Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Tw3mSh0f_XI5qA8RpcpLpSAcZiI.roa
File:                     Tw3mSh0f_XI5qA8RpcpLpSAcZiI.roa (raw, json)
Hash identifier:          cJ1cSztM8Zb54/ZR+w4o5jIGWB5mPrjxZcSRyQ0ww4k=
Subject key identifier:   4F:0D:E6:4A:1D:1F:FD:72:39:A8:0F:11:A5:CA:4B:A5:20:1C:66:22
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       014C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Tw3mSh0f_XI5qA8RpcpLpSAcZiI.roa
Signing time:             Sun 01 Oct 2023 01:33:23 +0000
ROA not before:           Sun 01 Oct 2023 01:33:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.254.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4F0DE64A1D1FFD7239A80F11A5CA4BA5201C6622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:56:c1:58:56:ee:02:66:34:8c:6f:b0:99:
                    7f:49:11:99:1e:2f:82:08:f5:ea:d2:fc:9a:29:47:
                    66:c5:e3:b2:91:dd:52:b8:a8:b3:bf:ee:17:15:46:
                    76:f6:7e:a5:65:3a:2c:1f:93:0b:71:7a:65:a0:29:
                    5f:d7:6a:4b:43:aa:a6:9c:1a:b3:b2:b3:bd:80:3c:
                    b3:b4:54:09:fd:ce:74:c1:33:58:11:b5:80:d2:c6:
                    fb:93:4a:e0:89:8b:12:d4:aa:b6:80:cd:ed:74:58:
                    e9:6d:31:7a:13:0c:e7:cb:8f:df:3e:22:12:47:55:
                    01:44:76:42:15:59:8a:f9:32:9a:c5:1e:6e:47:d6:
                    48:10:71:01:b8:49:78:51:7b:7d:63:2e:b2:30:26:
                    86:fb:5f:a3:51:67:f0:5f:46:8d:47:c7:9d:05:ed:
                    4a:6b:81:80:d3:2e:5e:f7:71:ae:04:9c:c3:ab:fb:
                    0f:49:30:08:87:0c:a4:bb:95:3f:4c:93:7d:c4:ef:
                    a1:44:43:f7:aa:65:e1:bb:c3:5a:e9:4a:4d:c0:c0:
                    53:70:9f:5d:c3:2c:76:c5:7b:de:3a:33:90:a1:19:
                    d6:fb:42:2b:d8:f7:e4:68:e8:5d:31:84:d0:2b:ec:
                    ba:bd:34:c1:71:ff:2a:55:23:55:f6:b1:c4:93:e7:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0D:E6:4A:1D:1F:FD:72:39:A8:0F:11:A5:CA:4B:A5:20:1C:66:22
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Tw3mSh0f_XI5qA8RpcpLpSAcZiI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:7e:22:00:88:60:a0:9c:1e:2b:0a:fa:12:b2:c4:a1:10:40:
         42:fe:90:dc:a6:30:52:50:69:f8:a5:75:3f:1f:5b:21:06:61:
         54:4d:37:e8:0c:96:d9:ff:1e:aa:29:10:4d:c6:d7:8e:93:10:
         7e:44:5d:0e:c5:62:31:b8:95:64:03:ae:ec:12:75:46:d1:0e:
         1c:0a:2f:2e:35:30:b0:78:eb:7a:5d:b0:00:95:e8:6b:0d:4d:
         5b:2b:8e:f9:3b:f9:db:1b:b0:4c:9d:fd:94:91:73:d0:d9:27:
         a8:69:d6:77:ee:36:ba:87:7a:ea:cd:49:61:b6:7c:30:cd:77:
         6a:68:92:09:8e:e9:84:45:55:37:97:02:e4:d7:a1:49:e0:4c:
         15:bc:50:94:17:ef:b7:ed:8f:20:29:bf:0d:ce:bc:b3:8b:b7:
         1f:11:c1:94:d7:b6:bb:4f:3e:2b:b4:27:34:03:5d:ca:67:34:
         22:89:e4:7f:93:55:fb:72:ca:ad:b8:09:7d:63:04:f0:4c:bb:
         fc:fc:82:d0:bf:58:f3:97:1e:49:73:4e:55:ee:1f:ab:7e:05:
         25:f0:70:67:fd:b0:41:e0:67:db:4b:d3:91:15:f4:bd:20:56:
         84:4f:5a:94:d9:bb:4f:28:07:82:82:4c:28:10:82:df:0d:24:
         6a:2e:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org