Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NoWxL-6XrnHoXf03LI1zvsqy_rk.roa
File:                     NoWxL-6XrnHoXf03LI1zvsqy_rk.roa (raw, json)
Hash identifier:          F8CGuGO97g6SgUCocSVB43sslOKMREacokN2yitSbWw=
Subject key identifier:   36:85:B1:2F:EE:97:AE:71:E8:5D:FD:37:2C:8D:73:BE:CA:B2:FE:B9
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       32
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NoWxL-6XrnHoXf03LI1zvsqy_rk.roa
Signing time:             Tue 11 Oct 2022 09:34:18 +0000
ROA not before:           Tue 11 Oct 2022 09:34:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.141.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:34:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=3685B12FEE97AE71E85DFD372C8D73BECAB2FEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:15:95:b7:8a:fb:f3:e6:b2:56:aa:5e:e4:9b:
                    64:4c:df:59:ff:0f:2f:5d:9e:d1:8a:a2:c9:e3:1d:
                    d2:b0:c3:b1:ea:c2:62:5e:43:e8:7d:ef:5e:89:60:
                    5d:db:ec:d6:18:62:09:1a:af:0b:2a:1c:ff:8f:2d:
                    a6:46:fd:7f:a8:f4:ea:46:5d:9f:53:a8:e9:87:f5:
                    72:6e:67:39:af:8a:95:2d:3d:75:ae:b9:90:d2:19:
                    fb:3b:db:8b:3d:cf:43:cb:81:ba:7a:57:a3:6f:11:
                    ef:43:0b:25:ff:41:42:8c:66:37:28:89:fb:89:d5:
                    d2:12:2f:0f:d8:1c:6d:c6:e6:97:1f:95:8f:56:02:
                    d3:17:6a:f4:d2:1b:66:c0:64:33:eb:a4:c1:80:d5:
                    07:e1:67:f3:aa:0a:3b:4d:3a:e4:65:4f:59:f6:26:
                    7a:ee:f9:ce:bc:45:d6:84:1b:44:d2:2b:2e:e2:c0:
                    8f:e4:b8:a9:fa:3a:66:78:9e:65:08:46:c5:5a:a9:
                    8e:89:5c:3f:cd:24:22:be:77:9d:f4:0b:67:92:27:
                    01:17:fc:95:eb:80:10:32:6e:63:b7:c9:0d:6f:bd:
                    41:29:91:45:17:7c:7b:f2:b2:96:54:7d:7c:7a:70:
                    ba:20:bd:6d:e8:a0:41:30:86:40:e6:4b:c4:a4:0f:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:85:B1:2F:EE:97:AE:71:E8:5D:FD:37:2C:8D:73:BE:CA:B2:FE:B9
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/NoWxL-6XrnHoXf03LI1zvsqy_rk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:0a:1a:ec:7c:ed:6e:1e:34:6e:58:7c:ec:23:87:64:64:
         6a:13:67:34:36:7b:b8:c5:56:5a:c3:ac:09:af:5d:02:91:ce:
         99:ce:a5:78:e5:d6:39:75:4b:32:3a:28:57:36:a3:34:b0:d7:
         c2:80:b5:72:1b:7e:8f:ef:fd:69:02:f1:83:e7:8b:f3:f2:7d:
         45:e5:ca:67:44:90:75:c4:8d:8c:88:40:6a:25:9b:f2:0e:f6:
         7d:db:8a:95:92:38:c5:19:12:73:ad:3c:be:36:3c:4c:69:6f:
         ba:4c:2c:b5:45:ac:9a:d7:52:e5:80:22:3e:fe:24:c2:68:3c:
         3e:d9:5a:51:1b:c8:a7:1f:a8:5b:4f:b4:20:ab:e6:3e:c7:3b:
         c7:57:c2:0f:45:a7:9a:42:a6:f0:fb:3e:67:cb:b4:ab:d4:f4:
         77:35:e9:49:38:d0:ba:53:19:eb:d3:4d:c1:ff:35:18:60:b6:
         1c:8c:b7:24:f1:af:d3:19:b2:b9:4b:d3:e3:59:1c:a2:85:63:
         8b:6e:24:43:3a:b4:04:6b:a6:cb:48:8a:be:6a:eb:76:9a:1e:
         ed:aa:e4:29:1e:d2:4c:a9:43:d8:f5:3f:d0:b9:fe:ad:c2:4a:
         0d:a5:86:eb:c6:56:5b:eb:3b:36:99:32:67:d3:03:73:28:92:
         5c:80:90:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org