Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/tNlsXF4hZ6IAi_-Hj6t-yf_jLII.roa
File:                     tNlsXF4hZ6IAi_-Hj6t-yf_jLII.roa (raw, json)
Hash identifier:          KEaqaLwKu0Et4xA4Sto6f6Mg3yLvhnp93Rjj76AFFQk=
Subject key identifier:   B4:D9:6C:5C:5E:21:67:A2:00:8B:FF:87:8F:AB:7E:C9:FF:E3:2C:82
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       B2
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/tNlsXF4hZ6IAi_-Hj6t-yf_jLII.roa
Signing time:             Tue 18 Oct 2022 02:38:26 +0000
ROA not before:           Tue 18 Oct 2022 02:38:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.9.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:38:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B4D96C5C5E2167A2008BFF878FAB7EC9FFE32C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:7f:ce:75:39:5c:87:e5:41:6f:94:89:a2:
                    ec:8d:79:c3:66:1e:db:08:33:f3:1d:bf:9b:9f:d0:
                    c7:b8:a5:c6:b1:20:82:93:47:f7:b5:fc:51:38:e7:
                    95:25:90:d4:80:b5:d9:e5:59:a5:11:90:3b:a2:49:
                    5f:26:e5:d1:88:40:ad:eb:e7:cb:e9:26:3a:86:27:
                    39:58:63:1a:4c:59:44:14:77:74:e9:42:c8:01:d3:
                    44:97:80:74:b3:11:63:f1:74:df:ec:c1:8c:5b:ba:
                    f0:4c:61:70:6b:2f:da:58:d1:00:23:60:0a:ab:d2:
                    d8:d4:6e:2e:5a:04:69:52:a8:f3:23:4c:16:4b:9b:
                    3c:32:e5:71:20:96:69:31:7a:d8:e3:cc:a5:91:82:
                    84:ae:2d:04:b6:a3:ff:ff:a3:32:b7:a6:d8:dd:7f:
                    b2:3f:fd:be:9e:7b:6c:eb:bc:91:98:a1:d7:c5:8a:
                    ca:ab:be:7f:61:f2:a7:25:47:19:d9:04:3d:26:ff:
                    77:4f:7b:8b:86:76:ae:38:63:e8:e8:d1:19:7c:fc:
                    d4:88:db:97:b6:7a:e5:ae:91:7a:5b:bf:64:da:9e:
                    fd:20:65:fa:3b:8d:be:44:85:5f:b8:99:db:ff:7a:
                    26:ec:04:b4:f0:85:92:b0:ed:e3:c2:81:7d:37:ee:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D9:6C:5C:5E:21:67:A2:00:8B:FF:87:8F:AB:7E:C9:FF:E3:2C:82
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/tNlsXF4hZ6IAi_-Hj6t-yf_jLII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:d7:09:cc:a2:72:38:c1:db:4b:b7:56:44:de:2b:24:76:
         a7:98:10:95:f7:9b:cd:f1:19:ad:ea:eb:4e:3f:33:0a:24:83:
         63:75:2a:aa:13:05:b3:31:6c:53:ce:e7:fc:8d:4a:b7:70:b1:
         fe:7e:99:5f:3a:67:7f:2a:17:5f:99:cd:90:86:29:8d:2f:76:
         7f:00:30:9c:40:52:69:be:ce:d3:9a:3f:32:a4:49:04:09:93:
         ac:79:72:ff:0a:e3:89:5c:25:2a:97:9a:b6:c4:2a:bd:5f:2f:
         b6:e4:f5:6d:c2:81:29:54:23:da:53:b3:37:17:a7:60:f9:21:
         a3:d2:89:ba:e5:31:e6:c6:3e:55:1d:8c:50:53:0e:10:08:e9:
         98:6f:c5:54:8c:bd:bf:e6:3a:3a:98:59:5d:7d:c3:9e:07:ce:
         96:57:59:8a:fe:91:53:e9:6e:03:8e:f1:2c:c2:a0:6f:db:83:
         f2:b3:9a:d0:3a:cf:22:9b:20:67:9c:56:c6:b6:cd:3e:00:10:
         ce:e3:52:bc:eb:f8:f0:95:12:e6:7a:b1:c3:3a:c2:a0:a9:5b:
         ce:3f:eb:11:1b:4e:f6:e8:07:77:99:c3:c3:67:d5:5b:6a:cf:
         a8:e0:72:b5:31:dc:43:24:0c:1d:da:da:91:b0:0b:92:6b:9a:
         6e:f9:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org