Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dERB-R_f3ZsMBKtrWRjAAvMw8Ic.roa
File:                     dERB-R_f3ZsMBKtrWRjAAvMw8Ic.roa (raw, json)
Hash identifier:          TncFkW+niiQaARypVh8MJ7FkWW1Ovt9uG2EUgFXIhDg=
Subject key identifier:   74:44:41:F9:1F:DF:DD:9B:0C:04:AB:6B:59:18:C0:02:F3:30:F0:87
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       71
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dERB-R_f3ZsMBKtrWRjAAvMw8Ic.roa
Signing time:             Tue 18 Oct 2022 02:18:15 +0000
ROA not before:           Tue 18 Oct 2022 02:18:15 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:18:15 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=744441F91FDFDD9B0C04AB6B5918C002F330F087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:ec:3a:80:1d:96:82:09:ea:d6:bc:7c:c4:
                    bc:ab:26:10:0c:bc:d6:e2:42:f8:c3:f9:ab:61:15:
                    76:d6:ad:b5:87:3e:23:0a:5b:01:83:93:9f:77:8b:
                    78:31:38:30:ab:58:53:0c:12:22:b9:6e:a9:b4:a9:
                    8f:24:ed:8f:71:9a:40:c6:be:8d:07:40:96:6a:90:
                    15:09:d3:37:4e:f9:ea:24:56:cc:4d:b8:dd:88:76:
                    13:7a:85:5a:4f:54:d5:6a:f6:17:06:e7:c0:bc:0f:
                    1b:80:4e:ec:af:04:d2:d8:58:7d:25:1b:f3:3c:32:
                    23:f2:1d:5d:f2:ce:1a:fd:4d:31:7c:a2:bc:45:11:
                    bf:9f:94:1e:b5:61:1e:b1:77:ab:61:c5:47:4c:fc:
                    6f:c5:88:ec:b4:d9:95:f8:06:49:87:74:b9:08:15:
                    01:73:79:3f:a5:be:de:88:49:00:ae:09:c4:5d:b9:
                    7d:b7:fc:e3:8c:2c:50:18:bc:0e:18:1b:94:17:30:
                    6f:ee:ef:f2:b1:56:c6:8b:51:98:f4:40:92:d5:d5:
                    3a:8e:df:de:75:76:28:db:a2:b7:3a:c2:17:15:ac:
                    e1:61:3f:67:20:d2:54:c5:b7:5f:30:76:1e:65:0c:
                    be:ae:53:e6:2f:ef:0b:cc:00:43:4a:55:22:e1:61:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:44:41:F9:1F:DF:DD:9B:0C:04:AB:6B:59:18:C0:02:F3:30:F0:87
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dERB-R_f3ZsMBKtrWRjAAvMw8Ic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:ed:f1:9e:67:ad:b6:ef:36:1e:01:c8:3d:63:a6:66:0e:
         28:47:f8:14:2c:5b:d0:bc:71:4c:63:25:0d:7c:89:b9:9c:ff:
         34:7d:31:9d:39:bc:aa:be:17:98:54:d2:4e:e6:af:d2:77:6d:
         51:13:09:4c:bc:b2:ab:25:38:01:ff:d8:0d:36:f5:d8:59:2a:
         d6:4f:b4:c8:c8:42:94:3f:f7:4c:51:d8:3f:59:d8:18:ed:d0:
         63:c5:7b:3c:bd:84:1f:e2:5f:88:59:5a:d0:cb:36:d4:70:23:
         f0:03:2f:89:aa:ac:b0:2d:4a:c4:ca:3c:5a:ff:d3:15:14:da:
         ca:4b:a2:2c:98:71:ee:55:8f:a4:be:34:84:bb:47:cb:92:0b:
         1c:cc:a2:b0:bf:0d:2a:6a:cf:c8:b9:35:e0:9a:3f:89:ed:b6:
         d8:af:f0:cf:86:8e:56:94:1e:03:2d:8e:f0:d2:0f:b9:d0:a7:
         9f:07:a3:ce:fa:a1:5d:63:bd:47:e2:2d:2d:62:7e:9f:d3:2c:
         c5:a0:8b:6d:9a:74:a2:1f:a1:95:f1:90:16:56:c5:9a:cf:17:
         e5:74:3d:f8:be:2d:a8:d1:30:0c:eb:44:13:99:d5:c0:e0:6e:
         95:74:e9:68:a9:f5:15:0e:8e:01:4e:4d:3d:0d:fb:5b:b2:ca:
         ae:7b:5e:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org