Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/mNjqaOAzpM2sA5n9k0woLY54ddw.roa
File:                     mNjqaOAzpM2sA5n9k0woLY54ddw.roa (raw, json)
Hash identifier:          Rw4VV3w/fLywSRcuhxndIbHjaS6LYncjm2znSuulOwE=
Subject key identifier:   98:D8:EA:68:E0:33:A4:CD:AC:03:99:FD:93:4C:28:2D:8E:78:75:DC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       8E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/mNjqaOAzpM2sA5n9k0woLY54ddw.roa
Signing time:             Tue 18 Oct 2022 02:26:19 +0000
ROA not before:           Tue 18 Oct 2022 02:26:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:26:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=98D8EA68E033A4CDAC0399FD934C282D8E7875DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:80:8e:17:aa:21:8a:a4:26:56:a2:a1:61:
                    7f:b7:4f:28:70:7e:73:31:e3:a8:fc:b6:e4:a5:a4:
                    24:27:b7:ab:13:ee:67:12:e9:36:40:c0:51:1e:41:
                    d9:7b:df:09:2b:73:70:0a:d7:a4:d0:fe:d9:3e:75:
                    35:17:f9:8b:c5:70:b2:3b:05:e6:ba:a7:7c:44:9e:
                    e2:15:f1:e3:bd:09:6f:68:bd:b8:1f:9f:a0:34:7e:
                    91:62:36:6a:44:c4:6d:c9:cf:19:c0:bb:e4:c0:04:
                    f6:6b:2c:ad:ac:2b:bd:a9:47:70:9c:8f:f8:d4:13:
                    05:f2:6a:5d:20:3c:07:f0:6b:71:80:6c:4b:92:28:
                    2d:7b:f7:28:19:88:7f:5d:57:9c:33:76:00:38:38:
                    55:eb:03:8f:60:b8:f1:7a:14:c1:2f:2f:43:cd:01:
                    72:42:4d:96:ba:8a:3d:bb:0b:24:e6:76:ca:69:e5:
                    bd:41:13:43:da:b5:8a:77:7c:be:56:35:60:35:a9:
                    c9:00:58:d6:7a:e3:ef:39:3c:9a:1d:32:d1:b1:40:
                    5f:21:c3:c1:ce:3d:57:5d:44:be:b0:49:fe:0e:96:
                    8f:c5:fa:11:40:9b:03:8f:01:a1:51:91:87:14:72:
                    97:83:46:d2:69:ce:d4:ea:40:95:b9:ea:15:bb:53:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D8:EA:68:E0:33:A4:CD:AC:03:99:FD:93:4C:28:2D:8E:78:75:DC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/mNjqaOAzpM2sA5n9k0woLY54ddw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:17:ce:1a:63:2c:2b:df:f7:28:76:33:de:83:8f:82:21:f3:
         aa:fd:45:23:8d:e0:e5:4b:b5:54:fb:b6:5a:8c:c3:b4:32:39:
         8a:60:3f:7c:89:cf:ee:8d:8d:82:4c:13:7c:e7:e7:22:28:c4:
         a1:20:96:e2:0f:f4:c8:af:80:19:ef:2e:27:8e:14:8a:cf:18:
         33:c0:28:d4:bb:cf:c1:f3:0e:11:f0:c2:47:24:8f:2c:fc:18:
         25:52:41:50:df:c9:76:50:88:0f:76:67:4f:6d:b1:7d:e0:15:
         36:5a:69:f5:b2:c2:86:2a:ec:ce:97:6a:fb:69:65:03:56:c4:
         77:5f:c1:44:66:60:64:50:c3:7b:a0:a8:8b:cd:39:21:1f:c5:
         75:e1:89:ef:36:95:4d:29:cc:30:13:6b:74:73:a7:e7:14:2a:
         87:f3:86:b2:17:fb:6f:27:52:fa:74:77:67:dc:6e:c3:fd:b4:
         c8:43:17:d1:d6:6b:99:a7:ea:d2:c5:00:26:f2:3b:93:c9:53:
         21:d2:a5:a5:1b:81:c8:37:84:b7:e3:bc:a3:60:ab:84:60:bd:
         8f:42:3c:6c:49:84:5f:8d:42:e1:ae:84:45:af:72:8a:f6:f5:
         50:b5:e7:b7:90:6c:51:52:70:d3:ef:57:51:ac:bd:a7:f0:bb:
         3f:4d:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org