Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/41-ST7Ja_hOEE7eOlDIqQJDdXrE.roa
File:                     41-ST7Ja_hOEE7eOlDIqQJDdXrE.roa (raw, json)
Hash identifier:          uHuM6Jcfe56hEz6/F4Z4Ci2ePTnsx774vmDv45EXP90=
Subject key identifier:   E3:5F:92:4F:B2:5A:FE:13:84:13:B7:8E:94:32:2A:40:90:DD:5E:B1
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       89
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/41-ST7Ja_hOEE7eOlDIqQJDdXrE.roa
Signing time:             Tue 18 Oct 2022 02:26:17 +0000
ROA not before:           Tue 18 Oct 2022 02:26:17 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:26:17 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E35F924FB25AFE138413B78E94322A4090DD5EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:f8:ef:23:69:ea:ba:93:24:33:65:12:15:
                    87:ec:23:21:19:e8:65:bf:05:e7:7a:89:76:f8:da:
                    d7:3e:e6:5a:67:32:82:e1:bb:36:19:33:63:0a:ee:
                    7d:90:23:21:8c:80:1b:45:35:d9:80:e0:1f:a3:4d:
                    af:88:15:84:2e:a3:cc:4e:b0:46:8c:7a:8b:e5:ef:
                    10:0b:67:d3:15:2c:bc:74:5c:b7:6d:93:13:94:b8:
                    5b:3b:52:7e:79:16:df:f7:69:78:86:c2:96:5f:cb:
                    93:a4:25:53:c7:d5:aa:26:73:e5:6f:29:3d:d2:fb:
                    2d:ef:6a:e4:ed:d6:7d:ed:cb:40:f4:2f:b2:37:fe:
                    e9:bf:b4:bc:0d:63:0b:6a:68:ff:2a:fd:46:40:b6:
                    6b:3e:75:b0:e9:bb:fd:91:a0:01:33:45:12:f2:f3:
                    60:e1:3d:d3:a3:89:4b:12:bf:24:20:47:db:e1:dd:
                    d8:0e:ee:95:36:04:b7:31:96:f2:85:f2:4a:50:bd:
                    af:14:58:92:7e:88:9a:09:2b:6a:23:32:42:6f:6d:
                    1c:fa:b3:34:4e:79:78:da:46:3c:86:af:86:06:70:
                    ae:15:14:53:ee:f0:3b:16:d9:c7:64:59:d6:46:a4:
                    20:d1:14:e3:b6:c7:03:ff:fa:a6:15:72:32:78:77:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:92:4F:B2:5A:FE:13:84:13:B7:8E:94:32:2A:40:90:DD:5E:B1
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/41-ST7Ja_hOEE7eOlDIqQJDdXrE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:e4:18:cf:16:77:0a:36:84:64:07:7b:14:e2:9d:ae:c7:
         5f:07:9c:d1:77:28:f3:5a:ac:1f:f8:97:c7:88:ee:63:70:09:
         a9:85:79:46:84:e1:63:44:dd:da:51:5a:f7:05:fa:dc:78:81:
         ba:0e:18:37:4b:b6:f6:6a:43:85:9a:01:51:a8:05:72:ce:03:
         9b:21:e8:28:d7:4c:ac:1f:d6:7e:ec:5f:2e:18:aa:88:1a:8d:
         76:6a:13:58:fb:99:c9:75:e5:b0:45:1c:d9:92:a7:ab:19:c3:
         4c:5f:21:71:b9:e9:e9:af:b5:ed:90:b2:61:aa:c0:5a:4e:c0:
         74:12:1f:0d:97:63:57:50:27:90:b4:d9:32:33:c9:d3:b7:25:
         83:40:ae:99:9c:2e:a2:9a:03:e6:b7:8d:62:bd:b8:cb:c3:c9:
         1e:15:33:71:6e:60:d2:c6:05:f9:61:47:cd:09:25:8a:3b:1f:
         bc:ec:2c:a9:97:ae:b4:b2:f5:88:be:1d:69:82:c1:cf:f3:be:
         d5:84:ea:71:73:0b:f3:b9:7f:2b:73:93:22:fc:dd:2a:0f:81:
         3f:66:73:58:2b:b1:06:07:d5:63:d9:13:9e:71:0b:3f:4b:7c:
         22:27:be:34:28:30:7e:fd:6c:a7:96:9e:0d:59:c4:87:8d:f5:
         8b:9c:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org