Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa
File:                     323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (raw, json)
Hash identifier:          Ag41AI50DiruREjZfDKbm+gavhJcDRKBf9fDEAWwcE0=
Subject key identifier:   50:7C:68:72:88:9C:66:DC:86:10:C7:AB:74:64:B6:B7:75:8D:1A:7B
Certificate issuer:       /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
Certificate serial:       26186D559D7E96F4C54A6A5343A8C715276F443A
Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa
Signing time:             Thu 23 Apr 2026 07:00:02 +0000
ROA not before:           Thu 23 Apr 2026 06:55:02 +0000
ROA not after:            Thu 22 Apr 2027 07:00:02 +0000
asID:                     134654
IP address blocks:        2405:c5c0:ff00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:18:6d:55:9d:7e:96:f4:c5:4a:6a:53:43:a8:c7:15:27:6f:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
        Validity
            Not Before: Apr 23 06:55:02 2026 GMT
            Not After : Apr 22 07:00:02 2027 GMT
        Subject: CN=507C6872889C66DC8610C7AB7464B6B7758D1A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:eb:e5:44:3a:fe:d3:78:62:24:0c:ef:5b:
                    58:c6:ec:34:e8:85:c8:ab:15:a0:f5:6b:24:d8:3f:
                    69:64:57:e1:31:d7:20:1b:af:7a:24:fa:d0:1a:d8:
                    f3:df:8c:f3:85:ee:f9:ec:62:06:3a:2c:a4:93:b2:
                    b2:ef:c3:77:93:90:55:ab:80:ec:cf:aa:59:49:a1:
                    27:30:2f:73:59:87:a9:05:4e:aa:b9:2e:da:61:55:
                    ea:23:41:18:14:a7:e1:0c:e5:54:fb:da:3f:16:08:
                    32:a1:da:ff:e1:f5:91:fe:7c:8e:52:b6:59:f9:82:
                    63:67:68:c6:8e:a1:46:a7:66:67:22:f4:15:d8:95:
                    30:1c:78:ca:e3:0a:0b:b2:75:f8:70:d4:41:17:1b:
                    2b:20:aa:c2:96:90:a3:86:81:73:88:5d:49:6e:ce:
                    03:d8:0e:9f:db:66:89:63:e5:bc:60:3e:4b:87:13:
                    7d:8c:6f:d0:78:d3:9d:62:fb:59:1c:75:5f:72:74:
                    1a:52:4a:55:1c:56:bb:54:d8:36:01:1d:bf:b6:ce:
                    22:e3:e9:be:16:4d:c2:21:c2:b1:33:0f:0c:6a:f7:
                    17:80:0f:f9:1e:4b:01:a1:68:76:f5:5d:a4:e9:5c:
                    a6:43:73:e2:57:ca:53:b7:28:d0:8d:70:8e:4c:3e:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7C:68:72:88:9C:66:DC:86:10:C7:AB:74:64:B6:B7:75:8D:1A:7B
            X509v3 Authority Key Identifier:
                keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c5c0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:bc:58:2e:d8:eb:08:af:6f:c6:f2:a0:ba:6a:2f:81:aa:
         d2:76:d9:bb:c2:8b:b9:99:b8:f0:d7:ce:cb:14:a6:06:ce:32:
         38:83:68:40:b0:46:09:c7:02:14:a7:b1:2a:45:15:fe:f3:07:
         ca:54:1a:8e:79:2b:af:85:e1:8b:e6:a2:cd:a5:0b:f3:b4:21:
         34:7f:a4:96:08:ba:b6:3b:96:d1:52:88:8c:d3:d7:e6:6c:ba:
         5b:4a:83:bc:2c:bf:6e:71:e5:29:04:f6:c3:ac:a1:24:00:78:
         8c:dc:88:db:cb:4c:b5:c4:f3:51:8a:d4:76:46:2f:4d:5f:17:
         9c:38:44:47:2a:f2:c2:e9:a2:99:ef:37:d4:fb:17:1a:e5:ee:
         e4:99:85:16:68:57:d9:cc:b0:a9:db:52:8b:05:9c:07:5c:1e:
         c5:38:a7:73:f3:21:a2:da:9f:33:79:93:a9:97:42:9f:9b:b6:
         b3:cd:54:46:05:ff:98:f5:71:a1:fa:e4:46:b5:37:1e:df:53:
         c3:d4:5e:8f:f1:d0:f8:f3:bb:fe:d2:81:d5:41:c4:0c:46:7e:
         39:0d:22:75:ce:5c:ad:64:a5:13:a5:92:5e:2f:68:da:50:98:
         55:41:50:d8:d4:7c:8e:b8:09:92:73:ae:5e:d6:1d:4d:07:55:
         f7:e6:1b:a8
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUJhhtVZ1+lvTFSmpTQ6jHFSdvRDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3
QzRDOEUwRDAeFw0yNjA0MjMwNjU1MDJaFw0yNzA0MjIwNzAwMDJaMDMxMTAvBgNV
BAMTKDUwN0M2ODcyODg5QzY2REM4NjEwQzdBQjc0NjRCNkI3NzU4RDFBN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZ+vlRDr+03hiJAzvW1jG7DTo
hcirFaD1ayTYP2lkV+Ex1yAbr3ok+tAa2PPfjPOF7vnsYgY6LKSTsrLvw3eTkFWr
gOzPqllJoScwL3NZh6kFTqq5LtphVeojQRgUp+EM5VT72j8WCDKh2v/h9ZH+fI5S
tln5gmNnaMaOoUanZmci9BXYlTAceMrjCguydfhw1EEXGysgqsKWkKOGgXOIXUlu
zgPYDp/bZolj5bxgPkuHE32Mb9B4051i+1kcdV9ydBpSSlUcVrtU2DYBHb+2ziLj
6b4WTcIhwrEzDwxq9xeAD/keSwGhaHb1XaTpXKZDc+JXylO3KNCNcI5MPr3LAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUUHxocoicZtyGEMerdGS2t3WNGnswHwYDVR0j
BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC
OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD
OEUwRC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZTQ3NTBlLTQzOTMtNDNlYy05
YWI1LWQyNDdiYmMwN2Q4Ni8wLzMyMzQzMDM1M2E2MzM1NjMzMDNhNjY2NjMwMzAz
YTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTMzMzQzNjM1MzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAk
BcXA/zANBgkqhkiG9w0BAQsFAAOCAQEAVLy8WC7Y6wivb8byoLpqL4Gq0nbZu8KL
uZm48NfOyxSmBs4yOINoQLBGCccCFKexKkUV/vMHylQajnkrr4Xhi+aizaUL87Qh
NH+klgi6tjuW0VKIjNPX5my6W0qDvCy/bnHlKQT2w6yhJAB4jNyI28tMtcTzUYrU
dkYvTV8XnDhERyrywumime831PsXGuXu5JmFFmhX2cywqdtSiwWcB1wexTinc/Mh
otqfM3mTqZdCn5u2s81URgX/mPVxofrkRrU3Ht9Tw9Rej/HQ+PO7/tKB1UHEDEZ+
OQ0idc5crWSlE6WSXi9o2lCYVUFQ2NR8jrgJknOuXtYdTQdV9+YbqA==
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:30:30 2026 by rpki-client