Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
File:                     3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (raw, json)
Hash identifier:          Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=
Subject key identifier:   58:8A:41:09:E1:85:B1:B3:4D:A0:5D:F3:32:DB:AB:0B:28:F5:28:9D
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       55A037B0E5A92F90B073FFCA516198D489390D3F
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
Signing time:             Mon 16 Dec 2024 10:01:35 +0000
ROA not before:           Mon 16 Dec 2024 09:56:35 +0000
ROA not after:            Mon 15 Dec 2025 10:01:35 +0000
asID:                     56286
IP address blocks:        103.26.190.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a0:37:b0:e5:a9:2f:90:b0:73:ff:ca:51:61:98:d4:89:39:0d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Dec 16 09:56:35 2024 GMT
            Not After : Dec 15 10:01:35 2025 GMT
        Subject: CN=588A4109E185B1B34DA05DF332DBAB0B28F5289D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:ee:32:e5:ad:90:f4:11:c2:b5:be:2f:65:
                    b1:0b:1b:9a:dc:49:a8:e6:87:8a:d7:59:a3:70:9b:
                    b1:10:fc:e8:44:df:e4:20:9c:6b:1c:63:2f:74:64:
                    96:8a:29:c7:b3:b9:0e:83:83:03:de:51:80:0f:e6:
                    dd:b1:7f:05:ce:4e:64:aa:02:98:26:2e:f4:86:f0:
                    65:6c:de:04:d9:5f:ae:a7:ee:1e:a5:a0:36:06:cf:
                    c0:4e:dd:6b:8f:fc:d5:ab:26:11:11:96:01:13:b0:
                    8a:40:02:5f:5f:a4:3b:71:49:b1:97:d0:78:d4:8b:
                    43:71:43:75:63:51:11:2a:ef:19:ff:53:42:3a:1a:
                    72:17:8e:d8:55:30:d0:93:8b:36:6c:65:1b:4b:2a:
                    93:bd:22:22:a7:6a:aa:9a:fb:1e:b8:0e:bb:ab:3b:
                    38:6a:dc:ef:ce:2b:6f:18:1e:c2:96:54:37:ab:6c:
                    5f:c6:36:6f:40:8a:b6:be:48:d5:e9:8a:14:9d:a7:
                    c9:f4:78:91:07:a7:44:8f:52:7a:4c:06:36:c8:12:
                    9f:3d:6e:db:ef:b3:a6:3c:49:e7:bf:8c:6d:0f:37:
                    9a:de:6e:33:11:a2:24:5b:f7:eb:e7:51:dc:bc:3c:
                    50:82:17:8c:b0:07:54:3a:4a:69:e7:35:06:1c:69:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:41:09:E1:85:B1:B3:4D:A0:5D:F3:32:DB:AB:0B:28:F5:28:9D
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:66:bf:f6:64:1e:e8:28:a4:2f:16:96:0a:5b:cc:65:25:7b:
         de:56:1f:b5:50:67:10:79:72:17:30:2d:fc:b6:39:f9:32:87:
         5f:8a:81:dd:a7:d1:39:ce:28:7e:c4:67:ce:79:77:03:7a:c2:
         ef:fc:be:6f:f0:e2:00:a9:d2:35:ca:c5:07:2a:eb:e8:36:8d:
         00:0b:3e:a3:11:9d:89:fa:d5:10:90:49:0c:1b:df:c1:5f:21:
         15:e7:21:0a:fb:b8:ef:2b:e4:5a:01:93:a5:28:70:87:c3:4b:
         b1:03:d0:a2:be:ba:97:cd:fc:80:28:59:bf:84:c2:9e:5a:a8:
         bb:67:50:2a:21:fb:0f:59:b6:c3:34:95:a5:d2:4e:29:16:49:
         ba:89:3a:27:7d:bb:01:6f:3e:3f:d3:ac:42:4f:18:d8:05:1d:
         23:68:dd:03:4c:40:17:60:36:64:53:df:b5:0f:8d:21:00:50:
         03:03:2d:4e:b8:4d:e0:09:ec:70:89:95:ef:95:21:b0:93:69:
         d8:9f:72:9d:7d:16:ae:6a:e3:16:9c:c3:fc:3d:19:a5:37:40:
         b4:19:3d:0a:43:ac:8f:76:55:96:5c:01:82:fa:0a:fc:58:51:
         9f:7d:d4:2e:18:fc:03:9e:f7:5d:68:2c:ca:a0:84:2c:16:5f:
         f6:94:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:10 2025 by rpki-client