Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ssteWgnbtKfGdr6FEmNCTNwAGkY.roa
File:                     ssteWgnbtKfGdr6FEmNCTNwAGkY.roa (raw, json)
Hash identifier:          5FIftD+VWRcsBgGMD+uGyqvwhjnrtDXNxSs2/eyGg9g=
Subject key identifier:   B2:CB:5E:5A:09:DB:B4:A7:C6:76:BE:85:12:63:42:4C:DC:00:1A:46
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       014A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ssteWgnbtKfGdr6FEmNCTNwAGkY.roa
Signing time:             Sun 01 Oct 2023 01:33:22 +0000
ROA not before:           Sun 01 Oct 2023 01:33:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B2CB5E5A09DBB4A7C676BE851263424CDC001A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:6d:cb:b1:cf:86:59:f4:e7:26:aa:67:d2:
                    59:f9:d5:16:28:e1:4d:eb:f6:9d:30:56:2f:a4:11:
                    fe:61:9a:ca:93:38:90:dc:c7:3d:be:57:92:c2:4c:
                    08:6c:39:47:78:f0:f8:28:f4:58:67:d4:82:54:20:
                    44:76:51:e7:c6:33:c5:fe:23:3d:35:c2:b0:6d:4d:
                    c4:5b:34:5f:67:69:13:18:60:87:a1:37:3f:b3:f3:
                    d3:41:d7:d4:94:17:d4:90:f3:1f:4f:f0:1f:8b:db:
                    9e:c3:e9:93:de:5b:7f:fd:19:a3:b3:03:20:1a:f0:
                    92:58:01:d5:07:53:85:c1:42:e1:0d:12:1b:24:97:
                    4c:1a:30:13:a8:10:65:fa:78:ab:c4:d4:3d:3b:c0:
                    6d:bd:f7:41:7c:90:51:d0:f6:5d:62:cb:27:f7:30:
                    70:a4:c2:9a:47:f8:35:00:db:d3:6e:aa:4e:4d:bb:
                    a9:07:b2:8c:c9:78:03:85:c2:8f:9c:9a:37:47:70:
                    dc:2a:a0:44:8f:9b:e6:49:fd:f1:c7:c6:a8:ff:0c:
                    d2:17:6c:80:f8:1c:df:ee:f0:9a:25:04:d9:bd:7c:
                    6b:e4:fd:36:1b:83:5a:b3:7e:57:bb:af:57:2d:a7:
                    f3:2d:79:b9:e6:09:4b:40:da:a7:15:4d:ee:73:be:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CB:5E:5A:09:DB:B4:A7:C6:76:BE:85:12:63:42:4C:DC:00:1A:46
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ssteWgnbtKfGdr6FEmNCTNwAGkY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:28:31:cd:93:a8:c5:a7:f6:6e:e6:83:4b:4a:77:cd:80:
         cd:1a:ff:4c:86:77:5f:84:d9:36:ca:f4:04:f2:7f:87:e8:81:
         47:79:c4:54:04:bd:11:54:b2:f6:e4:34:04:f4:30:bc:4c:29:
         37:b4:08:b7:a3:f0:44:2b:51:c5:30:bc:d6:42:1d:9e:03:77:
         53:38:76:f4:b9:82:d0:8b:94:10:e5:f7:7a:bc:f9:b8:43:97:
         30:09:02:85:c7:86:a2:3c:0a:d3:01:ce:32:6a:06:0b:d9:cf:
         d9:d2:e9:a6:dd:ef:13:1f:28:2b:15:a8:d9:1c:bb:02:57:1b:
         a9:24:7e:cd:44:f1:a6:9e:f7:b3:4c:09:fa:9e:71:80:da:da:
         d4:b4:37:1c:de:11:e4:ab:da:af:13:2c:63:c5:5c:0b:a9:a7:
         ed:6f:47:1a:0e:74:30:5b:95:40:b4:96:d4:0a:ae:5f:96:01:
         82:f7:ca:1b:35:8a:50:62:79:3d:95:e9:72:45:50:36:de:ba:
         c9:84:03:48:89:fb:cb:e1:cf:b9:ce:c1:51:39:cb:73:11:69:
         08:3e:3f:bb:73:c3:51:67:c9:11:d5:e2:0b:0f:57:2d:d7:ff:
         a1:4c:57:29:3c:b5:8a:ca:ef:c8:f7:d4:cc:40:6b:40:c9:0a:
         68:ed:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org