Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa
File:                     3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (raw, json)
Hash identifier:          1DOr2e/kf4/EN1V5niFiCSQ4eIv5NPl/rOgqgpH4ZuI=
Subject key identifier:   5B:C5:79:45:10:4D:98:E6:8F:13:0B:30:EF:8C:47:CC:46:B6:0C:94
Certificate issuer:       /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
Certificate serial:       29D5334110E01D96BC14FFBBBA97EA4310093EB0
Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa
Signing time:             Wed 16 Oct 2024 08:02:49 +0000
ROA not before:           Wed 16 Oct 2024 07:57:49 +0000
ROA not after:            Wed 15 Oct 2025 08:02:49 +0000
asID:                     139382
IP address blocks:        103.142.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d5:33:41:10:e0:1d:96:bc:14:ff:bb:ba:97:ea:43:10:09:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
        Validity
            Not Before: Oct 16 07:57:49 2024 GMT
            Not After : Oct 15 08:02:49 2025 GMT
        Subject: CN=5BC57945104D98E68F130B30EF8C47CC46B60C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:81:af:44:7a:78:ee:3b:22:d8:9e:ca:2b:
                    c1:2f:91:38:fc:58:64:0e:e7:5e:00:dd:56:1e:f2:
                    f5:0f:cf:08:81:57:da:8e:d3:70:ee:d4:a4:be:f4:
                    8c:b1:90:ab:56:ee:aa:ee:3f:64:bd:62:52:2e:35:
                    52:07:90:fe:2b:63:8a:d5:54:45:dd:e6:86:71:b8:
                    fc:d7:e8:3b:4f:17:4c:98:5d:d1:fe:46:a5:54:0a:
                    90:30:a2:34:75:65:b3:a6:d0:c2:52:6f:6b:f0:81:
                    c1:63:fb:03:02:46:be:3f:ad:19:4d:16:86:09:8e:
                    5d:c5:34:74:1c:2d:06:22:cb:27:87:6f:81:ae:1a:
                    8e:a4:85:60:f0:f7:58:d1:41:22:26:ff:42:2f:89:
                    5a:65:09:77:92:b1:34:5f:30:19:4d:58:45:f4:87:
                    d2:86:8f:39:3d:c6:04:42:c7:9f:4e:5d:61:f3:0f:
                    f0:87:8d:63:09:60:c4:32:ed:13:20:24:e8:30:8a:
                    c7:90:e8:b6:36:f8:58:14:c3:66:e6:eb:88:88:9d:
                    9a:1a:78:36:ad:85:ea:e3:d0:44:2f:5b:57:f7:c3:
                    48:39:a0:ac:f8:e1:14:a3:db:37:5f:bf:54:dd:98:
                    5e:7e:9f:89:7a:33:36:d1:69:34:06:b9:11:9c:24:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:79:45:10:4D:98:E6:8F:13:0B:30:EF:8C:47:CC:46:B6:0C:94
            X509v3 Authority Key Identifier:
                keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:f0:da:50:6b:2e:c5:30:10:d1:7e:ba:82:3d:48:31:21:cf:
         f6:4d:6b:1b:32:25:e7:00:74:62:48:8a:51:2b:1b:a3:2a:e6:
         89:c8:e0:38:b6:af:24:db:5f:2d:db:12:9d:95:21:41:6d:8b:
         26:ea:63:ab:33:91:2b:cb:34:f5:3f:7c:bb:ec:72:50:35:e5:
         f7:fa:4e:9d:42:cd:81:19:e6:98:2d:5a:9c:d2:e7:4c:8a:cf:
         33:43:77:12:e7:58:fa:9c:05:0c:c5:d1:d7:4b:78:41:de:b7:
         eb:fc:27:62:27:70:62:8d:fc:f8:cc:36:15:b3:8f:ce:25:fc:
         25:47:5b:4c:0e:8e:52:95:d4:33:61:df:85:ed:d9:c0:94:02:
         4b:10:97:a5:83:ba:74:c7:c2:07:1b:a0:90:4c:93:24:be:78:
         3b:a3:8a:61:72:10:a3:a2:76:d9:6c:61:f7:33:b1:64:75:e3:
         d0:1f:36:ad:8b:21:f4:98:1a:40:dc:c1:aa:0a:f4:38:6d:d6:
         aa:73:e8:8d:34:f0:c2:12:95:51:66:59:52:6e:3e:ff:fb:f6:
         6b:aa:41:39:c3:24:5c:df:50:0e:c4:16:77:dd:2a:f6:bd:b7:
         0b:9f:09:d5:ad:9d:35:18:3c:ec:ee:62:5e:10:ce:8f:24:6f:
         75:5c:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:19 2025 by rpki-client