Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3Aq0Ql28JHZy9QUDZoozDN29dsA.roa
File:                     3Aq0Ql28JHZy9QUDZoozDN29dsA.roa (raw, json)
Hash identifier:          EhvVDyW+HoWxttKNFIc3Y+563PZG4NUDU6Z0Ca4LIrg=
Subject key identifier:   DC:0A:B4:42:5D:BC:24:76:72:F5:05:03:66:8A:33:0C:DD:BD:76:C0
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       6B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3Aq0Ql28JHZy9QUDZoozDN29dsA.roa
Signing time:             Tue 18 Oct 2022 02:16:13 +0000
ROA not before:           Tue 18 Oct 2022 02:16:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:16:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=DC0AB4425DBC247672F50503668A330CDDBD76C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:7c:a7:e6:2c:b6:75:86:51:7b:04:88:1b:
                    a6:23:12:53:aa:5d:90:1f:2f:d3:20:40:66:f5:85:
                    47:69:af:cf:27:b5:69:26:e4:cb:9c:37:25:ce:29:
                    48:13:b0:77:d5:95:d8:d7:8e:b5:24:07:aa:2f:f5:
                    1d:a0:32:a1:b0:e2:11:32:ac:4c:fa:d1:37:2c:b6:
                    f0:bd:6d:9b:d4:39:c2:b3:08:c7:85:28:01:5c:44:
                    66:98:68:93:17:56:ac:0a:23:7c:00:aa:ca:c6:04:
                    49:7c:b0:94:84:f4:8c:53:4a:55:6b:68:43:10:ae:
                    08:4a:6d:d3:06:ee:90:7d:d4:de:7b:ee:d9:36:00:
                    39:2e:5b:b5:20:b9:b6:52:2d:75:2e:b7:4a:3f:46:
                    75:31:eb:54:c1:35:85:f4:01:2e:d5:6b:33:f8:91:
                    de:19:db:08:e0:db:76:06:ed:b0:f1:5c:81:90:16:
                    c6:84:20:c3:15:a1:22:97:f8:5a:73:1a:fb:d5:e0:
                    12:6c:03:45:83:9b:9b:63:af:db:03:ee:17:b6:2d:
                    04:18:1a:99:0f:e5:7c:ff:d5:8b:d8:06:d8:c7:4e:
                    e1:dd:64:6f:7f:ab:f8:56:88:96:c1:3e:35:c1:de:
                    18:11:49:d5:cd:52:8a:f2:c9:57:a3:6e:ef:89:ee:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0A:B4:42:5D:BC:24:76:72:F5:05:03:66:8A:33:0C:DD:BD:76:C0
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3Aq0Ql28JHZy9QUDZoozDN29dsA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:80:96:eb:22:13:40:a1:00:ed:f3:79:12:69:a2:62:40:62:
         32:32:53:a2:79:4a:6e:38:20:20:7d:dd:5b:c6:c6:a1:81:c9:
         9f:b6:ea:07:6f:fb:9b:d9:9b:da:80:47:6b:e5:03:fb:8b:28:
         13:a2:d7:9e:e2:50:06:b3:ef:d0:ae:5a:a1:d7:2e:29:c5:e6:
         9c:ef:1f:e8:bd:44:1b:6e:4b:47:bb:7d:3a:2c:4e:56:81:be:
         1e:f3:a2:6e:8c:f0:a9:4e:b2:3d:ba:df:e3:94:eb:ae:be:5f:
         b7:65:cb:1c:20:6b:66:8d:85:51:43:d8:c9:2c:12:5e:c9:8c:
         ee:04:62:8a:30:d9:cc:a9:da:c4:8b:76:6f:b6:7d:13:b1:4b:
         6d:42:77:47:2c:3f:6f:c1:d3:34:0b:b9:e0:c4:ce:a5:17:f5:
         da:29:04:c4:68:b9:f2:3b:35:d0:06:90:72:40:e9:1a:8b:ad:
         03:45:d6:27:9d:c7:53:2d:5f:7d:54:86:2f:7e:70:af:76:d0:
         ff:d1:d5:5a:2e:43:b8:41:c8:f2:c6:55:31:ee:b5:af:df:e9:
         97:1b:85:50:14:e5:90:d6:0a:27:b3:65:c9:ed:d4:11:43:f5:
         85:df:ed:c2:85:cd:00:06:31:14:6d:eb:dd:27:f3:b8:e5:cb:
         ce:5e:5a:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org