Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/jeIU9AmYAbR2vEhC8mg9I0d_RQ8.roa
File:                     jeIU9AmYAbR2vEhC8mg9I0d_RQ8.roa (raw, json)
Hash identifier:          mkB6bExX3VhNYFiZHOAHhLWwTPgLypWMgYePWzlvd4g=
Subject key identifier:   8D:E2:14:F4:09:98:01:B4:76:BC:48:42:F2:68:3D:23:47:7F:45:0F
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       36
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/jeIU9AmYAbR2vEhC8mg9I0d_RQ8.roa
Signing time:             Tue 11 Oct 2022 09:34:20 +0000
ROA not before:           Tue 11 Oct 2022 09:34:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.235.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:34:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8DE214F4099801B476BC4842F2683D23477F450F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:12:56:79:43:14:77:60:0d:b0:45:f3:9c:
                    d2:66:14:1b:21:76:b1:37:d2:c2:95:bc:39:c8:af:
                    46:bf:88:e1:70:eb:d4:05:07:96:e2:22:99:31:e6:
                    2b:bb:66:50:b3:1e:86:c7:9c:9c:ba:89:a5:66:8f:
                    97:02:34:43:52:25:80:31:f5:0b:aa:fc:7a:a3:01:
                    82:df:69:cf:28:bc:68:18:2a:6a:17:33:8b:ce:8a:
                    98:8b:8b:2b:c4:d9:b3:0c:4c:69:22:c3:6c:9e:d6:
                    e5:8c:53:ca:d3:8e:f3:35:d8:d3:43:38:13:02:0b:
                    52:b9:9b:67:b5:f5:f5:a8:ad:39:6a:1d:f4:68:2d:
                    fc:3b:64:dc:d8:c6:cd:f9:a1:df:32:86:ae:71:36:
                    01:64:2a:7d:78:07:af:cd:fa:70:68:f7:f8:28:d4:
                    6d:1d:f1:a2:a1:d8:8e:b0:3f:9b:8f:8f:89:c8:fc:
                    68:64:40:1c:88:3f:bd:11:37:ab:85:39:8a:e7:85:
                    5b:58:0b:99:e0:d9:72:7d:50:52:10:3a:2c:6f:d0:
                    02:6f:89:d4:0c:41:4f:9d:b8:d4:df:78:58:4f:a5:
                    a0:17:41:f0:81:12:d5:40:90:ef:89:27:3e:67:af:
                    90:81:08:a3:22:7c:ea:ac:4e:33:50:55:b0:1c:a2:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E2:14:F4:09:98:01:B4:76:BC:48:42:F2:68:3D:23:47:7F:45:0F
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/jeIU9AmYAbR2vEhC8mg9I0d_RQ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:2c:98:ec:ad:e8:c2:35:63:23:df:ee:51:b5:3d:8f:c6:43:
         b6:f8:b8:4a:5f:b2:3a:5f:38:7f:4b:a0:a3:23:5f:21:b2:63:
         35:da:ff:37:95:7d:b2:71:32:0b:8a:af:3f:67:7a:0d:19:0a:
         31:47:cb:5e:da:4b:b6:d2:60:05:39:75:97:6f:39:b5:3a:ad:
         08:bc:c3:26:58:97:93:d5:14:14:f9:53:bf:c0:99:fd:04:6a:
         76:cd:77:02:01:81:2f:6f:08:ef:f4:b8:0d:f4:fb:fe:e6:03:
         99:89:69:38:3d:35:8c:99:90:cb:7e:d0:01:0b:4f:7a:f0:45:
         54:f8:64:d7:1a:ed:d0:81:66:cb:fb:0d:e3:ce:37:d5:60:47:
         e8:e2:17:cd:05:a3:5d:68:19:07:4a:eb:a5:a5:96:b5:b9:5f:
         04:63:bf:87:69:4c:4b:40:c3:03:6d:85:66:f1:5e:1d:f8:8e:
         f6:76:49:44:00:a0:b9:18:38:63:9e:b8:02:41:5d:bf:56:e1:
         b2:20:77:66:9d:34:99:d3:44:51:37:24:12:18:f1:77:71:a0:
         e9:12:97:6d:f8:e9:7c:1d:d3:79:a0:6a:de:49:45:82:4e:4f:
         c3:d7:16:6c:6d:a5:33:fb:b0:50:d9:fa:67:a6:a2:6f:45:ec:
         87:79:a4:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org