Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LpG1iwwsFl_5oArEFFNEBvOmPKE.roa
File:                     LpG1iwwsFl_5oArEFFNEBvOmPKE.roa (raw, json)
Hash identifier:          rNCx4fHDD5AQu8fpkPOUDG3AvbTWWa3oUmCeoSaLJH0=
Subject key identifier:   2E:91:B5:8B:0C:2C:16:5F:F9:A0:0A:C4:14:53:44:06:F3:A6:3C:A1
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       41
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LpG1iwwsFl_5oArEFFNEBvOmPKE.roa
Signing time:             Tue 11 Oct 2022 09:38:10 +0000
ROA not before:           Tue 11 Oct 2022 09:38:10 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.249.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:38:10 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=2E91B58B0C2C165FF9A00AC414534406F3A63CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:35:0f:17:8c:83:6d:e6:cb:7d:cb:c5:9a:
                    bc:c6:fc:da:3d:7c:8a:ee:e2:79:f7:fd:67:6d:23:
                    4e:6d:c4:75:b4:2d:0c:cb:34:bb:ad:e9:26:d8:7b:
                    ec:40:44:27:27:12:3e:92:67:87:03:3b:eb:4f:6f:
                    aa:f3:cb:18:04:29:80:d5:a0:28:d2:97:8f:34:50:
                    3f:4a:52:a6:e8:5c:88:80:a4:e5:f7:d7:82:2e:ef:
                    0b:bc:04:96:d8:ab:61:8d:54:ba:7b:44:b6:4a:b6:
                    c3:b4:9a:42:bf:0a:0e:c3:5b:ff:c8:ae:01:d1:14:
                    d2:78:f2:06:c0:9a:58:12:21:da:52:06:2a:0d:66:
                    0c:57:5f:59:b9:72:67:56:bc:c6:51:9d:15:9e:da:
                    68:1a:a0:4b:42:80:51:2f:2e:44:de:94:19:d6:b5:
                    93:b4:d3:74:63:da:85:af:d2:d4:72:a1:72:ff:a9:
                    09:1a:6a:ff:68:aa:a6:87:4c:70:b5:78:fc:75:80:
                    d8:22:4a:a8:78:38:14:80:96:1b:72:c4:ee:1d:e0:
                    78:de:e8:51:a4:ae:6d:3b:7e:86:79:88:74:88:33:
                    f5:fa:f1:22:35:b0:17:e3:b9:43:91:78:ab:be:6b:
                    73:ad:c3:42:63:f4:b9:37:91:4d:c2:7a:04:46:7f:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:B5:8B:0C:2C:16:5F:F9:A0:0A:C4:14:53:44:06:F3:A6:3C:A1
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LpG1iwwsFl_5oArEFFNEBvOmPKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:72:e4:ed:15:51:52:47:a3:3d:80:a8:08:73:fd:1b:92:
         5c:7f:81:d1:dc:b8:71:09:d2:d8:6f:4c:a1:11:0b:25:92:12:
         b5:85:db:e3:e1:bc:9d:00:9d:e7:d3:89:36:be:60:2b:04:fd:
         69:1a:46:a3:05:0a:6b:fd:8d:fa:73:c1:c3:6e:97:a0:ec:f1:
         af:dc:01:4f:b8:f5:69:9d:2e:d3:a6:a9:fc:de:02:17:e8:53:
         e8:94:d3:56:80:8b:22:95:9a:97:41:3a:28:31:aa:1b:40:4e:
         38:f2:48:d3:1f:bb:e9:5e:b0:01:dc:e6:e9:f6:fa:a8:be:b1:
         18:12:b0:20:96:09:e9:08:8f:b3:b0:f1:15:7a:c9:7b:a8:0c:
         1e:ee:dc:c4:80:10:ec:6e:be:64:9f:f7:27:61:9b:c0:c6:eb:
         62:ce:57:dd:47:31:dc:2d:9d:bf:0e:74:f8:f8:4d:a2:9d:10:
         34:21:73:68:fb:50:62:11:da:a5:56:69:fb:e0:9b:8e:6f:67:
         97:58:a5:6b:1c:d7:c0:2e:a5:ce:7b:d9:5b:6c:24:2c:86:d3:
         47:76:02:41:0a:54:80:59:9f:c2:0c:63:1a:21:4e:0c:3c:eb:
         a6:96:e2:36:7f:0b:2d:34:18:be:c5:83:34:db:71:dd:0a:5d:
         28:19:47:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org