Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NxnEo_ZaY3ySUuUEkrgaHDFY6iM.roa
File:                     NxnEo_ZaY3ySUuUEkrgaHDFY6iM.roa (raw, json)
Hash identifier:          ctmknz7Hvv+eI1/FTDnrOzBgqSa+GS3imECnWpt+wTA=
Subject key identifier:   37:19:C4:A3:F6:5A:63:7C:92:52:E5:04:92:B8:1A:1C:31:58:EA:23
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0126
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NxnEo_ZaY3ySUuUEkrgaHDFY6iM.roa
Signing time:             Sun 01 Oct 2023 01:30:42 +0000
ROA not before:           Sun 01 Oct 2023 01:30:42 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:42 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3719C4A3F65A637C9252E50492B81A1C3158EA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:05:be:f7:b0:0b:7b:8a:af:aa:be:fd:cd:
                    5c:42:23:c3:87:a8:c3:73:dc:ea:80:cf:ec:86:57:
                    20:68:60:de:36:48:77:be:75:6d:ae:97:3e:6c:c5:
                    36:d9:a2:04:2c:8c:c1:da:67:09:fd:e1:a6:61:57:
                    5e:1e:11:78:14:8c:4c:41:41:77:56:3d:89:08:1c:
                    3f:7c:93:53:3b:04:33:c0:83:3e:3a:92:4e:c1:21:
                    38:40:d9:e7:b6:f3:4e:7c:1a:55:3d:ff:1a:a8:12:
                    2f:3e:62:64:b6:ba:e0:0b:f7:9a:bf:07:4b:08:60:
                    2c:24:e3:75:1d:1a:25:6d:d8:ce:fa:1d:6c:0e:92:
                    fd:90:39:0b:6f:e3:e5:4e:d7:5e:f3:b2:d6:5b:7e:
                    0f:0d:d4:5c:e4:49:cf:05:46:41:b6:5b:be:36:c5:
                    33:2d:ce:6e:fc:47:db:3b:6e:05:31:25:15:35:c2:
                    b6:8d:f5:ce:ff:89:28:4b:ea:db:99:09:77:e1:5f:
                    c0:ba:b8:7e:4d:99:40:03:1e:ca:1a:f1:28:e9:75:
                    c5:61:86:59:24:11:52:23:8d:16:5b:51:95:13:2e:
                    30:55:98:95:10:be:6b:48:4b:bf:57:27:d3:ec:66:
                    36:4f:b4:f4:81:3f:6d:df:ba:ee:56:11:43:7e:94:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:C4:A3:F6:5A:63:7C:92:52:E5:04:92:B8:1A:1C:31:58:EA:23
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NxnEo_ZaY3ySUuUEkrgaHDFY6iM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:10:fa:e5:ab:ea:37:0e:17:72:03:30:a2:3b:a5:80:70:
         e5:42:6d:d2:1c:6e:94:d5:69:0b:b5:99:50:a4:f0:38:59:81:
         d9:9d:bb:fd:24:f1:96:1f:f6:7c:bb:f3:67:54:40:4c:27:67:
         de:b5:7b:ce:94:32:93:e7:47:7e:90:bd:26:71:5b:86:03:6c:
         b6:97:1a:f7:74:8f:c6:29:53:80:7c:87:dc:af:3f:6c:1f:4f:
         a0:7d:5a:ac:f4:24:51:d4:80:98:84:1c:7e:66:c0:4f:1c:79:
         ed:44:68:e5:08:93:05:47:75:fd:d7:bd:2f:51:44:d0:15:ca:
         19:4c:91:01:ca:8e:e7:00:fb:64:03:df:f7:5e:b0:33:48:88:
         e4:68:b2:8b:4a:fd:44:88:c0:5d:9b:3a:f3:58:63:03:0b:ab:
         29:d7:46:f8:d4:07:56:9c:03:27:93:b6:c7:50:fd:ab:e0:17:
         5c:51:65:2d:2a:2a:aa:54:b2:88:53:d7:bc:7c:d8:dc:fb:a1:
         37:5a:47:fc:94:a5:95:80:68:98:c1:b9:9c:28:c0:82:90:63:
         e6:70:6d:db:be:9f:19:21:eb:6b:c3:47:b2:0a:47:15:6d:ef:
         f3:06:d3:4b:bf:fa:c0:90:4d:f7:b4:34:0a:fd:ea:58:21:52:
         3f:a6:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org