Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LIaneHWkCaG0u9hkfdDm-sKP1XM.roa
File:                     LIaneHWkCaG0u9hkfdDm-sKP1XM.roa (raw, json)
Hash identifier:          MIE+ZeZJkcEpHmIbsLce9SgaXxVL4VCukz5HDmhZ8Lk=
Subject key identifier:   2C:86:A7:78:75:A4:09:A1:B4:BB:D8:64:7D:D0:E6:FA:C2:8F:D5:73
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       011A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LIaneHWkCaG0u9hkfdDm-sKP1XM.roa
Signing time:             Sun 01 Oct 2023 01:30:38 +0000
ROA not before:           Sun 01 Oct 2023 01:30:38 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:38 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2C86A77875A409A1B4BBD8647DD0E6FAC28FD573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:fd:90:e7:d2:24:35:ab:5c:51:52:24:28:
                    ce:6f:79:f3:cf:be:f7:ee:15:57:af:54:43:71:97:
                    94:0b:c8:99:5e:b7:27:4d:90:df:c0:eb:0f:1d:2a:
                    62:6c:61:83:45:8f:c9:21:c4:3e:25:28:e0:6b:d2:
                    d6:1d:40:64:05:7f:0e:fc:be:bb:fb:ce:87:7e:39:
                    a7:89:ce:c8:ea:8b:fc:98:8e:d4:50:6f:f8:a3:86:
                    93:99:2a:b3:a9:15:1e:02:e1:8b:3c:df:4b:cd:b5:
                    95:0f:c6:c8:42:ec:eb:e7:f0:bd:50:6d:8e:86:bc:
                    9f:78:2f:5c:b9:38:00:c9:f5:fc:12:7b:6b:66:88:
                    f8:da:7d:e7:cf:6c:a5:d7:bd:d6:39:6b:33:59:eb:
                    81:76:5e:19:cb:73:12:cd:a4:3f:d1:2e:65:f0:66:
                    16:e3:a5:b9:da:de:85:c6:2b:6d:f8:c1:87:64:3a:
                    33:68:08:7a:da:4a:82:34:90:2b:9c:f8:48:90:76:
                    57:0f:49:f2:18:f6:e7:5a:04:42:b1:71:0e:fc:b7:
                    91:2e:7f:3e:4c:29:dc:09:36:96:2a:8b:2b:f3:92:
                    21:6f:6b:e4:70:a9:7e:11:6b:de:f0:56:a5:e3:d0:
                    5f:97:66:7b:3f:41:01:99:48:cc:2e:1f:22:45:83:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:86:A7:78:75:A4:09:A1:B4:BB:D8:64:7D:D0:E6:FA:C2:8F:D5:73
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LIaneHWkCaG0u9hkfdDm-sKP1XM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:bd:cb:c5:72:42:a8:eb:0e:a6:7f:33:3f:cc:85:7b:7a:
         14:9e:71:7a:e3:fc:08:e2:92:cb:cc:07:09:5f:89:dc:e1:29:
         34:4d:74:14:8d:d5:87:be:2b:96:1d:79:41:eb:70:af:c3:12:
         c2:b0:b4:2d:f7:26:1f:1f:20:84:45:22:96:6f:54:84:8f:3f:
         28:d1:2c:0a:a4:f1:bd:8f:d2:da:3b:60:76:a7:04:7e:45:56:
         0f:b2:58:56:30:2d:01:6c:aa:f3:5a:60:4b:57:1b:e4:a7:b7:
         05:63:88:cd:72:27:e1:ef:2e:f6:ef:26:61:ac:1a:8d:af:19:
         85:35:2a:99:d6:b4:df:f2:a4:06:61:d9:1e:43:e2:3e:15:1d:
         69:71:4a:65:ab:f5:8a:5f:12:95:41:17:61:d8:63:f7:86:53:
         90:28:39:77:f1:1b:43:58:1d:bb:cc:1d:55:a2:f3:e9:71:0a:
         67:35:d5:91:37:45:71:8a:05:55:95:cd:0a:7c:4a:a1:2b:0a:
         2e:ed:48:17:ae:0b:17:01:ce:9a:de:10:40:87:4c:3d:10:1a:
         ce:11:2d:81:35:09:59:13:9e:88:6d:8f:6e:84:01:00:c6:a9:
         47:19:e0:45:2d:6a:7a:65:e3:59:84:53:2d:eb:ec:7a:c3:b9:
         d8:b6:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org