Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zSxSXgWU46Yph7gYPYanlkFLwBs.roa
File:                     zSxSXgWU46Yph7gYPYanlkFLwBs.roa (raw, json)
Hash identifier:          voW4jgQd+hm4eolej2bvvW+eTy5JrTd1nulJVJ1JiSo=
Subject key identifier:   CD:2C:52:5E:05:94:E3:A6:29:87:B8:18:3D:86:A7:96:41:4B:C0:1B
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       9A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zSxSXgWU46Yph7gYPYanlkFLwBs.roa
Signing time:             Tue 18 Oct 2022 02:30:23 +0000
ROA not before:           Tue 18 Oct 2022 02:30:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:30:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CD2C525E0594E3A62987B8183D86A796414BC01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:9f:f9:ff:2e:6a:ae:6a:c6:e3:19:d6:3f:
                    23:8f:4a:a1:30:40:9a:6d:c5:f3:4e:a4:3f:eb:f6:
                    74:a2:56:3f:b3:f5:4a:de:a3:af:37:15:cb:32:4f:
                    f9:39:95:01:23:9d:c5:15:ef:63:79:1c:7f:ed:29:
                    47:97:c2:cd:26:b4:15:97:38:b5:27:a0:99:c0:9e:
                    a7:09:98:ad:26:5b:a8:b8:0e:e5:af:51:68:27:de:
                    82:13:f2:f6:31:93:68:d9:1f:03:10:37:2c:b7:c3:
                    71:eb:6f:71:0d:ea:83:66:7e:84:5f:35:0c:96:6f:
                    66:eb:d1:5c:b7:80:32:79:76:d1:ee:45:4a:97:e5:
                    4e:0b:27:8b:d2:f1:5c:79:11:e2:81:ce:9e:0c:43:
                    83:1d:96:f6:b8:bc:d8:5e:68:5e:92:f8:b1:c8:0a:
                    c2:52:76:ea:38:d3:c7:43:dd:db:90:b6:b1:94:95:
                    54:a7:cf:a5:47:25:1b:01:b7:7a:b1:6d:5a:aa:fd:
                    cc:24:0d:5e:0d:e0:2e:36:be:89:91:88:45:af:be:
                    1f:49:bd:92:9a:a0:cc:69:1c:a8:e7:6b:9d:09:c4:
                    76:d8:05:21:6e:16:32:52:8e:e9:9c:8f:71:c1:93:
                    81:77:80:bd:a8:c1:0e:d4:04:ac:b9:34:af:ab:d7:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2C:52:5E:05:94:E3:A6:29:87:B8:18:3D:86:A7:96:41:4B:C0:1B
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zSxSXgWU46Yph7gYPYanlkFLwBs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:db:5c:2d:13:6c:2c:1a:9b:ed:61:09:fa:0e:55:b6:5d:f1:
         b9:83:97:18:aa:4a:1a:f0:57:1a:18:c6:79:7a:62:63:8f:56:
         e3:e1:5e:aa:57:8f:e2:a2:85:74:9d:1b:e1:12:74:46:92:0a:
         33:37:ec:60:49:3f:35:0b:b7:24:5f:fa:f8:9d:ef:34:df:0a:
         b6:b1:20:b4:9d:7b:49:33:0f:38:7d:b6:78:db:f7:07:4f:48:
         6e:ce:f0:bc:5f:a3:56:75:5b:8d:e5:0e:ca:c8:8e:3c:a6:86:
         fd:21:30:10:a6:fa:8d:49:7c:cb:2b:91:98:4b:8b:1b:3b:aa:
         25:99:eb:da:e9:90:25:03:07:4f:76:20:4e:22:b6:f0:39:6c:
         6a:f6:a5:5b:90:f7:c8:24:be:27:9c:c8:7d:36:ad:1a:ce:bd:
         c0:fe:9f:07:6f:f6:b0:f2:80:f5:cf:cb:c6:0f:15:f0:f8:28:
         ab:88:c5:79:a0:e6:24:70:55:51:11:1b:65:89:2c:22:d4:60:
         a1:a1:75:80:8b:e9:56:ad:62:0f:66:e1:d5:ad:df:22:1c:bf:
         9a:4c:27:25:d7:37:12:e5:f1:a2:cd:b2:c8:53:16:52:a3:f1:
         b4:6c:49:40:87:fb:27:73:35:71:23:91:37:f3:b9:90:a9:ad:
         64:e3:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org