Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/F9mG9YByunUGmcgLYiLJ7JsAeoI.roa
File:                     F9mG9YByunUGmcgLYiLJ7JsAeoI.roa (raw, json)
Hash identifier:          SZI/eKFrtjsIYs1/eg8bOdD63FJEcjhQjIgIOeEucrw=
Subject key identifier:   17:D9:86:F5:80:72:BA:75:06:99:C8:0B:62:22:C9:EC:9B:00:7A:82
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       91
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/F9mG9YByunUGmcgLYiLJ7JsAeoI.roa
Signing time:             Tue 18 Oct 2022 02:28:28 +0000
ROA not before:           Tue 18 Oct 2022 02:28:28 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:28:28 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=17D986F58072BA750699C80B6222C9EC9B007A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:b3:ca:2e:04:aa:7e:79:f5:24:aa:0b:b6:
                    43:e7:48:2c:c6:1d:b0:74:b1:7a:a8:59:b3:aa:10:
                    d4:02:e4:20:1f:9d:d0:58:1f:4e:93:a3:d2:e0:6c:
                    ff:16:47:6c:8d:ca:99:66:91:f2:09:05:87:b1:26:
                    bb:ef:96:cb:f5:95:cd:11:e8:13:40:b2:e8:28:a2:
                    85:e9:8f:3b:47:b1:78:5d:6e:21:0b:b1:e6:f0:07:
                    ac:67:3d:39:41:d5:92:38:34:2f:4a:4e:dd:03:fd:
                    76:3d:02:e5:b3:39:59:b5:c3:b5:79:3b:43:62:cc:
                    05:f6:b4:c6:24:b7:35:75:93:b4:3f:35:89:a3:a3:
                    7e:b0:85:eb:8e:8d:1a:7e:ab:15:a5:df:28:eb:12:
                    a1:66:82:e8:26:21:d1:49:1a:79:5e:69:5b:dc:77:
                    1c:31:70:bc:f2:63:4b:3b:04:c1:be:72:9c:9d:4c:
                    b3:d4:9d:b6:63:70:4f:7e:67:96:f7:1b:1d:d7:6c:
                    a5:50:0b:a8:60:82:81:1c:22:a5:af:c2:b4:0a:9c:
                    5f:dd:a7:ac:05:c3:0f:72:51:69:bb:a2:ce:3b:4a:
                    f3:7b:36:5c:af:ab:e8:74:dd:99:4f:36:bd:15:48:
                    28:42:fd:94:e1:ae:e0:5d:8b:33:8d:c5:90:bb:19:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D9:86:F5:80:72:BA:75:06:99:C8:0B:62:22:C9:EC:9B:00:7A:82
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/F9mG9YByunUGmcgLYiLJ7JsAeoI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:96:50:43:50:ea:f2:19:f8:45:f4:5b:85:06:18:c4:ce:cb:
         34:f5:6d:b7:99:67:48:17:ce:7c:5c:85:20:b2:03:4b:98:ea:
         fc:f6:97:d3:b0:bd:9a:e2:1e:27:c7:ae:26:2c:11:11:73:20:
         12:58:56:be:f9:db:00:98:06:3e:e4:90:b1:a8:0a:02:59:00:
         0e:19:c9:b8:99:ef:99:2d:2d:53:82:5e:d5:41:50:d5:46:c8:
         00:73:d2:ed:d2:e2:e0:f9:bb:13:d3:c9:d4:38:2f:50:74:63:
         94:e4:50:77:d8:58:28:e3:ca:e4:aa:b2:d3:9e:13:98:ad:89:
         c9:54:1f:6d:5d:25:3e:0e:10:47:8f:f1:31:c0:76:f8:6b:5d:
         b4:56:be:d4:c1:94:1d:69:94:0e:51:2d:0f:49:98:2e:9c:be:
         ef:31:3a:4c:cb:dc:28:b6:99:1c:08:a3:6a:a4:dd:70:71:4b:
         93:0e:c8:0a:d2:c0:6f:94:8f:05:7f:f7:ec:40:20:5a:4d:32:
         66:1b:7d:97:fd:92:d5:33:5d:45:3a:f4:89:f0:42:42:a6:7d:
         68:25:82:9e:54:03:a7:13:37:24:c5:9e:18:36:56:26:16:a1:
         a0:49:c9:73:2a:43:0d:1a:83:df:2a:51:7d:ff:aa:7d:25:bd:
         52:bf:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org