Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SsyxqEf8yNXPpvk09ISzS0vKzig.roa
File:                     SsyxqEf8yNXPpvk09ISzS0vKzig.roa (raw, json)
Hash identifier:          p68vhYyFt0W4kAA9FBIN6RhOy3ypGjWyTeooShmGmPQ=
Subject key identifier:   4A:CC:B1:A8:47:FC:C8:D5:CF:A6:F9:34:F4:84:B3:4B:4B:CA:CE:28
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       70
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SsyxqEf8yNXPpvk09ISzS0vKzig.roa
Signing time:             Tue 18 Oct 2022 02:16:14 +0000
ROA not before:           Tue 18 Oct 2022 02:16:14 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:16:14 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4ACCB1A847FCC8D5CFA6F934F484B34B4BCACE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:71:f4:b5:ac:7d:c2:4b:91:3e:d8:ff:3b:
                    86:92:7f:5c:b2:e6:2a:e9:05:21:18:0a:28:0b:eb:
                    13:66:b8:bf:bb:e2:05:39:af:8b:fc:b1:5c:4d:74:
                    2b:12:89:55:ff:ec:1b:57:53:49:fb:cb:b4:80:31:
                    fe:e3:4e:ea:78:f6:6c:2e:4f:48:70:00:71:3b:5a:
                    ef:e2:a5:fe:c8:ab:d4:1c:98:b2:56:9e:8e:7a:7a:
                    b2:84:f8:b8:e1:2e:4e:b5:9e:0e:e4:24:d4:e6:0f:
                    2c:85:48:0d:8d:b6:77:2b:6c:31:fe:04:ef:51:c3:
                    51:07:32:3c:a7:1e:7e:a4:2b:c1:b5:0d:a7:77:35:
                    82:95:3c:7a:37:1a:b0:da:93:c0:49:d9:37:8f:60:
                    1c:c6:61:b5:85:ce:e7:f6:5e:cb:60:d2:b5:7b:9f:
                    60:bf:9a:65:a4:32:ac:f7:2d:6f:58:b0:fb:c6:f8:
                    45:fe:53:30:53:ef:cd:d2:93:cb:a5:e2:5a:2b:8f:
                    66:70:aa:29:d2:7f:6b:b2:b2:5f:fb:a4:d2:84:62:
                    95:b3:68:08:5a:73:48:8e:6e:11:09:2e:b0:0c:60:
                    12:64:0a:1a:96:01:80:dd:48:19:a4:46:68:1a:9f:
                    87:81:34:5a:7a:a0:96:14:7c:61:19:c7:6f:e6:3d:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:B1:A8:47:FC:C8:D5:CF:A6:F9:34:F4:84:B3:4B:4B:CA:CE:28
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SsyxqEf8yNXPpvk09ISzS0vKzig.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:7e:0b:4b:0d:ae:b8:0a:43:dc:3b:9d:e5:76:dd:0d:30:
         47:a4:43:be:e5:41:b6:27:93:92:61:21:cb:0c:1d:20:ad:ad:
         d4:3a:2d:dd:6d:11:6d:bc:a0:60:b6:f2:de:ff:5a:74:47:04:
         2c:01:5a:72:85:0a:b0:28:7c:e1:d8:34:23:ee:e8:72:66:c0:
         be:50:16:4b:a2:6d:c7:3e:0e:b0:e8:1e:3d:32:60:54:0b:33:
         8a:97:62:2d:e1:d6:85:88:65:bb:48:7a:21:4b:b4:d7:3a:1c:
         8d:1f:b7:77:08:7b:56:22:a0:52:5d:98:a9:1f:db:b6:b2:a1:
         6e:5e:49:cd:05:5c:da:61:81:d6:d0:33:90:78:89:d9:20:c7:
         af:17:10:df:26:16:df:41:ff:3d:80:8e:ad:9f:ae:08:81:a6:
         2d:a4:a3:51:ef:d5:fa:e9:51:c1:ac:76:cd:b0:61:39:fe:85:
         82:20:3a:22:77:f8:06:f7:18:df:5b:52:1f:44:b2:31:2f:5f:
         02:a5:be:27:92:f7:72:cf:df:7e:3f:04:5c:ac:9e:9a:bc:e0:
         be:99:66:cf:05:c7:cd:ca:c6:d9:f3:e7:2d:bb:03:91:5e:d8:
         71:6b:32:b2:80:be:f5:5e:b7:b0:34:cb:9d:a7:8d:72:89:e9:
         44:9b:81:eb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxODAy
MTYxNFoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNEFDQ0IxQTg0N0ZDQzhE
NUNGQTZGOTM0RjQ4NEIzNEI0QkNBQ0UyODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJi9cfS1rH3CS5E+2P87hpJ/XLLmKukFIRgKKAvrE2a4v7viBTmv
i/yxXE10KxKJVf/sG1dTSfvLtIAx/uNO6nj2bC5PSHAAcTta7+Kl/sir1ByYslae
jnp6soT4uOEuTrWeDuQk1OYPLIVIDY22dytsMf4E71HDUQcyPKcefqQrwbUNp3c1
gpU8ejcasNqTwEnZN49gHMZhtYXO5/Zey2DStXufYL+aZaQyrPctb1iw+8b4Rf5T
MFPvzdKTy6XiWiuPZnCqKdJ/a7KyX/uk0oRilbNoCFpzSI5uEQkusAxgEmQKGpYB
gN1IGaRGaBqfh4E0WnqglhR8YRnHb+Y9kZUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRKzLGoR/zI1c+m+TT0hLNLS8rOKDAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L1NzeXhxRWY4eU5YUHB2azA5SVN6UzB2S3ppZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADTB64wDQYJKoZIhvcNAQELBQADggEBAIuTfgtLDa64CkPcO53ldt0N
MEekQ77lQbYnk5JhIcsMHSCtrdQ6Ld1tEW28oGC28t7/WnRHBCwBWnKFCrAofOHY
NCPu6HJmwL5QFkuibcc+DrDoHj0yYFQLM4qXYi3h1oWIZbtIeiFLtNc6HI0ft3cI
e1YioFJdmKkf27ayoW5eSc0FXNphgdbQM5B4idkgx68XEN8mFt9B/z2Ajq2frgiB
pi2ko1Hv1frpUcGsds2wYTn+hYIgOiJ3+Ab3GN9bUh9EsjEvXwKlvieS93LP334/
BFysnpq84L6ZZs8Fx83Kxtnz5y27A5Fe2HFrMrKAvvVet7A0y52njXKJ6USbges=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org