Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Svqt_rfjDSd48VaxAJeXRb-af40.roa
File:                     Svqt_rfjDSd48VaxAJeXRb-af40.roa (raw, json)
Hash identifier:          P2ZUjFnv+PWDLf/MeLEN8oOUCboj7TFAY6qlY4bi40o=
Subject key identifier:   4A:FA:AD:FE:B7:E3:0D:27:78:F1:56:B1:00:97:97:45:BF:9A:7F:8D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       92
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Svqt_rfjDSd48VaxAJeXRb-af40.roa
Signing time:             Tue 18 Oct 2022 02:28:28 +0000
ROA not before:           Tue 18 Oct 2022 02:28:28 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:28:28 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4AFAADFEB7E30D2778F156B100979745BF9A7F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:53:d2:28:5a:94:b6:0a:c2:99:47:15:8d:
                    cc:66:c0:ab:fa:f2:ba:5c:1b:a3:38:9a:27:ec:bb:
                    6a:18:6b:7b:c2:3f:e2:f5:90:fb:73:89:41:7f:9c:
                    75:59:42:0c:1a:b2:a7:db:e9:e2:c6:fd:9e:09:d8:
                    26:00:bb:bc:13:33:2f:64:f9:ed:fa:3a:3c:a1:84:
                    65:00:9a:da:55:73:95:fc:f3:2b:ae:99:e8:7e:01:
                    9b:bb:bc:83:99:47:30:b0:b6:ae:80:d2:3e:54:d6:
                    b6:b0:85:35:84:12:02:f3:bb:92:4d:7a:48:da:09:
                    3a:f5:46:c9:d6:57:b7:c4:82:f6:17:40:d6:2b:e8:
                    47:5d:0a:4a:70:53:26:ea:0e:cd:c2:56:29:ed:19:
                    1a:b2:ba:ba:3f:1a:84:30:62:e8:77:34:ca:ac:25:
                    26:c9:d7:d4:86:62:cd:0e:0c:05:6a:2e:45:5d:d9:
                    2f:ca:5c:a9:99:dc:c4:61:68:bd:da:7a:c8:ec:d5:
                    19:6d:7a:d9:14:af:1b:05:3d:fc:d7:ef:1f:e2:12:
                    1b:04:00:8a:52:20:ed:27:ba:36:9b:b4:9e:69:f7:
                    51:b3:98:09:c0:c8:44:4f:b2:99:c4:a0:56:ac:23:
                    e2:16:7a:61:12:fd:4f:35:5b:f7:30:37:95:94:2f:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:AD:FE:B7:E3:0D:27:78:F1:56:B1:00:97:97:45:BF:9A:7F:8D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Svqt_rfjDSd48VaxAJeXRb-af40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:78:45:c4:15:af:f5:ae:f5:85:0e:70:75:56:c7:ba:77:
         d1:78:26:ff:42:53:60:7c:f1:ca:8f:cc:d6:5b:d0:81:06:87:
         7a:3d:30:7a:58:7b:98:ac:41:b5:22:63:ea:3d:ce:17:08:6b:
         d0:db:1f:b6:3f:01:46:c8:b4:a8:1a:2e:0e:d3:44:16:e8:77:
         2b:62:25:1a:bc:ef:c3:d3:3e:83:b8:5e:96:8b:5f:c3:4e:38:
         8e:1e:df:b1:3a:a9:1c:6b:d0:5b:cd:5c:91:8e:3d:cc:42:df:
         bd:73:c5:41:a1:2a:f1:d6:b2:31:80:25:d8:a8:cd:34:65:38:
         81:e9:e5:cc:45:73:6a:41:9b:29:b0:e8:d2:57:fa:d5:f5:aa:
         1c:14:f8:88:2e:52:3d:ec:2a:b3:25:28:9a:3d:f5:7b:be:87:
         bb:c4:87:18:14:a3:02:1d:a1:6b:97:bb:b8:91:f4:96:c8:af:
         39:87:0c:54:60:0e:3e:9a:09:6e:1c:2d:58:c2:54:f1:b8:b1:
         07:eb:af:2d:fa:2e:82:08:ea:ad:86:1a:a3:bd:07:49:6d:2c:
         86:db:a5:4b:71:0b:02:da:84:53:7d:16:d8:79:f9:d9:d2:3a:
         ab:62:fa:1e:48:45:96:3a:0e:96:ca:8d:83:be:86:cf:9d:56:
         a0:30:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org