Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZlFzp1Ixl9-LsIamf4vjgx_Yjh0.roa
File:                     ZlFzp1Ixl9-LsIamf4vjgx_Yjh0.roa (raw, json)
Hash identifier:          yhzkttjEnJWIx1lOGHq19+hSl9e7gt1nY9ZRgcpK5Us=
Subject key identifier:   66:51:73:A7:52:31:97:DF:8B:B0:86:A6:7F:8B:E3:83:1F:D8:8E:1D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       B3
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZlFzp1Ixl9-LsIamf4vjgx_Yjh0.roa
Signing time:             Tue 18 Oct 2022 02:40:32 +0000
ROA not before:           Tue 18 Oct 2022 02:40:32 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:40:32 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=665173A7523197DF8BB086A67F8BE3831FD88E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:1d:d1:60:4d:c9:de:03:71:29:08:fa:59:
                    66:ac:6c:c8:b5:82:2d:77:86:79:71:7d:05:27:f0:
                    94:81:7d:43:7a:da:43:27:36:3a:8a:43:38:c2:03:
                    ad:49:f3:c2:ea:ba:ee:40:cf:1b:ac:64:df:0e:8e:
                    2c:ff:ec:74:1c:82:5f:9d:47:b0:92:79:59:30:39:
                    8d:b8:42:37:46:a7:44:70:f8:8d:b5:65:18:15:5f:
                    16:44:4d:42:33:d6:29:12:4f:0c:2d:d3:d1:30:fe:
                    ac:f1:4a:53:d6:fe:6d:05:63:34:5a:07:8a:ab:b4:
                    de:09:8f:a3:62:5c:a7:11:b6:6f:59:65:f8:0e:48:
                    eb:83:62:d7:33:02:06:14:44:3c:2c:6c:04:e7:c1:
                    47:4d:53:c8:15:6e:47:05:09:13:18:fb:73:77:b1:
                    14:ee:9e:bc:49:64:0d:50:7e:3f:84:b5:18:8e:6f:
                    f8:c3:13:d2:4c:1e:81:ce:ee:f1:37:78:d6:16:2d:
                    96:53:6d:ca:16:54:4e:27:dc:be:54:5b:d9:14:1e:
                    44:a9:c0:b2:9a:05:c4:22:a2:4f:74:10:9e:5c:16:
                    f7:3a:dd:f1:e5:ea:5e:24:4c:3a:06:44:a1:4d:c4:
                    39:8f:05:34:0a:b5:2e:dd:63:61:ac:92:0a:99:78:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:73:A7:52:31:97:DF:8B:B0:86:A6:7F:8B:E3:83:1F:D8:8E:1D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZlFzp1Ixl9-LsIamf4vjgx_Yjh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:3d:8f:6e:84:7e:f5:6e:f7:83:b8:3e:36:cd:8e:eb:31:25:
         c4:9b:e4:d3:43:4f:28:51:3b:5f:bb:f7:5c:ba:90:6c:d4:fe:
         65:bd:0d:05:ce:5c:c3:e0:6c:2c:b6:33:7a:03:5e:32:0d:bc:
         5c:87:35:07:03:27:15:22:94:f0:bb:6e:06:ad:e5:06:6b:58:
         c1:c1:46:44:ca:54:50:e3:f4:d4:b3:d2:9d:69:6d:35:68:59:
         b1:e6:3d:de:b9:b7:d8:9d:f8:c9:13:bb:b7:1f:74:1c:cf:20:
         72:0a:df:18:79:8e:35:73:f3:3f:4b:84:8f:88:de:7f:31:e3:
         bf:14:7a:58:12:2a:bf:c7:3b:5c:13:1a:8d:ef:21:df:75:2b:
         df:b0:39:17:6e:2d:df:c6:50:d9:43:57:b6:8d:58:17:a0:18:
         11:ad:83:6e:dd:17:6c:01:91:ed:71:bf:d7:86:2f:42:80:dc:
         c8:d9:f4:15:f0:3b:25:1d:7f:c3:3b:22:47:41:8c:0c:20:46:
         8c:e7:23:7c:ab:92:13:09:ed:59:6f:73:8f:43:75:8c:21:23:
         03:c2:76:fe:e2:25:90:c8:2d:bc:55:f4:11:a2:b3:a1:64:f0:
         a2:49:c1:01:e5:ad:af:c6:7a:a1:3c:ae:90:bc:88:48:9b:8d:
         e9:c6:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org