
         05:b5:17:1a:3a:1d:45:f6:c5:34:8d:c5:f4:55:75:7a:71:92:
         ac:a3:ed:f7:a9:fd:c5:fe:ca:e3:9f:5d:2a:21:87:e0:f0:9d:
         4d:10:81:07:2b:f0:2a:a4:f1:46:7c:1f:38:d6:83:36:f9:fb:
         0c:02:fe:45:2d:a4:e9:28:63:20:67:d0:03:30:6c:8c:79:09:
         9e:86:f6:73:c0:b8:50:ad:b3:6d:99:6a:b5:dc:1f:42:48:f1:
         b8:0c:10:98:53:99:ba:bf:0f:99:01:5c:c7:8f:80:af:6f:ed:
         58:87:b0:25:6d:62:9f:e5:57:66:8c:22:9d:1a:f9:96:76:8d:
         c7:20:58:e4:75:29:f4:f6:46:2a:bf:95:af:62:31:af:be:5a:
         7f:5a:61:56:62:cb:f2:ed:d9:9b:e4:e6:c7:1c:01:3a:e3:d8:
         22:60:68:45:f7:63:d8:23:53:67:0c:aa:7a:5c:1e:7c:9f:9c:
         61:b6:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org