Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/swLdwNFv6kX8ugL99EyfFYSGa7o.roa
File:                     swLdwNFv6kX8ugL99EyfFYSGa7o.roa (raw, json)
Hash identifier:          hucyCQBDKK/yBGi1B+8FUdRjYzDpbTvmjHHB4YNv9o0=
Subject key identifier:   B3:02:DD:C0:D1:6F:EA:45:FC:BA:02:FD:F4:4C:9F:15:84:86:6B:BA
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       8F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/swLdwNFv6kX8ugL99EyfFYSGa7o.roa
Signing time:             Tue 18 Oct 2022 02:26:19 +0000
ROA not before:           Tue 18 Oct 2022 02:26:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.254.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:26:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B302DDC0D16FEA45FCBA02FDF44C9F1584866BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:86:d4:de:9b:e5:47:fe:f6:7c:8b:99:3c:
                    47:b1:f9:45:a7:11:02:38:4a:3d:15:98:bc:da:ef:
                    fd:de:e9:25:a5:37:43:e2:8e:7d:ee:1e:44:83:2e:
                    03:e9:ee:9e:4a:4b:aa:25:65:56:76:5f:cf:19:bd:
                    c4:58:0c:6e:85:58:4c:f7:66:4e:7d:5d:c4:ba:4d:
                    27:4a:1b:41:b4:10:bf:5e:66:be:d1:1c:52:eb:66:
                    24:ca:f4:7c:fe:cd:f2:b8:b0:aa:30:05:31:64:6f:
                    44:05:37:2c:5d:3f:e6:11:6f:7b:63:4e:a0:17:e9:
                    5e:aa:fb:6c:44:10:4e:35:c2:1e:2f:ed:a9:4f:ff:
                    94:39:53:b4:1b:b8:1e:51:5a:c9:33:0f:ec:62:b4:
                    22:da:30:1d:e7:b4:d9:e9:00:dc:3d:63:ca:a1:9e:
                    d2:b7:ad:68:20:27:79:f4:37:07:5f:89:02:fe:7b:
                    5a:ac:a0:f0:e4:b0:3b:af:fd:61:75:75:37:a4:b4:
                    37:ff:d9:90:d2:63:d2:6d:da:5a:98:5c:51:e0:ea:
                    ca:dc:32:d5:33:57:cc:f5:96:81:6f:cc:8f:6f:da:
                    eb:74:82:ba:56:5b:ff:fd:f3:60:0d:c6:d1:ea:fd:
                    39:42:de:b2:cb:5f:4c:e2:9f:9c:a4:04:32:f5:4f:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:DD:C0:D1:6F:EA:45:FC:BA:02:FD:F4:4C:9F:15:84:86:6B:BA
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/swLdwNFv6kX8ugL99EyfFYSGa7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:00:a9:12:a8:78:66:f0:16:08:0e:da:4e:96:90:7b:7a:fe:
         32:21:bf:d6:d8:35:b2:47:08:c0:c8:a7:66:b3:9d:cc:6a:e0:
         c8:2b:9d:5e:fa:d5:36:4f:2f:27:18:91:e5:d0:7a:d7:4f:7b:
         ce:11:b0:39:7e:36:02:87:b6:c3:02:c9:16:2d:a2:ef:0b:3f:
         45:ff:d3:c3:2f:73:ee:11:9f:91:bf:22:d8:12:5e:ff:aa:52:
         8b:dc:be:6b:b4:af:49:11:af:4f:18:51:0a:b2:a6:d7:7b:26:
         32:b3:c5:c6:e8:f0:2a:f3:6c:45:4c:20:3f:0b:03:3d:e9:69:
         ba:50:69:8f:bf:82:40:25:f3:c5:61:0f:dd:ae:46:da:a0:b4:
         9a:e5:9a:65:1f:3c:40:8b:6b:73:55:9d:da:3c:e5:a0:0a:4d:
         ee:f1:9c:cd:65:d6:3c:fe:c4:6f:b4:9a:c1:03:67:6b:0d:08:
         d7:62:90:95:89:e2:ab:a6:6e:7f:b8:3b:83:6a:15:3b:d9:7d:
         19:93:ad:9d:e6:c1:02:5b:a2:3d:6d:48:83:31:1a:85:54:4b:
         6e:f9:48:88:87:4a:4d:e2:ef:8a:5c:8f:f0:5d:30:86:ae:5e:
         9d:b8:1b:6c:92:36:04:ec:2f:69:38:09:fb:e3:a9:2b:b6:35:
         fb:48:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org