Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5304/IIR7TWrIxzwl6aYR6W3t63HMUAM.roa
File:                     IIR7TWrIxzwl6aYR6W3t63HMUAM.roa (raw, json)
Hash identifier:          kuSGbvHMCFm95YDrtGaDu1QE1EBZODlyKecYCa74TB4=
Subject key identifier:   20:84:7B:4D:6A:C8:C7:3C:25:E9:A6:11:E9:6D:ED:EB:71:CC:50:03
Certificate issuer:       /CN=01771AF78BF7AA263A3FB0CEA56D97D383462218
Certificate serial:       0E
Authority key identifier: 01:77:1A:F7:8B:F7:AA:26:3A:3F:B0:CE:A5:6D:97:D3:83:46:22:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AXca94v3qiY6P7DOpW2X04NGIhg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/IIR7TWrIxzwl6aYR6W3t63HMUAM.roa
Signing time:             Tue 15 Jun 2021 05:00:42 +0000
ROA not before:           Tue 15 Jun 2021 05:00:42 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     4713
IP address blocks:        202.17.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01771AF78BF7AA263A3FB0CEA56D97D383462218
        Validity
            Not Before: Jun 15 05:00:42 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=20847B4D6AC8C73C25E9A611E96DEDEB71CC5003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:2d:89:55:00:ae:01:b4:1f:4a:07:ad:c4:
                    16:db:37:6e:bd:16:f0:dc:7c:c6:de:68:f5:e4:76:
                    9a:70:ca:b4:82:0b:3b:af:5e:76:37:99:20:a0:52:
                    e1:16:c3:27:68:df:9b:a7:40:22:a4:56:80:fa:4a:
                    59:d7:fe:9b:93:9a:39:73:79:88:f2:5c:8b:c1:02:
                    32:96:0e:b5:aa:5b:17:09:18:74:5b:de:e2:aa:75:
                    d7:7c:3d:ea:37:7d:af:1b:b7:2c:d9:5d:70:64:ec:
                    5e:98:d5:f0:ab:9f:9b:84:ff:06:be:2c:0d:85:c7:
                    1e:ee:99:ee:c3:91:00:98:2c:b1:6c:8f:7b:b9:29:
                    57:f0:6a:19:1b:f1:78:5e:a3:ed:23:ab:3b:c0:44:
                    73:5a:d0:50:53:4e:c1:2d:12:4c:e4:a5:a6:4b:62:
                    86:34:b3:ca:9b:6d:c3:6c:94:21:37:ae:86:99:7c:
                    8f:76:73:78:02:37:a6:54:1d:10:25:88:28:bc:41:
                    39:8e:8d:68:42:69:24:14:81:cf:5c:38:66:47:95:
                    57:11:ab:d7:5d:53:76:88:07:84:92:9c:40:bc:62:
                    59:e8:8c:e9:93:5b:20:41:b8:d1:28:84:e5:68:58:
                    d4:80:16:f7:81:79:4f:44:2b:9e:f0:eb:36:19:2a:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:84:7B:4D:6A:C8:C7:3C:25:E9:A6:11:E9:6D:ED:EB:71:CC:50:03
            X509v3 Authority Key Identifier:
                keyid:01:77:1A:F7:8B:F7:AA:26:3A:3F:B0:CE:A5:6D:97:D3:83:46:22:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/AXca94v3qiY6P7DOpW2X04NGIhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AXca94v3qiY6P7DOpW2X04NGIhg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5304/IIR7TWrIxzwl6aYR6W3t63HMUAM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.17.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:52:82:80:74:dd:6c:e8:5e:d3:bf:ad:a7:c2:dc:ab:d9:63:
         84:28:b8:51:c2:b2:6e:fd:ec:24:a0:eb:13:1f:5e:18:29:e5:
         18:6e:22:0d:25:26:42:12:0f:a1:16:7e:68:1b:e5:f0:0c:61:
         a5:b4:23:46:f0:16:e9:f9:75:c8:11:39:c9:ba:9e:e4:b6:c9:
         0d:9e:eb:7b:e3:c9:68:dc:c3:68:99:bd:d9:f3:3f:f0:25:51:
         1b:43:41:f2:37:f2:58:9e:50:f7:4c:b5:89:17:58:27:72:f2:
         f6:1b:4c:89:15:f3:ab:e2:a0:5e:da:0b:56:0e:71:7c:72:16:
         9c:ee:f7:dd:0e:6a:74:0d:f7:91:69:fd:f3:34:a8:41:ad:65:
         c0:b3:93:cc:e5:84:40:b5:2b:7f:4f:a4:56:87:e9:07:ed:95:
         86:3c:f1:eb:91:cb:39:5a:3a:4d:c5:af:19:ef:de:a5:d9:a7:
         8e:8e:f4:75:51:fb:1e:98:99:43:9d:37:3e:0c:49:ca:9d:aa:
         64:35:84:33:9b:63:36:23:36:0d:69:7f:7d:ae:22:ff:8a:54:
         a5:b6:4e:cd:cc:8c:de:91:8c:7d:4a:c9:d1:25:5f:94:31:dc:
         f4:3a:35:0d:43:b8:bb:db:f8:c9:fa:ab:ef:c2:94:a0:65:48:
         94:c9:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org