Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          IR1sOI4bvGnnmd8pXsHbjYGZUi/A+CyoPz/TriPB3u0=
Subject key identifier:   C3:64:0D:39:86:B0:FC:6C:AA:F4:01:90:42:3A:37:DE:09:80:35:64
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       0DA366C93B16CB85FFDC51BE31D2224074DEDC5C
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 04 Aug 2024 08:00:00 +0000
ROA not before:           Sun 04 Aug 2024 07:55:00 +0000
ROA not after:            Sun 03 Aug 2025 08:00:00 +0000
asID:                     135474
IP address blocks:        103.73.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a3:66:c9:3b:16:cb:85:ff:dc:51:be:31:d2:22:40:74:de:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Aug  4 07:55:00 2024 GMT
            Not After : Aug  3 08:00:00 2025 GMT
        Subject: CN=C3640D3986B0FC6CAAF40190423A37DE09803564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:53:89:e7:f5:cd:6e:af:87:13:a9:c8:26:
                    c6:a2:fb:10:17:c2:2e:a5:7d:54:0e:52:46:fe:c0:
                    e6:db:d6:c6:f4:99:76:18:43:b9:b6:64:e0:cb:ec:
                    0a:62:ee:e4:03:f0:14:b2:ec:b0:f5:f1:ba:82:35:
                    24:de:d2:54:37:53:69:ab:9e:e2:0f:61:ac:f0:e8:
                    6d:16:41:8a:7b:c4:d2:30:06:e7:56:8f:6e:6f:8b:
                    0f:d6:70:55:ed:8e:d1:f2:23:11:97:e0:23:9b:98:
                    0a:37:87:e9:84:20:bf:f8:9c:04:7c:15:9c:04:12:
                    a2:db:5a:31:fc:0a:35:80:3c:52:19:08:b3:11:c8:
                    d2:d6:40:55:c4:d6:f5:c1:5c:4e:b3:bf:f5:d1:35:
                    65:cf:8c:dd:9e:9e:1b:f0:3f:ff:bc:b7:73:4d:3c:
                    e9:1e:73:93:c3:92:4c:24:cd:f8:8a:f3:9c:1e:71:
                    54:67:7d:53:f1:50:3a:0f:9d:31:fc:01:97:96:e9:
                    34:7c:e1:61:5e:64:8a:72:af:8d:56:f1:df:cb:8a:
                    b1:cd:ba:90:c5:83:c6:52:3d:ec:95:95:bb:e8:db:
                    4f:88:97:ee:7c:5b:fe:c5:e1:a8:87:47:ea:b8:a9:
                    81:7c:c0:a9:2b:15:ac:f2:72:14:28:4c:53:a6:f3:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:64:0D:39:86:B0:FC:6C:AA:F4:01:90:42:3A:37:DE:09:80:35:64
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:9e:93:66:22:8b:c1:63:d7:fa:70:a7:27:85:b2:ee:2a:
         fd:6d:63:14:5e:19:66:26:af:d2:22:e6:a3:94:e8:67:44:c6:
         0d:7a:92:e4:9a:6b:2e:81:62:1b:34:a3:b2:d9:eb:47:60:cb:
         7a:fe:5d:01:11:db:fa:a6:d5:9b:5b:c5:74:dd:99:7f:3d:41:
         e3:15:96:41:73:cc:b9:82:af:88:1d:c8:95:72:aa:5c:88:a8:
         43:91:c8:43:f4:79:c2:fc:91:00:a7:51:4a:5c:c7:18:f5:af:
         f2:99:01:82:d1:f2:d5:1c:bb:bd:0d:92:6d:f5:02:f2:06:42:
         a9:f8:cb:8e:42:46:04:78:55:8c:ef:a0:75:37:7c:1f:e5:29:
         35:bd:64:a2:bb:b0:38:e4:01:01:3b:6f:5f:12:e8:15:d2:71:
         9c:92:87:2b:a5:87:3a:a7:3c:4e:12:9a:4a:0c:24:8e:de:c6:
         9c:3a:de:14:84:90:67:66:98:52:5e:95:53:2b:b5:df:09:98:
         76:71:e1:8a:56:69:9c:ed:d7:93:6b:7e:09:ef:2c:64:5c:fc:
         59:34:c8:11:96:fa:96:b7:34:dd:d6:ff:ae:4e:3e:2e:88:dc:
         cd:a1:60:7c:e4:06:22:b3:f3:dd:88:61:53:f6:5b:2f:c6:fb:
         75:84:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:03:04 2025 by rpki-client