Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/wIGznw_WIwkIareTTpVuC0lKAIs.roa
File:                     wIGznw_WIwkIareTTpVuC0lKAIs.roa (raw, json)
Hash identifier:          h1+eclULl6EaYkZTfVeuRkOvxmtrWz0qxzwSlOk+c7Q=
Subject key identifier:   C0:81:B3:9F:0F:D6:23:09:08:6A:B7:93:4E:95:6E:0B:49:4A:00:8B
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       7E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/wIGznw_WIwkIareTTpVuC0lKAIs.roa
Signing time:             Tue 18 Oct 2022 02:20:20 +0000
ROA not before:           Tue 18 Oct 2022 02:20:20 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:20:20 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C081B39F0FD62309086AB7934E956E0B494A008B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:cb:80:ef:9d:b9:20:b3:73:70:89:88:6f:
                    f2:4d:de:e0:c2:74:df:c8:ee:7e:69:2f:24:30:71:
                    75:08:2b:10:af:0e:31:f3:34:d0:b0:35:f3:2a:32:
                    90:9f:59:a9:f0:42:49:0e:e7:6d:61:68:b4:4f:8d:
                    d4:91:b1:e1:1a:ca:5c:ee:99:b9:25:5c:38:4c:6c:
                    c5:b4:57:b4:31:62:8b:6f:1d:76:9b:73:76:e2:1b:
                    6e:9a:81:6d:43:2a:37:bb:83:30:b6:75:34:e9:f2:
                    b5:5e:cc:a5:d1:44:f2:e1:c6:b6:5f:6c:79:b9:47:
                    e8:b5:ba:65:bd:52:0c:88:a0:e2:64:64:84:aa:d8:
                    0d:26:f5:3d:dd:50:1b:73:3b:c5:0f:f1:bd:4d:65:
                    4c:73:5a:99:3e:82:5d:bf:85:d5:6a:23:bb:a0:a6:
                    eb:f5:69:b2:30:21:93:5a:f8:d7:ab:fb:9e:94:69:
                    bc:d0:be:8a:10:4d:71:6c:e7:1e:17:7c:33:f7:e9:
                    89:09:04:02:1b:35:99:48:11:50:43:08:fa:ba:9e:
                    06:87:9f:58:df:c1:d1:36:46:3d:fe:d9:ad:a1:dc:
                    5b:b7:a5:36:65:88:5c:03:aa:5f:38:4b:9a:31:dc:
                    39:08:53:5f:bd:67:95:f7:a8:21:6d:e7:c0:81:2f:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:81:B3:9F:0F:D6:23:09:08:6A:B7:93:4E:95:6E:0B:49:4A:00:8B
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/wIGznw_WIwkIareTTpVuC0lKAIs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:49:84:ce:f9:42:54:a2:8b:f0:4f:7a:03:c7:55:9d:63:e9:
         e2:ee:c4:7f:3b:5b:6b:65:24:05:ed:85:29:7f:fe:e2:0d:8d:
         ed:4c:47:70:c1:1b:82:e8:1a:96:ba:38:d9:51:ae:4f:a9:c9:
         6f:cc:63:33:f5:83:cd:86:ef:44:53:b2:48:c3:07:06:cf:8d:
         65:3a:58:36:78:47:d7:80:31:94:9a:62:47:e5:22:de:d5:cc:
         56:99:8d:53:5c:29:4d:cc:84:47:7d:73:b2:aa:fc:76:94:b1:
         92:34:9e:62:ee:6a:f9:70:6c:d2:59:71:c8:4b:56:e2:03:50:
         98:9d:0f:b3:1d:b8:a3:57:9d:c3:b0:63:da:1d:ee:88:a9:5e:
         78:8d:63:81:4e:e9:7a:c2:ad:fa:63:e5:2a:c5:4d:54:c4:ed:
         ee:6b:cc:84:52:25:81:ea:d0:f2:37:f4:90:15:47:03:30:aa:
         4a:0c:6a:a5:d0:a8:12:c2:28:e7:bc:d6:ef:fe:0e:20:0b:a3:
         cc:61:03:68:9c:d0:b7:3c:e2:e1:bc:24:eb:93:97:06:eb:48:
         32:a1:7b:5b:7e:a7:f2:12:41:23:ff:c9:25:f0:85:8f:d1:80:
         86:2d:23:d4:c7:ff:fd:74:b5:d6:b2:e1:0c:76:9e:c3:b0:32:
         7c:18:b1:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org