Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/lI7zjt1aVzjDC-OcyVkLr0k6gq8.roa
File:                     lI7zjt1aVzjDC-OcyVkLr0k6gq8.roa (raw, json)
Hash identifier:          8pKNdp4rHhrQn+v4XXfVxlLp8npMDBHScl8CubT2pyk=
Subject key identifier:   94:8E:F3:8E:DD:5A:57:38:C3:0B:E3:9C:C9:59:0B:AF:49:3A:82:AF
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0125
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/lI7zjt1aVzjDC-OcyVkLr0k6gq8.roa
Signing time:             Sun 01 Oct 2023 01:30:42 +0000
ROA not before:           Sun 01 Oct 2023 01:30:42 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:42 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=948EF38EDD5A5738C30BE39CC9590BAF493A82AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:84:0b:c6:f0:60:d0:0c:e2:76:c4:11:8c:4a:
                    7d:80:d4:76:9b:1a:79:7f:f7:ee:74:c6:f6:57:a2:
                    ad:11:62:c2:64:1f:01:69:b3:e7:21:9b:81:51:2c:
                    8d:66:20:b8:3c:cb:a2:13:34:94:40:c0:50:2a:73:
                    63:51:99:49:0a:85:07:aa:86:e0:99:87:3b:5f:e7:
                    88:39:62:72:e7:7c:c6:7f:a5:fd:a3:9c:a1:46:f2:
                    5d:a0:7f:eb:2b:a7:99:94:bc:c2:4b:0e:d8:0b:9d:
                    4a:c2:b3:e7:3c:50:48:7d:72:68:97:6f:b3:20:af:
                    5a:36:d5:8a:a7:23:e1:e1:43:e7:68:65:2b:22:e5:
                    4e:ee:53:32:13:ab:07:81:fa:09:0e:4e:23:5c:1e:
                    f5:75:a7:d9:ab:5d:4d:43:3f:ef:25:2d:ce:d2:df:
                    92:37:40:84:27:8c:0d:06:12:6e:9a:99:95:cd:45:
                    28:41:e4:c5:48:ac:94:a3:af:ee:da:c9:76:3f:31:
                    3d:80:63:a8:d2:98:45:d0:b4:aa:ed:55:8c:d1:c2:
                    29:92:18:2c:11:7e:03:e0:80:f8:48:ca:13:97:e5:
                    be:50:d5:c8:d8:92:d1:c4:1d:58:82:1e:0c:ad:56:
                    09:e2:99:c2:56:bf:a3:f9:13:6d:95:b3:c3:ab:f2:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8E:F3:8E:DD:5A:57:38:C3:0B:E3:9C:C9:59:0B:AF:49:3A:82:AF
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/lI7zjt1aVzjDC-OcyVkLr0k6gq8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:58:f8:f5:51:7d:88:b3:d2:90:9b:4c:68:4d:df:11:23:
         b2:ac:95:2f:8c:24:99:bc:49:93:8e:92:f7:a6:c4:af:c9:a5:
         d1:e2:cc:3d:44:d8:dd:9e:89:57:41:30:a2:08:19:51:2d:52:
         c1:d5:38:b7:be:1a:88:66:77:e7:3a:08:9a:74:eb:e6:11:79:
         41:3c:1b:8e:65:01:a0:6a:c7:b9:3a:8b:32:09:fb:03:dc:6a:
         03:42:e2:a7:f7:be:45:32:22:63:dc:87:eb:10:ec:d2:f0:54:
         a9:6b:06:c7:b8:a0:b9:b1:f9:3f:f8:24:56:28:d2:5f:57:07:
         7f:8b:9d:02:37:c2:1e:af:35:82:2a:01:a4:51:d6:d5:06:58:
         6b:8b:e3:6e:86:9b:56:f8:7e:fe:d0:75:db:18:54:1a:77:57:
         82:e8:79:2f:0d:4d:09:0b:5f:0e:b6:80:6e:2d:e7:58:5e:f1:
         ed:f8:6c:5f:6e:7d:fa:bf:c9:3b:8b:de:f9:10:d0:2e:be:9d:
         5d:3b:a6:82:06:98:79:4a:03:2a:b4:eb:07:ba:a2:4a:bd:0e:
         de:b1:09:4c:25:8f:30:b6:30:0b:73:27:d3:76:f5:62:0a:85:
         e9:20:ac:2c:b1:5e:70:9a:a7:57:42:39:4e:8d:24:64:09:18:
         21:06:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org