Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/JdOJ6VZdQgmnT_akaIWAq7FNDdM.roa
File:                     JdOJ6VZdQgmnT_akaIWAq7FNDdM.roa (raw, json)
Hash identifier:          03pJ5Zz21r2/aPmCeqsO/CRZ1lFWf52PNl1B7+vYado=
Subject key identifier:   25:D3:89:E9:56:5D:42:09:A7:4F:F6:A4:68:85:80:AB:B1:4D:0D:D3
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       66
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/JdOJ6VZdQgmnT_akaIWAq7FNDdM.roa
Signing time:             Tue 18 Oct 2022 02:14:12 +0000
ROA not before:           Tue 18 Oct 2022 02:14:12 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:14:12 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=25D389E9565D4209A74FF6A4688580ABB14D0DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:81:84:a1:b7:a4:75:85:a6:2b:e4:bc:ed:
                    fa:a7:1e:ac:9f:c3:e4:73:68:cc:e2:db:6f:dd:fa:
                    60:0d:cc:93:8a:46:ed:51:20:3d:08:c0:52:a8:ba:
                    03:bc:9d:a4:83:13:f9:83:76:bd:ef:05:64:60:0e:
                    ca:5a:be:76:e9:af:4a:87:df:27:d4:a1:14:65:ac:
                    e0:f8:0e:aa:25:03:5f:76:27:b2:f4:2d:db:96:88:
                    1a:68:b5:3d:7f:28:2f:43:6f:19:18:a1:0f:87:10:
                    31:d7:60:5b:43:13:01:a5:72:1b:81:bc:8e:f8:66:
                    3a:61:32:98:9c:7c:c5:7a:6c:70:ea:8e:32:3b:b9:
                    7a:14:e1:7c:d8:9d:82:9e:c8:b0:1a:75:3d:26:e0:
                    26:a8:6f:41:9e:4c:82:8b:4b:8c:ee:16:1d:17:47:
                    4a:0d:89:10:f6:89:a4:9b:53:a8:08:8a:1e:7b:c1:
                    64:0c:a9:16:4f:11:6a:13:06:f8:a5:da:5d:2b:0b:
                    20:d0:82:77:1f:95:75:49:22:aa:19:6c:a8:e3:ab:
                    76:9e:3c:78:6e:f8:45:f9:95:42:28:81:d9:07:bb:
                    8e:91:27:ef:f4:b5:18:c2:e8:dc:59:2b:59:db:0e:
                    c3:35:47:0e:b7:96:93:73:af:f1:69:bf:5a:8f:b4:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:89:E9:56:5D:42:09:A7:4F:F6:A4:68:85:80:AB:B1:4D:0D:D3
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/JdOJ6VZdQgmnT_akaIWAq7FNDdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:56:be:41:7f:71:77:ba:bd:e1:a0:93:96:86:db:4d:6f:
         6a:de:c0:44:dc:b5:f2:96:7f:77:10:08:bb:0f:71:6a:63:6d:
         d1:7b:78:fb:42:cb:6c:ca:94:f6:3d:46:3c:35:06:92:0d:a2:
         ad:9c:c4:c6:10:fd:75:ab:95:d0:6f:0b:58:b2:86:e6:c7:03:
         ab:ee:34:7e:de:35:23:0c:ea:a6:21:6c:95:3b:03:ac:db:e6:
         7f:b3:d6:12:3b:d2:83:d0:5d:14:90:06:e7:cd:a5:7c:de:c2:
         cc:88:0f:de:2c:97:39:75:69:2d:20:cc:5f:4d:8d:f1:b6:cb:
         c8:de:e1:53:4f:ee:d3:61:b3:ea:b9:3c:7c:b8:c1:23:c2:db:
         da:85:30:89:8b:ea:f0:82:d2:05:f8:58:e3:8c:f6:7c:03:cd:
         2e:be:20:38:4f:af:8a:fa:81:e7:7f:33:61:05:78:dd:a4:08:
         82:4a:ce:3d:21:6b:3d:f3:c9:f6:76:ae:5d:59:46:8c:88:2b:
         fb:3b:f5:b4:f0:87:73:cc:72:1e:f0:91:e3:fc:98:2a:69:de:
         34:5c:d6:07:d1:7b:62:58:cf:13:fc:b8:76:4a:29:cc:76:79:
         e4:4b:e3:d1:25:d8:cc:fa:e0:86:4b:f2:4d:80:82:0d:34:6a:
         54:f2:4e:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org