Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iYIzeufqM5SsK0nFtwpTB6JxQgs.roa
File:                     iYIzeufqM5SsK0nFtwpTB6JxQgs.roa (raw, json)
Hash identifier:          FSTk19dChL/HRIxjMIIY3rX2G3lT3OLV8/FQl6zfoeQ=
Subject key identifier:   89:82:33:7A:E7:EA:33:94:AC:2B:49:C5:B7:0A:53:07:A2:71:42:0B
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       3C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iYIzeufqM5SsK0nFtwpTB6JxQgs.roa
Signing time:             Tue 11 Oct 2022 09:36:12 +0000
ROA not before:           Tue 11 Oct 2022 09:36:12 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.158.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:36:12 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8982337AE7EA3394AC2B49C5B70A5307A271420B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:4d:52:c3:55:92:f0:b9:7a:21:ef:06:67:
                    d7:0e:58:7a:cb:a1:df:1f:6a:04:19:aa:fb:c7:eb:
                    f7:c9:62:19:59:78:36:1c:7c:2d:8f:e5:44:a5:7f:
                    f2:06:8d:98:5b:ae:7b:96:e9:f1:1a:c4:d5:06:3f:
                    ad:51:23:fe:83:f3:31:d0:5b:ce:cc:2a:03:b3:f3:
                    0d:eb:a1:0c:60:83:b8:90:55:4d:45:a6:e4:10:f7:
                    bf:2a:b8:5f:16:24:e5:7b:f9:1a:cd:34:02:2d:89:
                    b6:80:9d:5c:fe:24:55:ce:76:ed:84:5b:c8:c6:d1:
                    52:95:39:e4:de:cd:3c:24:5b:d2:ee:99:ed:ba:0e:
                    c7:04:d5:f8:7b:8b:81:36:1f:77:b6:53:8e:f8:08:
                    56:43:76:14:64:b1:59:be:db:77:5d:26:9e:76:94:
                    66:bc:59:6e:5d:e7:2c:50:a4:8d:9d:8c:25:9e:42:
                    48:e8:c3:03:95:0d:25:47:2a:40:3d:05:76:2b:b2:
                    67:d1:5d:df:e1:63:24:9c:56:19:48:04:bd:de:e1:
                    4a:fa:55:30:1d:66:b8:7c:ac:da:03:66:1d:28:7f:
                    04:86:62:78:92:af:e4:c5:cb:50:23:3f:3a:1d:ba:
                    4b:f9:96:98:c0:80:ff:64:21:63:50:5e:c8:bd:f9:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:33:7A:E7:EA:33:94:AC:2B:49:C5:B7:0A:53:07:A2:71:42:0B
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/iYIzeufqM5SsK0nFtwpTB6JxQgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:a6:76:72:55:cc:da:25:11:c0:25:3d:ca:55:00:25:2e:aa:
         14:7a:ea:6a:db:f4:f1:21:42:df:84:2e:07:5a:f2:98:a1:e3:
         cb:ce:ce:12:0b:f0:e1:35:5c:bc:9b:f6:ea:55:16:30:08:1c:
         5a:8e:ec:77:a8:52:7a:90:43:84:57:9a:dc:ae:16:5d:e4:53:
         08:fc:de:c0:11:35:f6:f1:dd:65:bf:2b:77:cf:85:fa:be:2b:
         2c:87:68:17:92:2d:0c:ff:ce:4f:44:11:a3:4d:2b:99:ea:21:
         b1:04:29:6e:61:29:6e:dc:6b:43:f0:70:02:1d:37:09:cd:f7:
         bd:eb:d1:0e:fc:08:19:54:74:02:43:aa:66:c1:d3:85:45:87:
         10:ae:a4:bd:68:a1:8a:2f:17:48:d2:d2:89:3f:05:33:7a:c0:
         1c:64:da:3d:c0:54:5e:eb:3a:4f:48:9f:f9:9a:82:7e:5c:c3:
         42:1c:2f:02:e4:9d:c9:a1:fb:8c:d7:90:97:a2:5c:07:a8:2e:
         08:1d:7f:61:f0:c3:93:32:a7:45:a0:b4:35:ce:30:41:c4:b4:
         64:22:4b:c2:b2:09:74:90:a7:47:2f:a1:af:08:45:e5:c2:5f:
         ae:86:89:ee:c2:d3:7e:b7:4a:4b:d1:c3:ed:61:7c:c5:8e:fc:
         64:a1:b3:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org