Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Luy4g8iyd0CVfoa3doXuUzC4HdE.roa
File:                     Luy4g8iyd0CVfoa3doXuUzC4HdE.roa (raw, json)
Hash identifier:          QN7DjuktzRSWS3nmzdCfbLkB6N5LmhZPlTns/4UfLRI=
Subject key identifier:   2E:EC:B8:83:C8:B2:77:40:95:7E:86:B7:76:85:EE:53:30:B8:1D:D1
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       35
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Luy4g8iyd0CVfoa3doXuUzC4HdE.roa
Signing time:             Tue 11 Oct 2022 09:34:19 +0000
ROA not before:           Tue 11 Oct 2022 09:34:19 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.143.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:34:19 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=2EECB883C8B27740957E86B77685EE5330B81DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:57:de:da:b5:22:27:79:e4:3c:d6:d3:37:
                    e4:1b:5b:2b:a6:76:1a:31:6c:1c:36:40:3f:b8:38:
                    6a:15:f5:3c:07:04:07:6a:1f:25:b0:27:a2:29:40:
                    a7:63:77:b5:9c:c2:e1:2f:82:39:70:7a:5b:68:90:
                    8e:f5:59:da:08:2e:87:f6:42:1b:78:d1:10:46:5f:
                    b2:47:d3:6d:b4:e2:03:47:88:b2:9f:15:e9:a2:e4:
                    35:91:0e:f9:9a:4f:23:78:1c:92:d4:3d:5c:a6:1c:
                    97:41:7c:8f:6d:da:9b:56:23:0e:1c:09:6c:b3:65:
                    c0:e7:53:f5:26:1d:0f:c6:0f:f7:c4:26:2c:4d:41:
                    93:a3:30:00:5d:16:f4:c0:1d:62:0e:98:27:34:51:
                    67:2a:54:2c:53:d2:e0:a2:f5:f4:47:98:69:08:46:
                    8d:39:04:22:78:7f:02:bc:7e:8c:c5:1c:35:ba:de:
                    6f:ec:05:f4:84:28:a8:24:e0:10:f5:eb:15:4c:eb:
                    f2:72:4d:ea:b5:33:0e:58:8b:69:ce:a7:46:19:43:
                    67:86:ee:3a:66:fe:fe:9b:fb:8f:9b:6b:85:42:a0:
                    76:8a:16:38:37:9a:75:86:f7:9c:f9:56:8c:c2:36:
                    c9:dc:8b:a8:24:05:cf:88:86:2c:f6:09:28:41:25:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EC:B8:83:C8:B2:77:40:95:7E:86:B7:76:85:EE:53:30:B8:1D:D1
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Luy4g8iyd0CVfoa3doXuUzC4HdE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:28:5a:3c:39:a7:c0:b7:ff:ad:25:55:24:bb:e0:91:d4:
         e9:64:ba:7f:ad:28:63:c9:cb:20:d7:10:96:47:8c:b1:b1:2b:
         6f:0f:fb:ef:e7:bc:fc:4d:93:71:f4:90:8e:79:f5:bb:cd:14:
         e5:8b:bb:d9:fd:15:aa:44:6a:32:2c:81:4b:96:86:9d:76:5e:
         f0:7a:20:c0:d7:85:8e:8f:14:c4:0e:c4:c1:bc:24:31:0f:7b:
         46:1c:16:81:ca:1a:7c:bc:d1:25:77:25:b9:ee:56:da:1c:a3:
         a7:4f:de:f7:9e:06:60:06:a1:af:db:f7:d1:67:ce:ea:7a:a1:
         13:f5:03:af:6b:56:93:28:3f:f9:d9:b2:ff:cb:93:46:8a:17:
         12:4e:da:ef:e5:25:ad:52:4c:7b:00:a3:aa:ff:d8:04:95:5f:
         3b:0c:ea:7d:3c:0d:7e:91:04:31:c2:e5:f1:b3:cd:e8:cc:49:
         c5:ff:1c:fd:c8:72:76:30:33:82:3b:38:32:1e:fc:70:22:f5:
         d2:e1:f5:63:5d:80:d6:07:7a:11:a1:fd:ca:b2:89:3f:19:ae:
         63:33:dd:23:5d:b4:0d:87:93:3c:b7:81:9f:46:d7:95:5f:bd:
         4d:ea:0f:5e:a8:95:b2:ba:e8:63:a1:0e:3c:4e:96:c4:f1:7a:
         58:0d:48:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org