Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ayDee_ia3UZoFzAwaqmOQRg80d8.roa
File:                     ayDee_ia3UZoFzAwaqmOQRg80d8.roa (raw, json)
Hash identifier:          cLyU5eh5cbZH/qtiV3l3nH4/nFQJltG3AM9C8xfpQA4=
Subject key identifier:   6B:20:DE:7B:F8:9A:DD:46:68:17:30:30:6A:A9:8E:41:18:3C:D1:DF
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       016B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ayDee_ia3UZoFzAwaqmOQRg80d8.roa
Signing time:             Sun 01 Oct 2023 01:35:51 +0000
ROA not before:           Sun 01 Oct 2023 01:35:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6B20DE7BF89ADD46681730306AA98E41183CD1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:a1:08:c6:af:af:86:55:29:98:e5:4e:52:
                    d9:93:90:9e:42:ef:8f:e2:80:15:67:75:8d:2e:d0:
                    75:82:94:8a:ff:d8:9a:c6:a2:e4:d4:ff:78:75:2b:
                    75:b5:cb:89:bc:92:e3:35:5d:80:a2:c7:20:b1:a1:
                    00:a7:1c:03:3c:57:ca:57:49:97:79:64:f7:13:84:
                    fd:1c:8e:8a:6c:c9:bd:0b:06:5a:29:00:26:04:fc:
                    9f:be:1d:c7:4f:89:be:7e:66:db:df:dd:be:e2:b0:
                    de:f7:00:56:03:c2:79:34:bf:80:e6:e6:d0:36:1e:
                    04:fa:2d:0b:b6:99:43:12:1a:d0:9b:be:1b:e9:5c:
                    fb:26:e3:72:7f:0f:ff:15:7f:06:ad:d1:34:9b:df:
                    2f:14:f2:88:95:3f:6e:7f:44:4c:17:f6:cc:4a:6f:
                    d6:2e:f4:c1:d2:1b:71:27:ee:3d:2d:d2:b7:b5:93:
                    5d:05:c6:c2:79:a9:1e:d1:33:7c:bf:98:bc:16:93:
                    7c:b3:3d:63:56:aa:6b:e7:a4:1d:74:b3:77:30:a3:
                    5f:37:32:b5:02:fe:c9:b1:07:47:36:1e:d4:09:49:
                    c4:93:6c:e7:95:fa:1e:d1:21:d9:de:d1:dc:bf:06:
                    c3:a6:a0:c3:8f:8b:48:82:a9:3f:36:01:84:d8:c0:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:DE:7B:F8:9A:DD:46:68:17:30:30:6A:A9:8E:41:18:3C:D1:DF
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ayDee_ia3UZoFzAwaqmOQRg80d8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:d9:3a:b9:3d:47:79:d2:cf:6d:1c:a5:77:ed:13:e6:c1:
         4b:68:65:e1:a0:fa:7a:89:a4:0b:6b:0b:16:a9:0f:cb:a0:9a:
         09:4e:84:02:02:14:b1:e7:68:ed:4e:a8:e7:bf:dc:9e:bc:32:
         4b:be:ca:2c:02:b4:aa:a2:f2:95:ab:0d:0d:ed:e2:45:35:6e:
         ee:72:51:57:75:f7:79:93:4d:d9:ae:62:f7:66:60:70:8d:18:
         7c:63:b1:a5:34:a3:1f:67:c4:46:3e:70:ab:bd:39:7a:02:97:
         b3:c5:f8:8d:63:b2:1b:cb:b0:80:f4:73:03:5f:7e:96:98:14:
         b7:fb:ab:7a:be:be:1b:f4:92:bf:35:46:b6:4b:56:e8:b6:63:
         48:d6:ae:13:84:39:9e:98:cc:4f:91:07:d2:1a:50:15:71:ce:
         80:be:ba:f7:c1:d0:e3:28:0c:2f:48:5d:fe:38:6f:ad:36:64:
         1c:bd:1a:58:61:f4:40:fc:83:73:79:2f:4a:eb:ce:fe:79:a5:
         9f:69:18:a8:18:70:9c:fb:90:3a:41:24:dd:df:20:38:55:fd:
         ad:b8:0a:40:14:31:f2:93:af:7b:86:c2:a6:a3:0f:9e:98:5d:
         20:19:e1:8c:1f:e8:e4:3a:0b:11:78:f5:33:d9:bd:ee:aa:30:
         c8:29:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org