Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/t5icsaCccED5hf5EZTvj6h8pF18.roa
File:                     t5icsaCccED5hf5EZTvj6h8pF18.roa (raw, json)
Hash identifier:          APpAI0xdkixleyLhAY7kM68qvhs25tJTbcXBYseL2xM=
Subject key identifier:   B7:98:9C:B1:A0:9C:70:40:F9:85:FE:44:65:3B:E3:EA:1F:29:17:5F
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       75
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/t5icsaCccED5hf5EZTvj6h8pF18.roa
Signing time:             Tue 18 Oct 2022 02:18:16 +0000
ROA not before:           Tue 18 Oct 2022 02:18:16 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:18:16 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B7989CB1A09C7040F985FE44653BE3EA1F29175F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:33:dc:74:4b:33:6e:dd:79:b4:12:b8:dc:
                    97:fb:de:16:15:e3:08:93:e2:17:52:e8:c0:a9:f2:
                    71:87:e0:9a:0b:98:b9:31:a1:f1:6c:cf:b1:7f:27:
                    3c:78:12:6a:64:b9:c6:de:c7:e2:d5:b0:1e:4d:bb:
                    98:32:90:42:ec:01:a0:52:0b:8f:77:74:73:64:79:
                    a6:fe:57:b9:d0:ba:ad:13:1f:45:63:31:f2:c3:62:
                    6a:15:93:32:5f:5c:fe:81:a6:05:ce:0c:44:e5:ac:
                    da:cd:8c:fc:1d:bf:29:ee:7a:e7:ce:60:4e:8f:f1:
                    0f:4f:5b:ad:93:9d:aa:8e:20:1c:c1:ef:fe:96:f5:
                    4b:30:9f:a9:f2:3a:f2:5c:8f:01:be:eb:18:2d:d6:
                    c1:13:ea:b5:c1:b3:c1:9c:f6:db:01:97:8b:65:01:
                    39:6c:03:15:cc:06:93:b6:c7:ff:20:b1:d9:3e:93:
                    b6:7d:ea:91:28:ae:20:53:30:15:bd:54:3c:23:92:
                    1b:71:e1:ad:57:98:ea:8a:29:41:ca:b4:59:be:51:
                    32:ca:6f:a8:3a:5e:00:b8:3b:6d:26:0c:aa:a9:4d:
                    fb:85:f0:82:70:54:0b:ed:79:d2:36:0b:07:07:c4:
                    cf:92:5d:5d:c5:c4:b2:09:b3:9a:6e:3c:ef:7f:9f:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:9C:B1:A0:9C:70:40:F9:85:FE:44:65:3B:E3:EA:1F:29:17:5F
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/t5icsaCccED5hf5EZTvj6h8pF18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:7a:f1:a0:f8:ff:3e:95:62:a5:15:55:0e:55:ac:69:c5:e0:
         08:63:96:61:9b:34:04:ca:31:04:f4:fc:09:5a:bc:8f:f0:ec:
         53:9d:fc:c6:eb:50:aa:f2:2a:64:52:58:0f:ed:1b:69:d0:17:
         f9:16:cf:2c:39:67:2f:3a:d9:cb:ca:0b:95:58:8a:6d:01:d6:
         06:8a:14:af:d4:04:a9:bf:2a:e2:a1:fc:da:20:c5:51:5a:43:
         d8:31:b3:6e:fe:d4:68:85:0d:79:00:9c:79:10:ba:8d:63:e3:
         18:39:e2:a7:0d:28:d1:7c:f5:56:61:d6:14:40:43:25:ec:a3:
         32:8e:78:58:c5:f1:b9:f5:dc:17:1a:44:4e:7b:9d:ee:3f:5b:
         fb:62:c7:28:d9:5e:3f:5b:12:99:a5:37:44:e0:13:c8:fc:68:
         a6:5e:34:99:0d:9a:e3:38:78:57:5a:3c:cf:93:57:36:6d:b2:
         9d:7a:78:0b:e4:d4:77:fc:c0:2d:d8:a7:bf:67:f6:bd:9a:12:
         72:0e:1b:d8:6f:86:a3:ce:66:95:f0:26:39:16:1b:57:a1:c1:
         3b:32:1e:00:df:3f:22:42:18:29:e6:f6:fc:e3:44:16:cb:10:
         d9:11:d5:6b:e7:ed:de:d3:35:a4:37:19:af:e5:fa:2c:65:d5:
         0c:06:12:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org