Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m2QY3Bl4w2ix7Q9FsPFdDsK1Oho.roa
File:                     m2QY3Bl4w2ix7Q9FsPFdDsK1Oho.roa (raw, json)
Hash identifier:          Nl1YeYX8bBsTm5adiLQPNl8gX+K5p8CvOQL9GOdLblA=
Subject key identifier:   9B:64:18:DC:19:78:C3:68:B1:ED:0F:45:B0:F1:5D:0E:C2:B5:3A:1A
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       A6
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m2QY3Bl4w2ix7Q9FsPFdDsK1Oho.roa
Signing time:             Tue 18 Oct 2022 02:32:22 +0000
ROA not before:           Tue 18 Oct 2022 02:32:22 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:32:22 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9B6418DC1978C368B1ED0F45B0F15D0EC2B53A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f8:70:d0:1a:4d:1f:b4:07:48:ef:a5:cf:90:
                    2d:96:96:e8:d4:00:d4:20:27:65:84:c0:79:78:6d:
                    25:2b:04:27:df:d3:0e:99:15:24:55:9a:7a:2a:ad:
                    a8:78:3b:bc:87:41:c9:8c:e9:04:1e:41:c5:6e:d6:
                    17:f1:c8:ac:82:a7:56:1d:9e:8c:fd:d7:91:bf:ee:
                    07:a8:d4:d9:e2:21:94:d5:3d:db:0b:7a:b2:4c:d4:
                    fc:60:d8:d9:6c:b8:8b:23:99:ad:1d:02:f6:f6:f4:
                    88:89:10:72:2d:a3:01:8c:8a:34:bc:d4:49:56:7e:
                    fd:d6:6f:77:af:de:c9:55:bb:05:73:65:14:8b:b4:
                    70:90:cb:8b:cb:35:9a:6b:bc:52:73:b6:91:b5:42:
                    49:ed:b9:9e:7c:92:0c:ea:a9:18:f0:3b:77:d0:2f:
                    af:1c:c1:35:d7:a5:82:74:e9:4f:38:a9:da:06:a1:
                    28:d2:48:e7:e6:0f:0a:a5:91:f2:ca:d3:c9:69:81:
                    32:8e:91:37:fe:da:61:fd:f3:d5:a0:a3:77:a5:e4:
                    8a:c8:c0:ac:13:68:00:30:69:45:42:dc:25:bc:a5:
                    85:b2:11:53:90:f2:c3:a1:03:dd:b5:45:5b:26:38:
                    63:ae:9a:61:7c:87:1e:58:fd:19:75:52:1a:5c:79:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:64:18:DC:19:78:C3:68:B1:ED:0F:45:B0:F1:5D:0E:C2:B5:3A:1A
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m2QY3Bl4w2ix7Q9FsPFdDsK1Oho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:a8:95:8e:f7:e7:6b:39:68:3c:94:eb:ac:1e:05:13:58:
         71:4f:a7:cb:55:70:17:38:46:79:d9:26:bb:2a:41:d8:16:0b:
         21:d2:38:f2:1a:d4:6e:85:b6:f2:f0:4f:ab:3e:f3:6a:07:0d:
         b4:fd:99:75:98:4a:5e:95:54:c5:cb:04:93:2f:29:06:45:c0:
         f8:c9:a6:29:b5:16:e5:10:81:1d:7c:0a:60:1e:3c:b5:a2:10:
         3c:bb:c3:66:5d:51:22:d9:05:b8:6f:90:d7:b7:b3:6a:8e:cf:
         bf:23:df:a7:d8:a5:0d:db:7b:84:1c:dc:9a:45:05:ee:2f:ff:
         7c:86:32:9a:7d:5d:83:58:93:79:ae:3c:ae:d4:42:b1:16:81:
         aa:b9:60:b8:4a:3f:5c:e1:86:21:a7:f2:16:88:ee:f5:17:4d:
         17:1a:ff:ca:70:3a:40:e4:98:93:c9:d9:9f:eb:01:f5:6f:d3:
         ce:c6:02:53:e7:2d:20:a8:77:15:ac:7a:cc:c4:e0:09:ca:c3:
         bd:a7:8c:f8:72:28:dc:aa:5c:28:bc:f6:2a:ee:f6:52:46:52:
         ae:19:8f:d8:a2:52:50:ef:7b:ae:51:fc:13:c0:81:50:ba:31:
         08:eb:67:e4:fd:ac:d3:38:06:92:07:bc:b1:a6:e2:cd:40:a9:
         16:dd:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org