Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa
File:                     3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (raw, json)
Hash identifier:          2lqHIcW8uza9u4jtUcnwE3CjODtgM8N4fzaUyg/1vks=
Subject key identifier:   A3:40:FD:09:FC:05:59:98:AD:19:01:BC:C4:96:55:2B:8D:65:FA:E1
Certificate issuer:       /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
Certificate serial:       1CAD9E78EE3EAFE235D3D3497D3172DDB2A36750
Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa
Signing time:             Thu 30 Jan 2025 04:08:42 +0000
ROA not before:           Thu 30 Jan 2025 04:03:42 +0000
ROA not after:            Thu 29 Jan 2026 04:08:42 +0000
asID:                     141067
IP address blocks:        103.155.190.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ad:9e:78:ee:3e:af:e2:35:d3:d3:49:7d:31:72:dd:b2:a3:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5
        Validity
            Not Before: Jan 30 04:03:42 2025 GMT
            Not After : Jan 29 04:08:42 2026 GMT
        Subject: CN=A340FD09FC055998AD1901BCC496552B8D65FAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:42:64:a2:90:d9:24:44:95:d2:77:66:0f:d3:
                    ef:15:a4:43:15:e9:17:59:56:77:9e:7b:c7:4c:a2:
                    c6:da:1d:29:61:93:bb:ff:31:7e:4b:ef:34:89:b1:
                    34:c7:90:fc:8c:b5:0c:71:d1:e0:be:0b:90:f0:8a:
                    13:46:d8:f8:68:39:ce:9c:54:32:e8:e8:f9:d2:8b:
                    71:c8:1c:14:f3:64:06:3b:2c:5b:01:8a:24:4c:95:
                    37:fb:ac:75:ca:63:2a:a8:50:63:95:b6:85:3d:bc:
                    ac:7d:98:d7:96:b4:2e:7b:83:32:4e:c2:71:9d:1f:
                    fb:48:40:8c:73:ae:ad:f7:a1:48:aa:20:4f:b3:f2:
                    d1:26:1c:e5:bc:ee:16:b6:f0:19:1b:f5:0d:c9:0d:
                    7b:0b:00:7c:66:8a:a7:6c:27:25:81:47:cf:7b:47:
                    3a:49:4d:0b:4d:36:bb:ee:e0:89:e4:f3:5e:92:13:
                    8d:92:4f:34:13:f9:ca:b2:b0:ff:19:81:4b:c2:78:
                    b8:d9:8d:76:e9:aa:54:59:45:7b:91:e1:56:6e:06:
                    26:e4:c9:ce:b0:dd:71:d4:f5:1c:b8:98:40:46:b3:
                    9a:dd:be:64:96:d1:97:c2:c4:1a:06:3b:71:2e:1e:
                    2c:1b:53:78:5c:45:0a:bd:ae:82:d3:a7:c2:1f:d8:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:FD:09:FC:05:59:98:AD:19:01:BC:C4:96:55:2B:8D:65:FA:E1
            X509v3 Authority Key Identifier:
                keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:51:6a:96:2b:34:a5:6c:27:48:58:a7:04:a2:0b:57:8a:3d:
         c8:7d:ea:01:36:b6:65:f8:a8:6f:a3:8f:c4:2f:ca:04:9e:05:
         d5:d9:d6:30:ed:ca:b1:94:fd:db:8b:24:e2:ee:50:f1:0d:b2:
         8c:d7:b2:ab:37:80:56:f2:1c:91:a4:05:54:e9:e8:0e:b5:27:
         a8:13:3d:c5:75:23:f5:22:5f:f8:7f:a8:3f:28:e6:b9:d5:4d:
         0f:54:9c:e9:35:a7:ea:f0:37:38:3e:7f:61:82:cd:66:31:c1:
         24:e6:6a:2c:10:2b:c6:ea:11:02:71:9f:98:8c:93:f9:17:ed:
         25:7f:72:5e:f1:98:07:5b:64:1e:23:e5:35:eb:14:71:4d:6f:
         a4:1e:02:20:11:f0:54:7c:45:4d:8b:16:d9:ef:ac:07:64:61:
         d2:18:f7:bf:14:c0:10:ac:c7:2f:04:38:ed:de:eb:81:a2:ea:
         49:92:49:f9:22:26:68:f8:21:af:06:c1:31:95:a8:dd:5a:bd:
         1e:97:6a:04:f9:39:04:7f:9e:a6:08:bd:70:a8:f0:27:60:4b:
         16:b1:f4:79:91:7d:39:55:f3:7f:29:7c:c3:99:66:bd:ef:1d:
         7c:b4:fd:4b:26:8d:1b:b9:b8:e1:1b:02:3e:9a:40:19:7b:05:
         51:31:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:10:56 2025 by rpki-client