Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/srF3-_R-ThToq8_q5At0HWOGmAI.roa
File:                     srF3-_R-ThToq8_q5At0HWOGmAI.roa (raw, json)
Hash identifier:          DvGng7FPaC8eKFRfgyHtPw7YT9DTAUzS87afS4vna+Y=
Subject key identifier:   B2:B1:77:FB:F4:7E:4E:14:E8:AB:CF:EA:E4:0B:74:1D:63:86:98:02
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0155
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/srF3-_R-ThToq8_q5At0HWOGmAI.roa
Signing time:             Sun 01 Oct 2023 01:35:44 +0000
ROA not before:           Sun 01 Oct 2023 01:35:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.125.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B2B177FBF47E4E14E8ABCFEAE40B741D63869802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:b1:76:9c:c0:d7:5a:9a:49:f1:d7:b6:64:
                    c1:b3:bf:a2:1f:dd:80:9b:86:41:84:f6:20:76:61:
                    5b:f9:46:a2:68:0b:b4:2e:55:70:94:ea:15:0e:58:
                    38:7e:2f:47:c8:21:d0:20:b5:04:06:00:f5:14:db:
                    84:42:d7:26:1b:b6:be:5d:26:16:b1:41:71:0d:73:
                    d0:6a:40:4f:49:56:d2:0d:2f:57:91:c9:77:87:98:
                    b0:cf:d1:0c:f5:ec:1a:b7:b0:4d:5e:cb:9a:93:db:
                    09:9b:f3:9c:cf:95:06:05:e6:02:c3:07:2b:56:24:
                    da:04:98:22:ad:3e:78:18:0a:55:8a:1a:a8:63:99:
                    9c:4c:bf:b6:4b:da:e2:fb:ee:2b:67:ed:57:25:38:
                    0b:6e:f3:15:21:2e:57:27:37:72:5d:3f:af:04:58:
                    c4:c6:61:17:91:e3:c6:93:75:6d:de:27:46:8d:a3:
                    e5:22:c6:16:1b:d1:27:cb:78:41:52:cc:e2:e2:48:
                    01:97:14:61:07:ef:e3:e8:be:06:a4:23:17:10:fe:
                    82:ed:83:fe:30:94:87:f6:48:dd:3b:19:cc:7a:4c:
                    a5:27:74:13:75:de:eb:77:e3:27:d7:bb:c3:9c:e9:
                    bf:2d:6f:cb:a1:c4:f5:9b:58:1a:d5:c0:ec:f5:4a:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B1:77:FB:F4:7E:4E:14:E8:AB:CF:EA:E4:0B:74:1D:63:86:98:02
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/srF3-_R-ThToq8_q5At0HWOGmAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:5d:cf:52:68:89:d0:cd:7a:b1:90:5a:a0:b8:ae:54:82:c6:
         f6:24:ee:92:5c:2a:74:3a:c2:28:3f:b0:ea:bb:fd:f0:06:40:
         4a:81:a2:07:b6:1a:d0:2b:c0:ff:25:db:95:fa:2f:a0:26:76:
         c0:29:ca:08:28:34:fe:db:6c:50:52:f8:0e:5b:66:3f:76:55:
         cc:2c:48:f1:8a:77:10:4a:f9:3f:ae:8f:3c:3d:43:62:29:01:
         ef:e6:47:9f:2b:95:63:95:ec:e6:fb:86:6e:37:1e:78:ca:8c:
         13:9e:72:59:6a:61:19:37:e3:11:b8:9b:46:eb:ff:b1:24:8f:
         c0:d1:56:05:de:b7:29:9e:e4:a3:2f:12:52:21:fe:f5:be:18:
         90:aa:68:9d:e4:d1:98:cb:2e:94:57:bb:66:b6:a5:77:1b:53:
         60:23:18:0d:48:1d:a6:60:cf:2b:b8:45:fb:47:b3:21:bb:80:
         f6:79:80:4b:9e:94:29:ee:8b:1a:a2:24:13:25:46:27:a3:02:
         6a:3d:3d:25:dd:77:cf:da:ca:01:0f:aa:89:3e:76:86:5f:b2:
         ed:cb:38:8b:9e:0f:4c:dd:bd:c3:4a:40:b3:ae:88:25:b4:ff:
         5f:b6:a4:71:aa:7c:f4:79:fd:9a:50:7f:e7:82:76:4c:5c:1e:
         ba:07:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org