Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/inAucPGJ3u2kIgVFrKKH1KPPpf4.roa
File:                     inAucPGJ3u2kIgVFrKKH1KPPpf4.roa (raw, json)
Hash identifier:          S7n/oZ1VOAHKolKO5CXQxyfKvmPaxp6IEwH262dZp8s=
Subject key identifier:   8A:70:2E:70:F1:89:DE:ED:A4:22:05:45:AC:A2:87:D4:A3:CF:A5:FE
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       25
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/inAucPGJ3u2kIgVFrKKH1KPPpf4.roa
Signing time:             Tue 11 Oct 2022 09:30:22 +0000
ROA not before:           Tue 11 Oct 2022 09:30:22 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.229.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:30:22 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8A702E70F189DEEDA4220545ACA287D4A3CFA5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:30:44:08:31:db:3a:ce:35:ab:47:3f:37:
                    d2:5e:72:5f:e7:45:b7:b6:16:10:03:51:b4:9e:c1:
                    f5:2b:83:06:e2:72:95:60:b8:5f:ec:38:ef:98:77:
                    a8:e7:8e:2e:04:86:be:ab:24:d7:67:f1:bb:3e:74:
                    63:27:1a:e8:ba:a1:d4:40:24:10:ef:03:36:bd:5c:
                    c9:2e:55:05:33:6d:8b:f8:9e:d4:ca:61:27:b2:e2:
                    61:4c:09:b2:12:ef:b0:9f:c3:59:e4:f0:de:b9:5e:
                    41:8e:68:49:54:69:fb:8e:e4:2c:80:5b:75:ad:68:
                    6b:2c:0f:f1:6d:34:5b:04:d2:44:3a:22:04:13:7d:
                    c5:2f:81:88:ca:04:fa:90:9b:d2:33:b1:d8:02:10:
                    71:6f:ec:91:cf:7c:ed:c7:ce:5a:b2:ad:af:f3:ef:
                    8e:55:a9:28:77:3a:59:03:6a:66:27:9b:3e:81:ff:
                    ec:d5:98:29:20:c4:c0:68:d9:45:1c:03:df:6c:a1:
                    c3:18:d9:33:cf:c2:71:e3:39:ed:82:fb:2a:af:a7:
                    27:ed:b1:2d:8d:47:73:68:65:35:e1:c3:4f:f2:17:
                    2b:97:d8:82:73:df:d0:f9:d7:22:6c:d0:79:d2:54:
                    cc:32:71:f4:fa:f7:6e:3d:34:c1:6e:fc:96:b5:da:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:2E:70:F1:89:DE:ED:A4:22:05:45:AC:A2:87:D4:A3:CF:A5:FE
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/inAucPGJ3u2kIgVFrKKH1KPPpf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:df:28:2d:b2:61:e3:c2:f9:f0:2a:89:e8:45:39:9d:fa:83:
         3d:cc:27:23:e5:b0:9b:43:e0:98:ff:3c:9a:81:d3:fe:8c:21:
         32:a0:b7:01:65:e4:bf:33:c3:55:a2:98:1d:aa:75:8a:74:a3:
         b1:e7:ba:87:f8:ed:9b:78:01:78:d4:4b:5d:34:fb:51:30:27:
         5c:4c:9c:8a:0d:19:a2:25:62:da:8f:87:b9:d6:c1:bc:2a:93:
         a2:8f:14:0a:f9:2e:27:4f:53:9e:08:dd:33:cc:f8:bc:9d:6e:
         a5:04:99:a7:46:4d:05:7f:ed:0b:93:35:05:68:ee:82:32:df:
         69:7c:50:0a:ea:5f:c2:5a:f6:cc:23:6c:59:3f:77:cc:b9:77:
         19:3c:17:26:9f:47:31:31:f7:13:d5:b7:b2:fc:78:b4:6f:7e:
         0f:9b:9b:00:5c:a5:72:42:f9:80:85:49:0b:a2:b5:34:d0:06:
         a0:63:26:ae:11:22:be:b1:55:61:d1:91:bb:02:81:6b:3d:df:
         62:81:17:86:f2:c1:56:c2:45:0c:30:15:53:f6:e6:3d:6d:40:
         e8:33:f7:3f:52:1d:ea:95:44:82:14:9d:0e:a4:74:88:10:9f:
         7d:3d:33:e9:fa:41:f6:96:cb:e6:fb:30:29:b6:4d:14:60:ac:
         44:91:34:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org