Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/gaRnDr-wFVnuoDJb7WJi14PTuLI.roa
File:                     gaRnDr-wFVnuoDJb7WJi14PTuLI.roa (raw, json)
Hash identifier:          WSV1FhNWw9WM24NtIbn+Pt8IUFuqTHK+Aa11+7dlQ2s=
Subject key identifier:   81:A4:67:0E:BF:B0:15:59:EE:A0:32:5B:ED:62:62:D7:83:D3:B8:B2
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       9C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/gaRnDr-wFVnuoDJb7WJi14PTuLI.roa
Signing time:             Tue 18 Oct 2022 02:30:23 +0000
ROA not before:           Tue 18 Oct 2022 02:30:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.255.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:30:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=81A4670EBFB01559EEA0325BED6262D783D3B8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:4e:0f:ae:d7:af:f4:db:59:85:6a:2f:98:
                    31:c3:65:09:29:85:06:1d:90:5d:99:02:94:51:bd:
                    b9:3f:3e:a8:bb:4d:f5:30:49:7a:96:de:f2:86:63:
                    9d:0c:dc:a6:89:15:83:53:39:e7:1e:49:ad:2e:ea:
                    d5:1a:a8:73:cc:05:ff:b3:19:56:84:43:87:c9:fb:
                    d7:6e:ab:7f:49:27:7d:10:89:62:69:9d:39:00:a9:
                    81:17:f8:e1:fe:9e:18:ad:7b:98:c9:d2:43:4e:08:
                    b6:25:30:4e:7d:83:c1:6a:e3:b9:51:88:d1:44:74:
                    1b:c0:3a:03:45:ee:bd:db:c2:95:22:80:48:65:91:
                    39:bb:d5:4d:cd:e3:98:ad:c7:f4:39:cf:af:5e:08:
                    07:f6:f3:1d:db:3f:65:9a:11:c5:20:e3:38:f4:1b:
                    70:36:2b:86:ac:d9:0d:0c:29:53:cf:70:cc:3f:9d:
                    16:2a:11:91:f5:01:f1:65:c4:66:2b:2c:04:8a:73:
                    a2:f1:ed:5a:31:29:ce:41:18:b3:7b:23:d1:68:96:
                    41:6b:44:d7:64:a0:70:ad:09:3c:fb:94:94:b1:30:
                    9d:7d:f1:0e:59:f0:09:7a:79:4f:a5:98:f5:94:15:
                    2a:7b:f8:31:30:0c:2e:aa:45:87:a2:93:7c:73:9c:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:67:0E:BF:B0:15:59:EE:A0:32:5B:ED:62:62:D7:83:D3:B8:B2
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/gaRnDr-wFVnuoDJb7WJi14PTuLI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:cc:8f:48:01:e0:d5:5e:ab:42:47:ef:c8:5e:d9:40:c0:
         44:13:b7:39:3c:5f:87:68:06:78:1b:b9:e9:65:b5:17:5b:73:
         88:0d:64:d1:a4:63:46:c1:3b:f2:e4:76:d4:8a:26:67:f5:45:
         e4:c2:65:eb:70:21:f3:0a:d3:04:57:d4:d2:95:8e:e4:ca:dc:
         4c:4c:2e:a0:3d:da:84:3f:8c:1c:4e:08:a1:1b:db:e5:b6:eb:
         33:17:03:2e:c2:da:36:89:16:76:fb:3a:26:d5:53:fd:75:ae:
         c7:44:1d:0e:7d:79:15:fc:2a:6a:6c:2f:b9:36:b4:42:5d:43:
         96:e2:4d:16:3a:b2:6c:2d:b8:22:bc:9b:94:e0:7e:ab:e8:e4:
         3e:4c:65:18:3b:cf:c5:9e:b6:ae:ec:95:de:42:74:38:b2:93:
         2a:55:f9:e9:dc:86:29:e3:df:87:f3:c3:58:94:67:8b:98:12:
         30:a3:d9:6a:3c:01:67:75:ff:a1:b2:c2:e5:3c:40:c7:e8:a9:
         83:6b:19:67:99:18:45:6a:71:dd:ed:c1:2e:f4:c6:ff:4c:42:
         66:c0:cb:eb:cd:4b:1f:6b:eb:7b:a7:fe:27:f9:9d:23:bc:b6:
         fc:1d:c0:6a:61:6e:31:72:2f:61:24:84:d8:98:9c:2b:b1:14:
         23:af:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org