Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131372e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          K4VquZpN3G50s5bBf2ARrNGojx5JRXrL8j7Z2JSwP5I=
Subject key identifier:   E9:6D:3E:26:57:F5:B9:EF:0F:D2:E3:9A:E8:50:43:62:C4:E4:E5:10
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       18BCFA7978EA0627C1508F6581CCF40860753389
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
Signing time:             Wed 04 Dec 2024 09:03:11 +0000
ROA not before:           Wed 04 Dec 2024 08:58:11 +0000
ROA not after:            Wed 03 Dec 2025 09:03:11 +0000
asID:                     58396
IP address blocks:        27.54.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bc:fa:79:78:ea:06:27:c1:50:8f:65:81:cc:f4:08:60:75:33:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Dec  4 08:58:11 2024 GMT
            Not After : Dec  3 09:03:11 2025 GMT
        Subject: CN=E96D3E2657F5B9EF0FD2E39AE8504362C4E4E510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:6a:3a:0c:1f:27:fa:82:25:c6:f6:90:30:
                    23:7e:bf:8c:b8:83:be:b8:76:c6:1d:93:8b:a6:55:
                    b6:1b:66:3d:29:09:b1:d7:df:38:fe:83:c8:cc:8e:
                    e3:e5:cc:5d:ec:5d:db:fa:89:01:d7:56:da:ec:20:
                    2a:c3:28:eb:bc:01:fd:57:eb:25:61:ac:d4:03:44:
                    3d:91:c6:f9:be:34:63:95:42:75:68:4e:a0:67:77:
                    1a:74:5f:11:35:46:db:27:11:d6:20:4d:ba:39:14:
                    e4:e1:5f:e1:ef:16:35:b9:3e:e6:2b:20:46:a7:01:
                    12:08:b4:99:99:fc:98:59:e5:fe:f8:3d:9b:49:97:
                    9a:65:92:34:c3:9a:5f:8f:e7:ee:ec:06:8a:ca:d1:
                    7c:d4:a3:43:2c:73:00:f4:7b:e0:ce:f6:9e:8e:3f:
                    42:d4:57:57:8d:76:a2:02:59:22:aa:62:46:c9:f5:
                    52:94:0e:68:c6:a9:d6:ee:d4:b5:af:60:6c:22:63:
                    de:e1:55:db:84:56:ab:3f:f4:52:5f:52:d8:f6:3d:
                    3b:49:a3:cb:65:f7:f5:f3:9d:d3:bc:69:3d:30:bd:
                    d0:35:4b:cb:be:8b:60:ee:25:1d:1b:2d:fd:f6:5e:
                    97:ce:c4:63:ec:4e:53:7b:1f:b9:2e:bd:41:74:3e:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6D:3E:26:57:F5:B9:EF:0F:D2:E3:9A:E8:50:43:62:C4:E4:E5:10
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:82:63:e0:14:1c:e5:aa:98:ce:d6:c7:dd:45:1d:36:89:d0:
         50:96:3e:79:f2:25:cf:b4:d8:b1:0c:53:32:6d:77:32:77:02:
         e9:cf:f7:6c:c0:5b:ca:8d:69:61:9c:1a:6d:99:74:3b:da:24:
         a7:5f:e2:16:9b:9e:3c:f9:36:b8:9a:3b:ea:c5:32:11:e2:bb:
         89:6f:39:4c:c0:29:b8:80:54:18:31:4e:47:56:76:ba:d3:b9:
         5a:b2:48:4a:23:1d:9b:23:fe:a1:3b:31:5e:f4:11:e2:01:69:
         87:47:89:af:70:7a:10:28:7a:48:4b:26:06:85:87:aa:3a:e2:
         3f:2b:c3:11:e2:c3:c0:2f:8b:d5:41:72:38:b6:e5:92:10:60:
         b9:56:7c:d8:19:4d:ee:d4:b2:c8:77:7a:be:30:41:50:0d:3d:
         b9:a2:50:d7:81:40:5e:69:b1:dd:69:5c:88:30:f1:cf:fa:74:
         33:46:a3:6d:03:94:9b:c7:51:ae:5a:2a:68:cf:58:5d:f8:29:
         a0:b3:6f:dd:55:5f:a3:7a:c8:da:8b:77:29:39:ab:a9:62:4c:
         23:07:cb:c8:42:2f:1a:05:6a:7f:a0:55:fe:a3:29:03:40:4e:
         38:78:b5:e3:fa:71:e9:fc:1a:db:43:74:77:9b:68:d6:05:d7:
         35:d0:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:01:03 2025 by rpki-client