Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/kiCYNke6ZNcos6a_OSbTC21K2Zk.roa
File:                     kiCYNke6ZNcos6a_OSbTC21K2Zk.roa (raw, json)
Hash identifier:          U/EPBcOMu4f99rOWLzDFlkd5QawfGogqAw6nEg77t1s=
Subject key identifier:   92:20:98:36:47:BA:64:D7:28:B3:A6:BF:39:26:D3:0B:6D:4A:D9:99
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       7F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/kiCYNke6ZNcos6a_OSbTC21K2Zk.roa
Signing time:             Tue 18 Oct 2022 02:22:22 +0000
ROA not before:           Tue 18 Oct 2022 02:22:22 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:22:22 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9220983647BA64D728B3A6BF3926D30B6D4AD999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:83:15:de:9b:3d:5a:a1:ca:86:8a:c5:e0:
                    96:d6:8a:1b:df:3f:30:18:39:b3:86:e4:3b:ee:70:
                    73:c9:c2:55:ff:5c:c3:23:d3:a2:87:cb:5c:3c:c5:
                    35:98:2f:e4:b1:47:4d:10:12:77:bd:cd:30:08:23:
                    1b:25:1a:41:1d:86:fd:97:3b:61:b5:f7:e6:1a:e8:
                    98:b5:fc:0d:c7:25:81:ed:c4:43:f1:e7:93:02:56:
                    cc:c6:8c:75:6b:56:76:ea:ef:25:67:84:b8:30:63:
                    0c:fb:76:21:f1:be:8a:6d:b7:14:1e:ea:57:36:8c:
                    4a:4f:e7:11:89:37:59:0b:b8:04:99:ed:d2:7f:ff:
                    e2:ec:90:f8:10:ca:d3:64:05:49:9f:59:f9:69:7c:
                    99:b2:64:28:c7:e6:86:4d:fd:33:3e:a6:f6:17:bb:
                    bc:26:0d:eb:7c:12:a1:59:4b:48:09:67:a5:22:ca:
                    bf:e4:86:90:6f:47:7c:f7:93:c7:1c:54:86:54:8a:
                    f9:e6:ff:de:c2:50:00:c9:b2:a7:58:b2:5e:e0:7f:
                    fe:dc:34:75:13:c4:b4:ae:c0:bb:70:2d:f9:86:2f:
                    0a:23:1e:de:7f:02:a1:c9:01:95:be:18:71:e3:28:
                    95:54:b2:1d:7b:ce:c6:d0:69:ca:f2:23:bc:35:a9:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:20:98:36:47:BA:64:D7:28:B3:A6:BF:39:26:D3:0B:6D:4A:D9:99
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/kiCYNke6ZNcos6a_OSbTC21K2Zk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:08:9e:75:7d:e6:e4:a6:4e:7d:c1:8c:fc:5f:ac:a3:b2:2b:
         9e:b7:85:58:95:a4:fd:18:6b:44:d3:f4:3c:1c:b5:c9:4a:43:
         6f:d6:12:35:bf:65:58:4f:30:90:f1:45:ba:70:53:4a:41:cb:
         8a:e1:52:d8:86:4d:6e:8c:fd:f0:ad:6e:e1:9c:63:3d:35:84:
         9d:a0:d4:d6:b4:e8:03:89:1d:94:2a:41:88:b8:2f:b9:bd:57:
         82:d7:25:55:79:6f:85:db:05:23:1b:52:6e:f6:29:43:4f:a5:
         35:17:b5:c3:5e:e3:9b:e7:f3:9f:b4:73:84:d0:ff:68:ae:24:
         c5:20:37:8b:10:58:30:0e:a3:64:3e:c4:1e:76:2f:01:ee:05:
         25:0e:21:cf:0c:14:44:6a:52:e7:31:dc:34:1e:e2:e2:c8:d2:
         d2:8e:54:65:89:80:c3:63:30:61:1f:b6:28:cb:d6:f6:be:16:
         16:c5:93:5c:58:e5:fb:cb:5e:5e:b3:49:65:9a:26:f6:18:fb:
         cc:44:c1:fc:a7:8e:9b:e7:0b:54:68:0d:bf:0e:00:7f:3e:4e:
         58:e0:67:aa:01:e0:85:9a:d3:14:38:29:c3:ed:61:f0:fe:bd:
         8c:19:97:ec:42:b8:47:73:55:58:cd:ce:e8:59:ef:06:fd:be:
         74:7d:da:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org