Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/TCoeeaRX8v9hPeIHJu7PxD9uxjk.roa
File:                     TCoeeaRX8v9hPeIHJu7PxD9uxjk.roa (raw, json)
Hash identifier:          JAahWe83UgkVHeNLj940JFUTgEWw++Moftx7IvyEdRM=
Subject key identifier:   4C:2A:1E:79:A4:57:F2:FF:61:3D:E2:07:26:EE:CF:C4:3F:6E:C6:39
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       27
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/TCoeeaRX8v9hPeIHJu7PxD9uxjk.roa
Signing time:             Tue 11 Oct 2022 09:30:22 +0000
ROA not before:           Tue 11 Oct 2022 09:30:22 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.229.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:30:22 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=4C2A1E79A457F2FF613DE20726EECFC43F6EC639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:52:8f:ad:56:74:a2:ea:a9:96:c3:7f:28:
                    ae:2d:5e:d3:eb:c0:35:c2:6f:35:da:a3:1b:84:4a:
                    f0:2c:ab:81:d7:78:ee:17:68:20:68:00:29:71:31:
                    40:9e:4c:0d:4d:22:ef:58:db:70:86:1b:e4:90:b1:
                    fb:4b:45:3a:e3:2e:c6:1c:d7:e2:c6:59:47:02:dd:
                    66:ee:49:39:d4:26:0f:05:15:d0:13:b5:02:89:81:
                    40:8a:af:58:b3:7b:51:9c:b9:b4:28:07:4d:49:a2:
                    36:cc:a5:09:b2:9c:d6:71:ca:dd:7a:7b:28:1f:82:
                    91:6b:a5:9e:9b:cb:91:dc:90:b4:04:74:99:80:4a:
                    8a:36:ae:e8:66:04:77:fb:77:28:6e:ef:81:05:13:
                    f0:46:1f:ec:51:70:41:f0:cb:b9:9e:1e:68:ae:85:
                    2a:71:d2:8f:18:65:09:ab:18:1f:b9:12:8c:32:51:
                    57:81:b5:e4:2c:6a:a5:49:92:84:b3:47:eb:93:f8:
                    e0:0e:a8:cd:b9:09:9c:4e:e5:ea:18:e2:01:ac:87:
                    18:c1:f7:64:ce:25:95:e6:47:47:3c:44:e7:a8:11:
                    99:9b:b8:f3:08:35:54:90:c0:c1:04:b2:c3:10:32:
                    e5:b4:fa:b5:ed:b5:18:70:e6:39:20:1f:fa:f8:c5:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:1E:79:A4:57:F2:FF:61:3D:E2:07:26:EE:CF:C4:3F:6E:C6:39
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/TCoeeaRX8v9hPeIHJu7PxD9uxjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:43:3c:e9:80:ea:64:8d:f7:ee:d9:0a:cc:1e:b8:0e:af:ab:
         3d:f7:79:65:00:0e:b5:82:2e:0e:c5:e2:82:f4:ea:0f:61:65:
         cd:12:b1:c3:c5:f6:e8:f7:07:1e:83:41:61:8c:bf:ab:7e:a1:
         0f:23:0b:98:42:e8:7f:42:3a:c1:b5:15:bb:a9:a7:20:29:bf:
         cc:b4:6e:45:95:12:38:18:f3:71:a7:f4:79:c1:2e:95:a8:e5:
         25:e0:0e:3c:42:ad:bf:f4:8c:5a:b1:ac:dd:4e:d1:38:20:9b:
         e4:2f:de:6c:2c:80:68:c1:81:89:7f:e0:fb:ff:27:5a:45:de:
         b2:74:3c:03:14:bf:76:29:09:56:e8:a5:44:03:aa:61:18:c1:
         7a:90:01:1f:72:1a:6c:2e:49:aa:79:0e:97:e1:2d:57:ee:18:
         e3:62:29:78:92:9e:71:4b:f3:9b:06:47:f5:65:0b:4b:60:b4:
         e5:0d:ee:cd:ff:15:dc:e1:1c:9d:91:eb:33:0b:b2:3e:81:13:
         f5:05:3f:b8:52:9f:d7:43:64:0b:e2:3a:26:90:b9:ee:60:1b:
         4b:61:80:17:13:c6:5b:2a:56:cb:d8:93:87:a8:05:62:9d:51:
         c5:9a:b1:cd:41:a2:16:8c:95:ba:f7:85:a9:49:c8:4b:7b:1f:
         10:02:52:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org