Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa
File:                     3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa (raw, json)
Hash identifier:          o0k1GwdvhGMCVvfHpd8YmkUt23ksb3KJgEkLAEP4yk4=
Subject key identifier:   7C:8D:F6:49:85:AC:95:9A:F4:82:C3:DB:D6:5C:90:42:4F:40:38:DC
Certificate issuer:       /CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
Certificate serial:       1B74C9812FC4C196E972702E749D4AEC49AED0B9
Authority key identifier: 6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa
Signing time:             Thu 26 Dec 2024 05:00:00 +0000
ROA not before:           Thu 26 Dec 2024 04:55:00 +0000
ROA not after:            Thu 25 Dec 2025 05:00:00 +0000
asID:                     152017
IP address blocks:        103.255.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:74:c9:81:2f:c4:c1:96:e9:72:70:2e:74:9d:4a:ec:49:ae:d0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Validity
            Not Before: Dec 26 04:55:00 2024 GMT
            Not After : Dec 25 05:00:00 2025 GMT
        Subject: CN=7C8DF64985AC959AF482C3DBD65C90424F4038DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:bb:b5:03:9f:ea:30:3f:8d:f0:17:fb:7a:
                    88:67:8f:23:0b:c1:d6:73:35:54:64:47:bf:71:2d:
                    b5:77:49:8d:f2:5b:15:08:d4:79:a5:84:b1:df:6e:
                    6f:9c:01:22:a6:ba:d2:ad:a6:b9:54:59:86:0b:9f:
                    c1:aa:f3:13:19:18:45:00:3d:07:19:91:d5:4b:4c:
                    d8:e2:70:76:a8:e9:61:de:7d:8e:46:db:fe:0e:9c:
                    6b:80:3e:4a:0f:fd:50:b2:70:c3:1a:f6:38:39:94:
                    b4:af:60:23:17:a1:92:4e:64:6f:a9:05:43:39:b1:
                    97:1e:7a:7e:62:e9:83:c8:69:8d:31:33:82:e1:17:
                    08:5a:9d:f2:ac:1f:10:b2:9d:97:86:8e:6d:0b:5d:
                    ea:4b:a8:46:16:d2:ca:e7:6f:75:72:94:d1:cb:53:
                    fb:c3:b5:dc:ec:1d:fc:b0:50:28:f0:41:94:b7:9e:
                    7b:a1:26:26:34:14:5e:dd:85:bd:d9:a2:e0:d6:e1:
                    9e:dd:b3:89:2e:b5:cf:06:24:bf:51:5e:9c:23:be:
                    49:df:2a:d5:7f:2f:98:fe:a2:5e:a3:c1:40:1d:44:
                    95:0d:48:ca:fe:df:3a:0d:9e:91:d6:f4:ed:c3:73:
                    9d:5c:27:c4:a9:97:f4:02:ac:2c:97:8e:5a:70:40:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:F6:49:85:AC:95:9A:F4:82:C3:DB:D6:5C:90:42:4F:40:38:DC
            X509v3 Authority Key Identifier:
                keyid:6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:7b:ac:5f:23:30:56:3a:92:be:02:34:95:82:5d:52:3b:
         db:8a:be:2b:e2:97:0e:da:d9:32:58:88:ea:61:21:10:62:df:
         50:ba:a5:e6:68:7f:83:f8:bd:ba:86:86:66:d5:96:76:85:5f:
         9e:2d:96:2a:9c:4a:7d:07:ff:84:dd:07:ce:be:f8:82:c2:44:
         93:9f:f3:71:fb:47:43:e1:c9:56:f6:63:5b:bb:75:9c:f5:de:
         60:0b:b7:16:f0:d7:d8:0d:ca:72:5f:df:b1:b2:dc:8d:6c:42:
         d0:72:c6:c0:5e:75:20:0f:e0:1b:21:ae:f2:7c:ae:13:2e:05:
         a7:53:69:f6:b0:25:26:26:e2:98:12:13:1e:26:c5:79:96:3e:
         f2:2f:32:cc:d3:94:c4:c9:72:b5:72:ac:b3:4c:13:6b:59:ac:
         68:67:2d:a0:aa:33:50:80:1b:bf:9f:bb:5a:11:2a:51:92:27:
         ea:fd:3a:10:c9:87:e6:ec:5e:05:92:cb:cb:d2:52:68:ab:bd:
         8f:1f:33:fa:1e:86:ca:55:7a:7e:4d:66:d1:12:7c:b3:c1:42:
         06:5a:a8:c0:f8:75:3e:b0:03:fe:e6:ee:ee:8b:23:13:27:f0:
         5c:a9:3d:3c:e6:a5:6f:81:23:1b:89:b6:22:a9:bc:36:96:13:
         c2:21:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:11:09 2025 by rpki-client