Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iBZIk5Ss5l6jxVSJjkIXkEinOss.roa
File:                     iBZIk5Ss5l6jxVSJjkIXkEinOss.roa (raw, json)
Hash identifier:          N4ZiQcVUYLpBMSGD2jog50n2Z1r3AJJhT4bbch1D4gk=
Subject key identifier:   88:16:48:93:94:AC:E6:5E:A3:C5:54:89:8E:42:17:90:48:A7:3A:CB
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       24
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iBZIk5Ss5l6jxVSJjkIXkEinOss.roa
Signing time:             Tue 11 Oct 2022 09:30:22 +0000
ROA not before:           Tue 11 Oct 2022 09:30:22 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.228.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:30:22 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8816489394ACE65EA3C554898E42179048A73ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:db:00:e3:66:da:0f:69:78:d7:42:e0:cd:
                    9c:1e:98:0f:db:86:43:32:3c:ff:8e:4b:13:da:48:
                    ff:0d:83:18:75:1f:04:e2:23:91:04:58:e9:cd:6d:
                    a6:37:49:2e:26:80:2f:02:81:e5:68:29:35:4a:12:
                    8a:83:a7:62:5a:bd:4a:a8:d0:3f:5e:1d:a3:0a:8e:
                    54:6e:ec:41:3e:90:69:58:90:11:28:08:8b:2f:2f:
                    ad:b9:17:0d:19:77:b9:0f:e3:e1:69:70:41:ed:1e:
                    2d:29:87:3f:96:17:30:17:0b:af:9e:4d:44:14:f3:
                    57:b3:b6:ef:6e:a4:7a:06:50:1b:b0:07:65:4f:88:
                    0d:dc:df:b5:5b:80:da:63:51:70:2e:0b:9e:68:52:
                    f6:be:df:e1:48:b1:18:42:cc:79:8c:49:ab:85:0d:
                    ed:07:f8:be:e8:60:21:c2:59:ea:5a:35:02:72:7c:
                    33:ff:bd:06:7c:52:66:0f:98:c0:04:0a:12:99:53:
                    fd:d0:e8:01:b2:4e:c4:9f:95:4e:74:be:eb:d1:6a:
                    2e:11:0b:b1:1e:da:f6:f4:4a:ff:26:4c:e2:a6:e8:
                    ea:af:79:2b:e7:d8:e1:93:4e:7d:71:26:d0:11:24:
                    e4:c0:46:1b:67:24:d7:c6:34:cc:94:c7:ba:6f:04:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:16:48:93:94:AC:E6:5E:A3:C5:54:89:8E:42:17:90:48:A7:3A:CB
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iBZIk5Ss5l6jxVSJjkIXkEinOss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:58:e4:e9:2a:10:70:ee:57:f2:b9:41:b4:43:a7:56:38:5b:
         d1:8c:9f:a2:09:91:b4:c5:c7:c5:e4:44:1b:ef:99:40:89:c3:
         e7:a4:21:4b:3c:dd:47:fd:39:a3:0d:a4:12:bb:71:66:ea:72:
         c2:09:56:0d:3d:24:ed:b5:23:2e:f7:aa:7a:26:b7:6e:b2:50:
         90:d7:19:ba:f3:28:8f:0f:bd:4e:ff:21:ed:32:16:33:3a:fd:
         63:92:10:b7:2b:9c:73:e0:f5:6a:1b:c0:d7:5a:bf:ea:67:e8:
         30:83:1e:45:3a:d0:57:35:81:c8:c5:d5:2b:14:84:34:a7:34:
         60:76:2e:59:de:12:94:76:fa:cf:1d:dd:d6:e3:ba:bd:32:7a:
         89:c0:7b:62:90:a5:e5:8e:ea:36:3a:06:86:f7:d3:19:78:fe:
         01:28:8a:75:c1:9b:37:db:5e:b7:00:ac:c6:a3:37:ed:72:70:
         c8:6f:33:3c:ce:e8:58:8e:34:0e:98:28:1f:42:fb:27:0e:34:
         9b:18:a9:e6:23:d7:73:a1:5b:7f:8a:c8:bf:43:b1:65:5c:34:
         b8:e9:64:11:cc:08:4f:34:01:b3:fc:89:61:b2:84:d5:d3:fd:
         36:ee:d3:12:fe:c0:19:61:3d:07:07:d9:ef:6d:ac:9b:54:a8:
         ff:a1:37:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org