Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/h2jsu6lMpXwPv462hLbPIsyhE50.roa
File:                     h2jsu6lMpXwPv462hLbPIsyhE50.roa (raw, json)
Hash identifier:          jjLF9WWd7Hh4Y0QH0zxTclCvLuUrJvrBMf3Kg/vy4r0=
Subject key identifier:   87:68:EC:BB:A9:4C:A5:7C:0F:BF:8E:B6:84:B6:CF:22:CC:A1:13:9D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       6E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/h2jsu6lMpXwPv462hLbPIsyhE50.roa
Signing time:             Tue 18 Oct 2022 02:16:14 +0000
ROA not before:           Tue 18 Oct 2022 02:16:14 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:16:14 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8768ECBBA94CA57C0FBF8EB684B6CF22CCA1139D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:e6:2c:c7:43:66:43:9e:3e:b3:d5:c5:52:
                    cd:fb:2d:2e:aa:8f:99:44:d9:a7:ab:41:00:94:48:
                    eb:87:75:e1:cb:2e:a7:3e:d1:21:c5:7e:5b:63:67:
                    67:c3:a3:8d:a6:02:ea:f4:06:fc:05:ae:86:e8:de:
                    d4:39:c3:02:03:e9:a1:5a:67:4a:42:2b:5b:f4:7c:
                    17:1d:88:86:5e:2b:06:c5:b1:20:c6:62:51:b0:3c:
                    e4:32:d7:52:fd:48:29:1b:d3:86:59:41:60:7d:62:
                    aa:36:68:77:4a:07:2f:9d:3b:6e:c2:11:c9:63:5a:
                    d5:b6:d2:99:b3:cd:5f:78:ee:c0:89:c7:78:bc:0c:
                    9f:e4:ac:a7:72:a6:31:55:94:a9:f2:c1:98:47:18:
                    a9:26:04:86:10:64:fc:43:f6:3e:67:76:0a:e9:d5:
                    da:0c:2e:4c:0e:b8:3f:db:d4:b0:62:cd:21:ef:1c:
                    6a:02:80:9c:80:e8:17:ba:be:3e:af:23:0b:31:5e:
                    8c:0f:f1:2e:72:72:6f:16:58:5d:bd:d9:f7:31:78:
                    88:41:ae:3a:47:9b:c6:e0:39:01:a5:ff:3f:48:61:
                    ef:97:2e:c9:e3:c4:e9:af:75:49:62:ee:66:18:52:
                    0f:5e:b5:43:fa:a3:91:94:46:b7:f2:06:67:95:23:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:EC:BB:A9:4C:A5:7C:0F:BF:8E:B6:84:B6:CF:22:CC:A1:13:9D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/h2jsu6lMpXwPv462hLbPIsyhE50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:c9:ef:ab:c3:47:a0:bc:0b:85:1c:8e:e9:ce:fc:cc:c7:
         68:f1:7a:ca:28:9b:ae:18:59:88:a1:15:2f:6e:ec:6a:a0:fc:
         5f:d3:1d:d5:9f:40:d5:09:b6:da:6e:36:a7:78:58:a3:ff:81:
         bd:78:5f:3a:80:0e:d0:4c:03:4c:92:be:86:bf:c6:70:58:b2:
         1f:9e:a8:14:d0:5b:99:ef:4f:2b:54:c4:a4:2e:bb:ed:5e:db:
         e5:94:a2:84:2e:c3:d3:4d:2f:ec:ac:80:6c:09:47:dc:98:cd:
         f1:4c:40:ea:9a:bb:57:bd:31:44:5f:55:be:19:82:82:03:60:
         e1:77:2d:3b:3c:dc:f3:f0:f9:ed:62:98:99:2c:69:95:de:54:
         b1:f7:47:50:dc:7f:2e:c4:bc:e0:a2:7a:88:c9:e5:dd:ba:d1:
         79:c7:d6:e2:c1:ed:e4:7e:46:fd:66:ad:1d:99:7b:67:f2:22:
         8f:3b:52:0d:83:e5:ed:7f:c5:29:50:bc:92:53:18:01:87:e2:
         ca:71:8b:68:6b:9b:95:18:02:e8:cd:f6:95:cc:df:ef:33:da:
         a6:20:89:8e:eb:37:4a:17:73:d8:1b:43:f2:68:23:17:b9:88:
         bd:53:f7:9f:50:4c:50:22:67:72:c7:93:45:de:91:e5:01:d7:
         a9:e6:9a:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org