Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m3aoUAp8zt40iFUEfiHm3u9-x1g.roa
File:                     m3aoUAp8zt40iFUEfiHm3u9-x1g.roa (raw, json)
Hash identifier:          8MmwK+sDQNn7yWPFUCWamyA51x2QglAHTzbxaNkRDYM=
Subject key identifier:   9B:76:A8:50:0A:7C:CE:DE:34:88:55:04:7E:21:E6:DE:EF:7E:C7:58
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       7D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m3aoUAp8zt40iFUEfiHm3u9-x1g.roa
Signing time:             Tue 18 Oct 2022 02:20:19 +0000
ROA not before:           Tue 18 Oct 2022 02:20:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:20:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9B76A8500A7CCEDE348855047E21E6DEEF7EC758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:ed:1a:16:5e:66:0f:34:e4:f7:08:35:e9:
                    5d:e2:a1:f8:18:c0:a8:76:ab:7a:57:f5:a9:7d:02:
                    5f:db:29:bc:ee:3e:ec:cd:97:41:44:5b:e9:c8:63:
                    5f:b1:0f:40:bf:ba:14:ca:8e:21:30:44:76:92:6b:
                    2b:d1:1b:5d:8e:96:6b:82:41:fc:5a:4f:a4:da:a1:
                    dc:f6:0a:75:db:73:95:1c:1f:96:14:6c:ce:bd:e8:
                    fd:5f:ec:9f:b0:b9:b5:48:1f:e4:80:fb:4a:34:c6:
                    79:69:62:6a:09:f4:e3:b1:14:ec:4f:0f:4d:ad:f1:
                    43:81:93:f2:e3:31:f3:17:d5:6c:2f:c9:b5:22:ce:
                    3b:73:39:c9:f5:48:b6:97:dc:d1:b4:32:f1:eb:79:
                    cb:2b:3a:5b:23:60:fe:8a:98:5e:37:a3:da:64:c5:
                    1b:cd:27:39:69:23:67:fe:01:44:cf:db:41:5c:f8:
                    23:9d:72:42:c3:78:8e:09:b2:49:7f:66:55:d9:7a:
                    75:f2:36:86:68:dd:74:e9:74:e0:42:7c:eb:2d:b3:
                    28:43:b5:5f:6f:0a:07:92:cd:6f:90:7d:79:9f:69:
                    12:8b:7a:83:87:6e:79:1f:d4:0f:ca:1e:aa:e8:eb:
                    97:8f:f2:cb:65:08:58:87:80:6c:b9:07:4c:ea:62:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:A8:50:0A:7C:CE:DE:34:88:55:04:7E:21:E6:DE:EF:7E:C7:58
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m3aoUAp8zt40iFUEfiHm3u9-x1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:13:52:48:4d:98:4a:0d:dc:31:16:04:f5:48:aa:0f:f1:4f:
         e4:5d:73:b7:7b:ec:05:62:3a:a9:60:7c:4f:a8:ce:2d:ba:1c:
         08:ed:c1:1b:bb:cd:68:95:08:8c:ac:3d:18:bf:4f:ac:d7:a3:
         39:a6:a7:84:69:2c:42:c2:75:de:de:66:fe:8d:b1:88:3d:9b:
         94:c1:c0:8a:9e:a0:18:e0:2a:bf:12:09:91:b7:80:c5:85:cf:
         16:56:70:4c:48:73:09:32:e7:7e:8f:b4:17:b5:c2:3a:e3:9f:
         77:f3:86:e4:3b:27:ef:30:3f:b2:3c:ee:99:03:24:29:61:b0:
         d8:9e:7f:cf:0e:0a:d5:38:d1:cd:dc:55:40:a9:29:98:05:f4:
         0e:79:bb:50:01:58:e7:3a:d5:cc:db:a8:8d:c3:36:28:ea:3e:
         91:76:42:4b:f3:26:29:c0:53:9e:bb:e5:45:1c:39:03:c6:3b:
         b0:de:26:80:9e:60:34:cf:95:11:cf:b8:e3:11:4c:d7:8e:4b:
         10:40:fe:74:e3:8d:11:33:49:2e:98:1e:1e:77:57:61:1b:ee:
         9c:df:df:71:df:00:1c:e5:68:2f:f4:82:7c:a5:b4:53:05:c7:
         2b:46:0c:30:42:6d:c3:06:0d:b0:a4:8e:1d:56:80:f6:20:4b:
         0f:01:49:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org