Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ltWrv9TYWWQFP3RkpefM9Cxgrs0.roa
File:                     ltWrv9TYWWQFP3RkpefM9Cxgrs0.roa (raw, json)
Hash identifier:          6EIworFhrUvYhxTHO4b4i4hXxeGJTZtUZhDXtfijWoc=
Subject key identifier:   96:D5:AB:BF:D4:D8:59:64:05:3F:74:64:A5:E7:CC:F4:2C:60:AE:CD
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       15
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ltWrv9TYWWQFP3RkpefM9Cxgrs0.roa
Signing time:             Tue 11 Oct 2022 09:26:11 +0000
ROA not before:           Tue 11 Oct 2022 09:26:11 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.198.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:26:11 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=96D5ABBFD4D85964053F7464A5E7CCF42C60AECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:19:44:6d:80:e2:f5:8f:40:8d:9e:27:ac:
                    d8:3d:65:69:cd:3c:fc:0b:6d:2e:ef:26:1e:06:be:
                    db:74:33:48:71:0c:74:82:bc:ea:46:70:c5:a2:67:
                    44:b4:e0:93:48:7f:fc:6d:8e:09:49:33:a3:89:f9:
                    9a:a3:1c:b2:e3:30:04:68:8a:e3:7f:1d:d2:22:08:
                    66:cd:6e:67:3d:0e:1f:67:43:dc:20:d6:66:e9:e3:
                    bc:4d:a5:74:f0:f8:d2:05:4c:69:4a:55:9c:2a:a8:
                    06:94:83:10:ad:8b:f7:3d:21:a5:50:5c:ea:5b:6a:
                    ef:bc:15:fe:f9:3f:ea:ef:f1:4b:c2:8a:bd:b9:a6:
                    cc:2d:42:14:02:54:46:53:e2:74:23:3b:15:49:f8:
                    54:fa:4d:d2:1a:db:e4:e6:b6:2b:a3:9c:3a:0d:91:
                    e2:5d:b4:56:47:c5:90:cb:2a:3d:07:ad:f2:9a:01:
                    fe:2c:c7:b7:7b:04:0a:1c:ec:a6:62:a6:7b:56:a0:
                    5a:04:5b:80:c6:72:68:60:fb:d0:f4:d9:0b:2a:e6:
                    c6:16:47:7b:4a:20:f5:b0:5b:f4:f7:af:22:94:63:
                    b2:ff:19:4b:98:c3:b8:b6:2f:22:db:eb:fd:c0:d0:
                    61:52:60:56:03:eb:1f:16:13:1d:31:a6:86:1c:3b:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D5:AB:BF:D4:D8:59:64:05:3F:74:64:A5:E7:CC:F4:2C:60:AE:CD
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ltWrv9TYWWQFP3RkpefM9Cxgrs0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:16:34:d6:f5:c8:03:73:af:66:76:fb:2d:f1:43:22:02:41:
         7b:69:c7:3e:93:ee:40:91:cf:fd:e0:69:8c:23:08:15:6d:f4:
         f8:62:5e:2b:4f:ea:0e:7a:67:bf:9e:50:28:15:ca:61:35:ea:
         2f:1c:55:28:3f:4b:d4:e6:1f:e4:51:42:de:c6:7b:27:d5:e6:
         16:de:5a:62:a6:02:d8:79:94:d7:3f:92:11:63:57:a5:3a:66:
         8c:dc:e0:2b:c5:e7:1e:10:5b:4f:1f:63:22:72:85:fb:61:42:
         86:98:ae:5e:ac:26:e3:b8:d2:25:59:a8:a5:08:9c:86:20:d6:
         ba:e8:ba:12:c9:36:8c:20:65:a0:17:56:4d:4a:25:84:97:a1:
         85:47:b0:e0:2e:57:0f:6b:cf:2d:5f:b4:fd:62:3c:8b:86:be:
         22:40:24:7d:ca:96:85:c8:28:b4:5f:c4:3c:94:a5:47:be:6f:
         7d:86:60:b0:33:f1:d4:aa:58:51:70:f2:89:97:88:de:e3:83:
         d5:79:b2:99:b2:4c:84:58:47:88:ce:52:2d:10:e3:e3:62:a2:
         d6:55:fa:04:16:57:db:e6:cd:8c:e2:6b:09:5e:31:03:0b:6a:
         64:8d:c2:c4:25:10:8a:5a:5c:0d:e4:a8:f6:b4:97:4f:38:e0:
         a3:b6:ee:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org