Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/sYufe-58NUZhCuE6ohNtgtCAx7A.roa
File:                     sYufe-58NUZhCuE6ohNtgtCAx7A.roa (raw, json)
Hash identifier:          RUWaCQuRNeep1/0NQvlBTSEv6u2s+0MX+sYUrXdQNRE=
Subject key identifier:   B1:8B:9F:7B:EE:7C:35:46:61:0A:E1:3A:A2:13:6D:82:D0:80:C7:B0
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       63
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/sYufe-58NUZhCuE6ohNtgtCAx7A.roa
Signing time:             Tue 18 Oct 2022 02:14:11 +0000
ROA not before:           Tue 18 Oct 2022 02:14:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:14:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B18B9F7BEE7C3546610AE13AA2136D82D080C7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:d8:46:e7:3b:8f:91:95:44:00:4d:d3:2b:
                    7f:a9:c7:c0:01:12:b1:2c:1f:d0:83:4b:d2:8c:3d:
                    c8:da:f9:da:31:bc:b5:17:d1:c9:19:9e:09:53:97:
                    42:34:f8:42:52:59:90:bc:6a:05:fc:a3:a1:4c:2a:
                    04:43:f2:78:a8:ad:63:9b:5c:61:95:bf:cf:76:59:
                    5a:e9:c1:df:f2:4d:a7:e9:f8:5e:62:cb:9a:4b:2f:
                    de:0d:5b:b5:61:5b:5a:b1:b3:27:88:91:d3:07:34:
                    f7:32:c0:94:0f:63:c3:18:a9:97:c0:86:41:10:e3:
                    fd:ff:75:f6:2e:13:05:95:9f:10:4c:07:63:61:87:
                    9d:26:6e:28:41:34:54:04:3a:fe:78:c8:ae:bd:f0:
                    2c:e3:8b:27:79:77:72:25:c6:4d:75:48:26:21:2f:
                    95:2a:23:52:8c:4e:a7:a3:59:c2:c4:2c:7f:80:d7:
                    91:55:ee:88:96:77:2c:ff:a4:ec:3d:90:4b:ca:ba:
                    dc:bb:e2:a8:ec:fe:48:01:b6:8e:06:54:12:eb:f5:
                    8c:64:95:8d:63:46:07:89:42:0e:dc:73:e4:5e:bf:
                    bd:06:6b:86:73:7b:8c:08:e0:ca:de:44:5f:f2:a7:
                    26:5e:e8:b7:08:8d:d1:02:b0:91:ba:ae:ef:39:b4:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:9F:7B:EE:7C:35:46:61:0A:E1:3A:A2:13:6D:82:D0:80:C7:B0
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/sYufe-58NUZhCuE6ohNtgtCAx7A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:72:ca:c3:fb:61:e3:b9:80:51:3c:6b:1d:d8:43:74:1b:
         af:03:19:25:7d:14:8c:14:b9:4f:3e:4b:ad:16:6e:0d:59:1d:
         2c:ab:d2:e9:1f:28:9a:5a:fb:f6:07:19:50:a4:8a:b8:23:d2:
         09:68:08:d1:63:38:18:df:d5:d0:65:57:09:34:98:bb:25:9f:
         46:9c:cc:88:4c:e1:0b:ef:01:3d:f6:dd:11:bf:4b:fc:bf:7b:
         23:ef:68:04:90:ac:e3:19:a9:27:1e:4c:2a:ae:57:2d:7e:36:
         dc:b1:e5:1c:db:10:ac:2b:30:22:08:92:2a:9a:47:ae:76:5c:
         96:3e:45:87:e1:b4:3d:81:13:19:bb:41:45:9b:a7:f6:14:9e:
         89:0b:2a:20:71:05:4f:f4:5a:8b:b6:33:98:de:8a:44:24:0c:
         0d:a4:51:2f:28:dc:48:94:45:35:ce:86:f4:03:50:fd:e0:9f:
         8a:e3:63:b0:b4:5a:df:63:4f:da:a1:86:13:fe:75:11:4f:f5:
         ce:91:13:ef:1b:b6:ca:58:ce:a8:88:8a:d3:52:d5:46:56:30:
         22:36:ec:1d:40:06:1a:fc:3f:77:f4:43:2f:71:c4:21:73:59:
         1f:d3:38:c8:b5:4c:b9:12:10:ee:30:a8:38:84:ae:44:a2:7e:
         05:a1:9f:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org