Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rttlg0aU0ZiVZZlafoDT3njKTL0.roa
File:                     rttlg0aU0ZiVZZlafoDT3njKTL0.roa (raw, json)
Hash identifier:          Jpwe63k7pnrepK866vkBncfPipj602FjdoWV/trhiWs=
Subject key identifier:   AE:DB:65:83:46:94:D1:98:95:65:99:5A:7E:80:D3:DE:78:CA:4C:BD
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       6C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rttlg0aU0ZiVZZlafoDT3njKTL0.roa
Signing time:             Tue 18 Oct 2022 02:16:13 +0000
ROA not before:           Tue 18 Oct 2022 02:16:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:16:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AEDB65834694D1989565995A7E80D3DE78CA4CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:48:55:68:c8:87:d0:8c:c2:79:f0:95:81:
                    dc:e7:f0:46:c8:7f:e6:36:f3:61:31:a8:94:ba:ef:
                    70:42:30:5e:77:8e:ac:10:59:55:cc:a1:68:06:0e:
                    66:56:21:6c:85:ce:03:91:8f:dd:96:71:52:0b:51:
                    a2:af:ec:85:16:66:62:fc:b8:03:e3:6f:3c:e5:51:
                    95:db:28:5f:11:6e:b8:0f:c3:70:11:47:92:54:c3:
                    78:06:3f:5c:f0:49:02:ad:70:f2:82:8f:e4:34:2e:
                    13:24:20:f2:c0:61:07:06:23:39:6a:f8:aa:31:7d:
                    39:67:8e:d3:98:91:fa:49:cf:cc:32:a8:02:fe:53:
                    50:d7:7c:b1:92:9a:17:5f:a5:09:32:a4:55:ef:31:
                    c7:62:cc:2a:69:89:07:40:79:0c:ce:36:f2:ac:0f:
                    1e:e2:67:11:32:15:11:99:a8:94:db:5c:fd:d0:76:
                    0a:a0:a7:2c:ff:e6:b7:f6:d9:ff:96:d3:50:f0:88:
                    2b:53:56:35:1f:12:37:cc:86:66:8e:8b:3f:06:dc:
                    ea:01:8e:4e:95:56:f9:d2:3a:51:8a:6c:fb:49:91:
                    68:8c:34:1b:5a:c1:f6:8e:7a:ab:2e:79:87:75:c8:
                    c0:d3:d9:ed:8b:e4:37:a8:e7:10:a9:07:49:c7:b1:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DB:65:83:46:94:D1:98:95:65:99:5A:7E:80:D3:DE:78:CA:4C:BD
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/rttlg0aU0ZiVZZlafoDT3njKTL0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:b4:2a:29:e2:5f:ae:35:9b:5f:9c:4e:7b:b8:26:95:3d:
         7e:eb:38:7c:34:ce:a3:a5:6a:e2:43:14:31:15:bb:b6:14:46:
         cb:59:61:81:d6:ba:14:1e:3c:f3:fa:2c:4d:97:66:94:42:4f:
         cf:46:7a:85:6a:dd:47:59:5a:59:ac:31:a6:9d:1e:43:97:94:
         a4:fb:34:2a:d4:67:73:2d:6b:73:bf:6d:a4:71:59:c0:e6:3c:
         b5:29:56:25:76:95:fb:b3:4b:b3:22:03:75:1b:5d:94:a7:ac:
         c7:dc:ef:99:1d:67:01:bd:8e:1d:55:b8:51:23:92:26:78:34:
         46:e5:f9:6f:30:de:40:51:ad:af:93:50:9f:fa:11:68:ed:3b:
         f2:65:67:a7:aa:2f:1f:a4:9e:a6:7b:c3:5b:b0:ed:43:96:d2:
         f4:e7:d1:15:c9:f3:84:1e:1c:82:03:d0:84:02:82:01:b2:76:
         80:48:1f:0d:02:bc:19:83:3c:d8:07:be:e0:15:26:45:c4:d2:
         e7:ff:3a:b6:39:9b:a8:fd:e7:a7:97:15:18:e1:9b:17:27:0e:
         91:34:81:88:57:58:71:1c:82:8a:ce:95:14:53:7e:2b:d2:c9:
         dc:2c:f8:e0:1e:94:6f:4a:c6:dc:e4:a9:28:f0:5b:dd:a7:1c:
         2e:3d:ae:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org