Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa
File:                     3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (raw, json)
Hash identifier:          SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=
Subject key identifier:   AC:E4:06:62:3A:51:93:3A:B8:7D:24:61:84:7F:B4:CB:B0:C6:08:62
Certificate issuer:       /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E
Certificate serial:       2BAF2115409EBAD60ED2266532E2B7F8F89CEF7A
Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa
Signing time:             Mon 20 Jan 2025 10:01:10 +0000
ROA not before:           Mon 20 Jan 2025 09:56:10 +0000
ROA not after:            Mon 19 Jan 2026 10:01:10 +0000
asID:                     149350
IP address blocks:        103.179.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:21:15:40:9e:ba:d6:0e:d2:26:65:32:e2:b7:f8:f8:9c:ef:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E
        Validity
            Not Before: Jan 20 09:56:10 2025 GMT
            Not After : Jan 19 10:01:10 2026 GMT
        Subject: CN=ACE406623A51933AB87D2461847FB4CBB0C60862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:5e:09:ab:eb:ce:8c:99:a1:16:8d:cb:26:
                    4f:d6:f4:dd:5a:f4:8f:51:e8:64:c9:ba:3c:76:7e:
                    8d:4e:9e:0a:9f:6b:d5:9a:78:e2:fe:18:3e:7b:a0:
                    b3:d4:59:10:a5:e5:2a:78:86:fe:5e:7e:26:aa:d7:
                    e9:b8:42:dd:93:8e:7e:c5:c5:18:23:82:e6:19:9e:
                    64:c3:bb:bb:c2:43:8d:f7:79:0d:c2:97:cc:3f:7a:
                    b5:1e:c3:61:70:84:9d:ab:2e:6c:bf:94:3d:37:48:
                    6d:58:56:a8:25:ee:05:f9:31:fb:0a:1c:96:f2:8e:
                    89:ee:6e:b8:f5:40:73:47:2d:a1:66:27:1a:27:46:
                    35:6b:3d:48:21:f1:69:df:53:60:18:45:97:94:b6:
                    da:02:82:d7:83:32:28:9f:3f:97:80:05:6d:9c:0e:
                    df:60:a9:b1:72:fd:8a:4a:42:bb:a6:53:84:88:3f:
                    c8:b4:89:d6:ce:30:c5:26:a0:bd:55:15:89:52:d2:
                    26:d8:75:50:25:07:8b:e6:12:70:29:8f:97:25:18:
                    6a:ca:cf:32:ed:89:0b:a7:d2:25:89:3b:1c:03:51:
                    0f:4d:2d:46:6e:fd:f8:78:de:4a:ae:2f:70:a8:05:
                    44:03:e5:3d:7b:1b:e1:98:e0:a1:81:13:9c:38:b7:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E4:06:62:3A:51:93:3A:B8:7D:24:61:84:7F:B4:CB:B0:C6:08:62
            X509v3 Authority Key Identifier:
                keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:db:f2:1e:09:5f:3d:69:7b:4b:ed:85:af:6c:16:a8:16:f8:
         d9:12:47:23:19:05:ce:23:ef:7d:55:97:d0:8a:cd:2b:05:ba:
         04:cf:d4:4a:dc:f3:27:c3:b6:13:4a:e1:45:b9:c3:0c:32:cd:
         9e:88:4a:7f:3d:4b:f2:1e:41:62:91:66:18:6e:a5:6f:30:9a:
         36:98:cc:71:a0:95:e6:69:de:55:c2:04:c5:4b:c1:f0:6d:b9:
         8a:08:c2:30:af:21:28:c2:a8:3d:ff:01:26:8b:c1:c1:ec:50:
         00:af:df:20:b2:a9:ad:13:cc:fe:6a:d3:03:72:2f:55:ed:c0:
         36:63:71:a5:08:d7:75:2b:6d:1c:06:38:77:ad:ee:b0:c5:0a:
         7f:2b:55:11:8f:a3:34:9b:1b:c8:32:65:0d:5a:f8:13:de:7f:
         53:b1:26:78:6a:7c:16:de:84:9c:49:1e:09:34:e7:7d:98:52:
         a9:12:7f:f6:e7:4e:15:e7:cb:da:81:19:78:e7:6b:21:80:01:
         f2:42:c4:b5:05:92:f9:3a:f0:6f:2c:17:55:07:d7:c5:b7:6f:
         8c:71:00:ab:f8:ec:28:74:89:61:6a:c4:ee:78:06:b5:c3:a5:
         3a:01:69:30:59:8d:a5:a9:44:14:50:95:d0:80:ca:a3:8b:24:
         dc:8d:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:56 2025 by rpki-client