Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa
File:                     3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          m0CFS0bXXlC2sSkkYuX1uK7YpHcSKbwTasnOg//5UpE=
Subject key identifier:   14:24:EC:8F:43:61:7D:13:EB:B0:6D:D1:AD:C2:14:6E:D3:E6:4A:DF
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       2E58D377CA827BE2E50EF8B5E421FCC8697453C7
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa
Signing time:             Mon 01 Jul 2024 01:02:28 +0000
ROA not before:           Mon 01 Jul 2024 00:57:28 +0000
ROA not after:            Mon 30 Jun 2025 01:02:28 +0000
asID:                     46026
IP address blocks:        175.111.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:58:d3:77:ca:82:7b:e2:e5:0e:f8:b5:e4:21:fc:c8:69:74:53:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Jul  1 00:57:28 2024 GMT
            Not After : Jun 30 01:02:28 2025 GMT
        Subject: CN=1424EC8F43617D13EBB06DD1ADC2146ED3E64ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:10:a2:52:30:37:ae:a8:40:d2:e7:d7:4c:
                    34:c0:70:33:da:2e:55:94:55:62:25:2d:06:67:73:
                    62:6d:85:c0:94:c8:44:7d:e9:18:1c:ec:a2:44:fe:
                    6b:36:79:7d:53:0b:a4:e9:f7:83:21:f3:2b:ae:52:
                    b1:81:b2:f9:c3:71:90:07:07:6a:76:44:9e:a8:ae:
                    16:7c:85:0f:49:23:0a:db:64:3d:eb:8c:73:fb:4f:
                    ea:f2:ff:8b:77:1b:89:f3:c3:ae:b7:56:04:65:db:
                    2f:cd:32:5f:40:e0:79:ce:71:73:d4:c7:15:71:4f:
                    fd:91:6e:14:f2:44:bf:7a:a0:37:cc:7a:63:6d:6c:
                    86:4f:23:f0:03:39:77:ba:a4:2d:be:49:91:ab:50:
                    be:9a:5b:6b:76:29:6f:14:b7:aa:e6:70:38:1b:d0:
                    a4:00:12:10:38:63:74:bf:c4:80:0c:bf:d2:ab:52:
                    4d:70:f9:2e:2f:e7:ff:cc:9a:50:e5:2d:7f:d7:a0:
                    44:76:92:23:98:9c:49:70:dc:a5:ad:5c:df:a8:7e:
                    4e:e4:0c:b0:20:1e:e8:69:29:13:77:33:55:57:23:
                    31:3f:49:f8:c5:ab:07:a1:87:20:46:1e:9c:bb:92:
                    79:f8:1d:2b:08:75:d3:6c:a3:3c:1f:31:dc:b6:cb:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:24:EC:8F:43:61:7D:13:EB:B0:6D:D1:AD:C2:14:6E:D3:E6:4A:DF
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:c1:dc:ba:38:bc:ec:d3:fc:98:4d:f9:c0:a8:45:55:15:
         28:35:ca:af:f8:27:ff:cf:ec:b0:d1:05:47:57:1b:e4:4d:ef:
         15:8c:90:d2:e6:08:a8:1f:f7:62:73:21:b3:99:73:8f:05:f5:
         57:d4:10:b7:c2:6c:11:e6:67:3d:d2:dd:23:0b:29:c9:00:d7:
         90:70:58:55:2d:4e:0a:12:2c:db:6b:71:8c:0d:28:5d:c3:e2:
         79:de:04:29:5b:ef:78:03:65:d1:81:ea:d4:be:65:d8:f9:04:
         ac:02:c2:24:ba:e8:60:4e:2d:31:17:fa:28:0c:ad:ee:fa:92:
         cc:9d:0e:03:37:6b:7f:d3:78:00:2b:43:00:ed:2f:a6:75:79:
         4a:1f:9a:bb:84:97:98:58:6c:1b:b3:2c:8a:26:c1:af:05:ca:
         86:33:4f:bc:de:81:e8:3d:9e:b4:5b:19:c8:7e:58:fa:e7:4a:
         f3:db:53:81:1a:ed:d9:38:3e:4b:36:55:33:e5:f9:e9:08:26:
         c1:0e:34:26:dd:f7:19:0d:d0:ed:1d:14:61:97:7a:ed:8d:99:
         71:29:18:26:52:e3:21:8d:b7:c8:bf:52:96:0c:fd:71:50:1b:
         bf:e6:d7:b4:1f:98:17:e7:a9:8d:92:0a:6d:bc:e8:f0:5a:82:
         c5:d4:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:25 2025 by rpki-client