Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/yBFiVqcKEipdDozVtQfgQ-Hdwiw.roa
File:                     yBFiVqcKEipdDozVtQfgQ-Hdwiw.roa (raw, json)
Hash identifier:          w0j3c2hMgEpov8LNSpEp4qlzmw+yR+xeHlNzyk7PLMQ=
Subject key identifier:   C8:11:62:56:A7:0A:12:2A:5D:0E:8C:D5:B5:07:E0:43:E1:DD:C2:2C
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       A0
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/yBFiVqcKEipdDozVtQfgQ-Hdwiw.roa
Signing time:             Tue 18 Oct 2022 02:32:20 +0000
ROA not before:           Tue 18 Oct 2022 02:32:20 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:32:20 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C8116256A70A122A5D0E8CD5B507E043E1DDC22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:47:0d:df:ec:5e:c1:34:2e:27:ca:00:32:69:
                    f8:91:53:f1:a7:68:4a:d8:b6:bc:62:10:95:0f:09:
                    e3:a8:c4:40:0b:51:95:3d:81:c5:ea:d9:dd:89:55:
                    c6:dd:95:5e:1b:92:83:11:2e:2a:59:23:e3:65:89:
                    02:34:5c:d4:50:fa:12:51:75:b8:e1:2e:f0:73:0d:
                    a5:19:5e:3f:d1:c8:42:ec:33:4a:57:74:08:34:33:
                    3c:df:d2:ed:76:d3:6f:20:c7:cc:c6:b9:48:e9:2f:
                    6d:92:fe:af:4e:42:20:9a:ca:c5:73:5d:70:e5:f8:
                    b6:6e:aa:72:fa:0c:ed:d3:af:cc:18:c7:8c:f3:a7:
                    93:bd:e8:37:6b:84:73:47:0f:5e:6e:23:fb:98:cf:
                    83:fc:88:94:d9:79:33:a0:70:da:27:d6:54:3f:f4:
                    4e:8a:00:ee:2f:46:cf:d6:0b:a0:14:88:e8:f2:3b:
                    94:d8:50:26:2b:3a:02:50:a3:8a:7e:af:d4:b5:32:
                    f8:7f:aa:ac:e3:9d:6d:f3:3c:3b:ec:de:32:f4:f2:
                    3c:36:00:f2:48:5b:ae:24:40:27:01:4b:42:24:9b:
                    b2:b7:d2:c5:2d:82:a4:d1:c4:43:2e:fa:7b:1d:69:
                    f1:65:52:2c:06:da:a8:a2:37:60:da:c5:1a:44:61:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:11:62:56:A7:0A:12:2A:5D:0E:8C:D5:B5:07:E0:43:E1:DD:C2:2C
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/yBFiVqcKEipdDozVtQfgQ-Hdwiw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:13:20:a0:a7:ea:59:30:97:d8:92:d7:54:65:cf:42:f5:
         24:1b:28:7c:ce:d6:b7:66:ba:76:c1:fa:f9:e7:ab:df:a7:b2:
         51:4b:b4:ac:6f:a8:69:eb:42:d4:99:72:39:7a:41:ee:53:b4:
         04:3b:16:29:d4:41:04:d7:23:3c:d7:b2:aa:16:3a:5d:1e:8e:
         7e:c9:b1:cc:71:ab:d8:8e:af:d5:22:56:e5:7e:86:0d:62:6c:
         01:33:07:eb:10:1f:d8:81:8b:2a:75:3b:96:c5:85:1f:91:83:
         71:30:bd:17:79:b2:c5:69:47:8b:02:1f:73:f6:bb:5a:1c:cf:
         3d:5b:8b:10:c4:2f:21:52:43:ab:e5:ce:ee:84:9c:90:5a:63:
         5d:68:11:38:f9:af:00:fe:45:bc:5f:ed:5f:b3:fe:33:70:66:
         2f:15:c8:75:13:6d:d1:22:28:5e:12:2f:ea:55:96:fb:4e:73:
         1c:aa:bb:ba:5c:5f:54:15:f7:7d:6b:ae:8d:d4:76:34:82:d1:
         a4:a3:bb:89:b7:ef:79:75:2f:bd:6a:e4:6e:be:0c:ab:ba:a1:
         70:b8:21:ba:7b:a2:a6:7a:61:de:6f:c7:03:ef:bb:b1:f5:ad:
         2b:9d:8f:39:fb:c8:ba:09:64:a4:8a:fb:94:a6:94:23:ba:dc:
         d2:ed:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org