Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Oie28WrZ030TF3wukm9Rxy5QpNU.roa
File:                     Oie28WrZ030TF3wukm9Rxy5QpNU.roa (raw, json)
Hash identifier:          sM6R/Yu0WZNi6McI5aKPki/eEm8XEJw/g09MaArDU6c=
Subject key identifier:   3A:27:B6:F1:6A:D9:D3:7D:13:17:7C:2E:92:6F:51:C7:2E:50:A4:D5
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       5E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Oie28WrZ030TF3wukm9Rxy5QpNU.roa
Signing time:             Tue 11 Oct 2022 10:00:22 +0000
ROA not before:           Tue 11 Oct 2022 10:00:22 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.143.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 10:00:22 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=3A27B6F16AD9D37D13177C2E926F51C72E50A4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:58:69:b8:8d:96:ee:38:f9:2d:65:e7:44:
                    27:1e:1f:a7:f5:f4:cf:c6:ae:5e:65:bf:7d:06:ee:
                    29:d4:95:6c:75:a3:4c:c3:e9:95:73:1b:af:3a:93:
                    d8:76:fa:a3:61:e7:77:06:4a:ba:00:10:29:d0:9c:
                    3b:56:83:72:0c:0c:fa:14:40:aa:42:2b:c7:83:28:
                    48:d3:48:96:a8:b5:53:39:91:2b:6c:a2:af:bf:4c:
                    94:e7:20:8f:e7:bc:d6:fc:42:b3:cc:4c:1c:c2:3c:
                    1d:9f:0b:41:15:18:82:e7:bb:9a:ba:71:71:2b:b9:
                    3d:85:7a:c1:73:f6:5d:03:88:e4:b3:a2:92:ea:53:
                    c9:20:cf:f1:48:fb:53:e0:64:8e:04:ba:1f:e5:b1:
                    61:c1:34:d2:a3:30:7b:de:77:79:c9:03:5e:ff:58:
                    29:f7:8b:d3:3f:aa:08:de:92:be:00:6e:66:6d:2e:
                    6d:f3:cb:04:50:c9:b0:cb:85:b9:25:95:4c:84:7f:
                    ed:b3:4c:45:0a:19:43:e5:60:39:4e:13:ca:40:2a:
                    e9:68:86:01:0c:61:dc:a3:04:ba:5c:eb:90:cb:23:
                    e8:3a:9e:8a:30:2f:84:94:83:ae:d8:9b:ec:7d:3c:
                    94:95:f5:1a:a8:5a:1a:c7:83:09:34:a6:65:10:36:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:27:B6:F1:6A:D9:D3:7D:13:17:7C:2E:92:6F:51:C7:2E:50:A4:D5
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Oie28WrZ030TF3wukm9Rxy5QpNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ce:a0:3d:13:bb:1d:42:fa:15:c9:f7:eb:8c:9f:2a:ac:eb:83:
         47:f7:e6:ba:fa:a8:1e:be:27:bf:18:b1:25:47:f0:7d:91:d0:
         1d:96:98:08:2b:b4:e5:d0:80:9c:1f:c2:85:4e:d7:f4:99:42:
         b2:16:bf:8a:06:1b:88:9c:4e:19:7e:99:b1:24:bd:9a:e3:25:
         a0:8a:63:15:07:53:7e:6f:9a:49:75:8d:bf:4e:f8:cd:0d:c3:
         fb:79:43:d1:c5:5a:69:2e:2e:31:df:26:2a:81:0f:6b:91:6e:
         30:2b:94:bb:9c:5f:cd:ba:ee:8c:c7:d8:4c:23:3f:34:f3:74:
         1d:45:ed:ff:a8:93:d4:c6:e1:39:cf:20:a0:dd:4c:6a:63:65:
         6c:0e:0b:7b:2f:33:31:10:ce:d9:35:c4:cc:84:b6:ba:8a:c3:
         d2:b4:e2:f2:44:65:ba:1c:0b:de:33:aa:8c:fc:16:44:45:68:
         26:d9:ec:b7:19:0c:5e:53:ad:b2:be:25:fe:92:a9:2b:01:ad:
         52:f6:b1:9d:21:e3:70:40:df:1f:48:19:c8:a4:b8:2f:61:73:
         c5:51:d2:d0:25:d9:06:e5:8f:15:b8:e1:b1:a8:03:f3:53:49:
         e2:6f:dd:86:8d:08:bf:9b:41:a3:b6:eb:28:2c:93:ce:2a:21:
         52:c7:ab:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org