Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/XPkzs14tf9qbt4SFw4idm3MN8Oo.roa
File:                     XPkzs14tf9qbt4SFw4idm3MN8Oo.roa (raw, json)
Hash identifier:          eqi7caGB/tfT9JOEOVWZDnlxgrDhGWh7kSWqTRDb9CM=
Subject key identifier:   5C:F9:33:B3:5E:2D:7F:DA:9B:B7:84:85:C3:88:9D:9B:73:0D:F0:EA
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       015E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/XPkzs14tf9qbt4SFw4idm3MN8Oo.roa
Signing time:             Sun 01 Oct 2023 01:35:47 +0000
ROA not before:           Sun 01 Oct 2023 01:35:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.1.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=5CF933B35E2D7FDA9BB78485C3889D9B730DF0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:83:ee:cc:8c:41:9b:e7:bd:ed:fd:5f:50:
                    55:fc:26:97:cd:c6:b3:1a:c6:d4:7d:4a:62:da:a3:
                    1c:f9:88:e7:2e:ea:ac:27:5d:b3:88:3f:c0:bd:47:
                    4e:73:ac:90:82:32:58:13:e9:b7:c3:a4:c9:9d:e2:
                    2d:0d:d5:27:64:42:b6:67:a8:4c:e5:e1:d0:05:12:
                    d4:46:70:f2:9d:17:19:61:43:84:05:e9:f3:bb:08:
                    46:9c:7c:ca:48:e6:57:36:e3:e2:f4:c3:cc:04:8a:
                    9e:b6:71:46:10:f8:d9:cb:c5:4d:98:04:8f:cf:44:
                    04:73:98:e2:a3:aa:a8:74:1a:e4:c2:16:ad:6b:01:
                    3c:31:96:b4:04:91:c4:ae:f2:e7:8f:09:66:67:b6:
                    25:af:ed:41:0f:a0:5e:8d:19:46:82:6c:c7:59:2d:
                    c0:c1:61:d0:33:74:c6:82:03:e9:37:30:a8:e2:a0:
                    33:4d:3d:93:28:60:93:5e:71:24:ba:87:27:8f:0f:
                    07:f7:05:f6:a0:0e:81:29:bd:c8:73:49:a2:15:a3:
                    9d:37:28:68:b2:8c:31:48:fa:77:1d:65:ba:41:41:
                    33:16:64:f1:b4:dc:84:6b:5e:08:0c:7d:58:26:4f:
                    ae:f0:46:f1:af:f6:8d:53:40:98:99:72:15:a9:dc:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F9:33:B3:5E:2D:7F:DA:9B:B7:84:85:C3:88:9D:9B:73:0D:F0:EA
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/XPkzs14tf9qbt4SFw4idm3MN8Oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:c1:0a:9a:11:9a:25:ae:57:42:a1:40:99:66:85:74:eb:
         3e:01:5d:4c:15:ac:34:11:6b:0f:37:25:24:53:5f:6c:db:e0:
         ac:04:76:71:fc:68:92:e1:6a:26:45:49:43:81:71:b8:ea:ce:
         65:15:1d:92:6b:b6:9b:70:21:24:80:e2:d6:01:af:79:6d:ab:
         b7:32:25:b4:a2:9f:28:fe:31:d1:4a:b8:0f:8a:44:82:4f:31:
         8b:33:d0:fe:d3:aa:f1:5c:05:ff:3c:a4:65:68:87:b4:4d:50:
         95:42:ff:68:55:d4:46:8e:05:7a:fa:80:a5:08:f6:bb:a4:e3:
         49:c5:ea:c9:05:fa:ce:2f:e3:58:20:a9:d9:cd:db:5d:35:39:
         ed:3d:67:30:e0:8d:68:67:ce:06:7e:f8:89:8b:99:86:86:38:
         47:39:05:56:4b:4b:3a:77:ae:6e:2b:10:2a:44:85:2a:c3:9f:
         92:21:4c:a2:27:21:86:2f:33:bc:4b:f5:1f:39:5e:af:89:ad:
         fb:b9:67:74:e7:70:ee:f5:02:a4:c8:07:12:d3:1e:39:d8:e1:
         29:e6:78:ae:65:ea:fc:03:17:91:6a:c4:1e:da:f5:1e:5a:8d:
         27:e7:9b:a2:73:2f:17:ae:ef:b4:d4:8f:d4:d7:8f:4d:80:a7:
         8e:c3:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org