Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/d_CAhjkJxz0Su_wp2wOA5F2KnZA.roa
File:                     d_CAhjkJxz0Su_wp2wOA5F2KnZA.roa (raw, json)
Hash identifier:          zgSeDN0u/o7h/iByqNf30mLVbBRZ1OAoafcTTic+KJg=
Subject key identifier:   77:F0:80:86:39:09:C7:3D:12:BB:FC:29:DB:03:80:E4:5D:8A:9D:90
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       012C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/d_CAhjkJxz0Su_wp2wOA5F2KnZA.roa
Signing time:             Sun 01 Oct 2023 01:30:44 +0000
ROA not before:           Sun 01 Oct 2023 01:30:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=77F080863909C73D12BBFC29DB0380E45D8A9D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:b4:a8:de:7a:c8:2e:14:16:55:40:2a:32:
                    4a:62:12:0f:2c:da:59:c0:bb:15:61:53:7a:21:81:
                    c6:b3:b3:7e:be:1b:d7:0f:b6:9a:29:18:a1:38:5e:
                    4f:42:e7:37:02:80:65:3f:6a:c3:4d:fc:05:a9:c6:
                    3b:64:c7:ee:40:5e:0d:fd:5e:1d:5e:c1:33:65:09:
                    31:6d:de:45:09:dc:85:cd:ac:db:17:09:b2:3e:83:
                    e6:d5:05:40:75:9d:f8:3f:66:63:f2:f6:cf:ee:cd:
                    a3:8a:ba:a9:c7:56:dd:ce:f7:99:29:4c:21:84:35:
                    4a:b1:ab:61:1c:23:ed:2d:80:13:fd:75:2c:6e:a3:
                    6b:15:86:3a:ed:06:23:97:39:1f:29:38:32:82:47:
                    c0:d5:3a:67:dd:ce:61:94:60:04:95:36:89:a9:2b:
                    82:37:fc:bc:e0:0a:9d:66:38:86:c7:c8:12:db:30:
                    9e:fa:02:e9:66:ea:42:ef:3c:6e:fe:27:db:9c:84:
                    6f:8f:ce:f2:c1:df:f9:62:62:83:47:80:64:e6:36:
                    0e:fd:e3:6b:03:44:b8:9f:64:84:8e:8b:dd:fd:9d:
                    12:bf:3a:74:1f:fc:36:cc:45:95:61:cf:a3:fe:82:
                    c6:43:4e:9c:06:94:18:15:f9:6e:ed:90:8d:61:e1:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:80:86:39:09:C7:3D:12:BB:FC:29:DB:03:80:E4:5D:8A:9D:90
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/d_CAhjkJxz0Su_wp2wOA5F2KnZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:51:d6:51:8a:00:34:a3:92:d1:8e:48:7c:16:f3:17:73:
         11:f9:40:70:55:25:c6:62:c3:6b:d5:69:13:46:ae:2a:92:aa:
         ab:25:4d:13:95:50:16:2a:cd:84:9f:9a:d5:a5:58:a3:af:50:
         30:5c:9c:00:37:dc:ec:1c:49:17:ad:04:fd:36:06:1a:25:3e:
         4d:86:c4:22:e7:51:4f:97:7f:cc:da:7d:24:37:e7:f9:f7:fd:
         d3:f0:60:79:0d:7c:ee:82:63:70:9d:d3:ca:5d:65:c5:9f:bd:
         44:e3:7a:2c:9b:38:6a:23:2b:3e:e7:8b:22:4f:de:e7:79:58:
         30:2f:1d:29:02:a4:86:2a:7a:39:95:28:0e:fb:6f:b8:75:09:
         bc:6f:5b:21:0b:e0:37:6e:a1:4b:c9:4a:95:a1:6a:6c:a0:2e:
         95:5a:60:2c:8f:e2:37:fd:fb:b9:ba:a1:a0:10:f2:23:9f:16:
         77:b3:ac:43:0a:a1:f9:04:aa:b4:74:22:53:d1:4f:13:5a:fb:
         66:cf:39:9c:d9:c3:71:7e:ac:af:c1:d7:45:e9:07:f1:fa:7b:
         d6:af:fe:e7:26:dc:c8:78:18:55:f0:63:4a:3f:d2:ab:5e:45:
         f5:f6:d2:b9:d3:12:42:0e:bd:98:78:25:9b:b2:1a:2c:86:b9:
         13:82:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org