Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa
File:                     3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (raw, json)
Hash identifier:          eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=
Subject key identifier:   0C:B5:71:F0:C6:89:55:6A:9F:AC:C6:3A:BF:DB:03:D2:8F:A8:9E:F1
Certificate issuer:       /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E
Certificate serial:       3DF924B64BD6CF77C2E88FFE5E2CBC626A1A2B9B
Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa
Signing time:             Sat 23 Nov 2024 14:00:00 +0000
ROA not before:           Sat 23 Nov 2024 13:55:00 +0000
ROA not after:            Sat 22 Nov 2025 14:00:00 +0000
asID:                     142392
IP address blocks:        103.171.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:24:b6:4b:d6:cf:77:c2:e8:8f:fe:5e:2c:bc:62:6a:1a:2b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E
        Validity
            Not Before: Nov 23 13:55:00 2024 GMT
            Not After : Nov 22 14:00:00 2025 GMT
        Subject: CN=0CB571F0C689556A9FACC63ABFDB03D28FA89EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cf:ff:8c:6c:1b:10:12:b9:55:9f:32:26:40:
                    eb:b3:66:fa:7c:cb:81:87:0d:29:0f:39:57:cf:dc:
                    d6:a7:f9:c9:68:49:9c:9b:b3:8e:c7:19:75:8a:a2:
                    8a:61:77:2c:95:38:c0:6f:9a:af:a5:1a:39:79:c8:
                    9c:e3:73:48:18:be:3c:23:01:b5:ec:a3:fc:46:68:
                    0e:fe:e9:26:93:20:7d:6c:03:ca:3b:85:22:b8:ae:
                    79:bb:7f:c0:0c:b3:88:ba:66:94:30:85:f0:f7:87:
                    bf:45:2c:8e:e5:83:9b:2e:90:10:b5:f0:f5:e6:ff:
                    f5:2f:a9:7a:ff:0c:b5:ed:5d:d0:09:a6:ee:94:1f:
                    69:34:be:30:76:19:e4:ed:41:b3:1b:7c:75:4f:b8:
                    fd:bb:c6:62:46:4d:61:51:a7:5e:a2:92:d6:0c:a1:
                    ce:59:c4:2f:fc:95:cd:11:74:11:39:84:09:49:fc:
                    a5:4c:a0:08:9a:6c:e5:12:67:2f:30:4c:7b:c5:86:
                    27:41:1c:5a:d6:c5:c8:13:fc:f7:cd:d6:bd:fe:ef:
                    ad:ed:62:5c:92:ee:12:5e:63:96:1f:2f:ab:71:59:
                    c5:ee:11:c0:e4:2f:93:d9:6e:7a:55:62:3b:aa:d3:
                    87:59:a1:e7:da:f6:5a:0f:b7:4f:cf:70:f2:a5:27:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B5:71:F0:C6:89:55:6A:9F:AC:C6:3A:BF:DB:03:D2:8F:A8:9E:F1
            X509v3 Authority Key Identifier:
                keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:3c:66:cf:83:a9:38:d7:6e:2a:5e:ba:b0:a3:9f:d9:82:
         46:15:87:f4:22:52:4f:4f:24:de:53:d6:2c:2f:6b:b0:ea:cb:
         6b:c3:c5:ef:29:f0:27:b7:22:08:eb:89:6f:1b:0a:85:9b:82:
         92:bf:9c:3d:b1:c1:2d:be:0e:1a:6a:1b:aa:8d:4a:f6:57:30:
         9f:ac:50:0c:38:71:5f:a7:a1:1a:a1:d6:4c:81:f1:aa:bd:60:
         16:36:fa:1b:94:9a:36:5d:9c:6b:0a:50:f1:53:6b:7b:3f:69:
         0f:8c:1b:f4:fe:98:8a:1c:93:4c:56:65:cd:6a:b8:a2:b9:b3:
         38:d2:67:aa:1c:ec:8a:60:70:33:6e:bb:b3:e1:95:ba:0b:62:
         22:a0:b4:8a:bc:97:89:52:2f:23:ec:72:a9:fb:49:64:e9:42:
         de:2a:aa:11:8a:49:49:56:2a:15:aa:1b:32:ad:f9:77:c6:c9:
         27:c0:da:2f:8e:ab:34:c1:1c:31:e3:88:2e:0f:20:df:fe:d1:
         e2:ed:0f:fb:60:c5:26:c4:eb:e4:41:87:98:2d:60:7e:73:eb:
         eb:da:a9:a3:5d:a0:34:70:a5:49:41:ec:9d:8e:25:28:a3:72:
         47:bd:57:b4:0f:cc:71:10:b4:2f:6e:5a:f7:95:b8:96:17:ee:
         e7:15:39:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:05:35 2025 by rpki-client