Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137302e302f32332d3233203d3e20313339393532.roa
File:                     3130332e3137382e3137302e302f32332d3233203d3e20313339393532.roa (raw, json)
Hash identifier:          TfwUwz3E5xAexSmXJqOwofYUlX2uCgZCysA82xGLRFo=
Subject key identifier:   F0:49:9A:6A:8B:C5:91:63:35:D5:16:5B:93:E5:39:3F:3A:4F:E1:F1
Certificate issuer:       /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1
Certificate serial:       06023EE08AEC7F2E1BDF5D71CB9F1141BEE58894
Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137302e302f32332d3233203d3e20313339393532.roa
Signing time:             Mon 17 Jan 2022 07:32:17 +0000
ROA not before:           Mon 17 Jan 2022 07:27:17 +0000
ROA not after:            Tue 17 Jan 2023 07:32:17 +0000
asID:                     139952
IP address blocks:        103.178.170.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:3e:e0:8a:ec:7f:2e:1b:df:5d:71:cb:9f:11:41:be:e5:88:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1
        Validity
            Not Before: Jan 17 07:27:17 2022 GMT
            Not After : Jan 17 07:32:17 2023 GMT
        Subject: CN=3082010A0282010100BF9EABF95A2D64095975EEB67818CD2C4241A774B43392C79E7E6F09EE775679E6A6AA13A9B5C09C12900E184A0E345E0878C1E547EF8040176823B566C4CF96F84F8CEC2370F9560AC62474B8A42EC9A92FA14331E3E83252CD71E078F14416B1EF3222E0304B88E6E771E4437682A3B46B658D0D18147E90678D82B6C91FFF23BE685F6D66D397FD93FCE749081396CBEC9336060A823245AF6BE03507337C2C2FA3FA7936C6C92BE3E1A0B17CFF1BB3E6A673AC5691840D6D23AD70531F17F17BA9EBDCF0055855CE27294BB7C0CCF8C6A74E23A755DED5E91C60F25B12217A4AA4304C3F1B4F127E960CF692081196278B459E7FE7E8D10B259A9D2C40DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:ab:f9:5a:2d:64:09:59:75:ee:b6:78:18:
                    cd:2c:42:41:a7:74:b4:33:92:c7:9e:7e:6f:09:ee:
                    77:56:79:e6:a6:aa:13:a9:b5:c0:9c:12:90:0e:18:
                    4a:0e:34:5e:08:78:c1:e5:47:ef:80:40:17:68:23:
                    b5:66:c4:cf:96:f8:4f:8c:ec:23:70:f9:56:0a:c6:
                    24:74:b8:a4:2e:c9:a9:2f:a1:43:31:e3:e8:32:52:
                    cd:71:e0:78:f1:44:16:b1:ef:32:22:e0:30:4b:88:
                    e6:e7:71:e4:43:76:82:a3:b4:6b:65:8d:0d:18:14:
                    7e:90:67:8d:82:b6:c9:1f:ff:23:be:68:5f:6d:66:
                    d3:97:fd:93:fc:e7:49:08:13:96:cb:ec:93:36:06:
                    0a:82:32:45:af:6b:e0:35:07:33:7c:2c:2f:a3:fa:
                    79:36:c6:c9:2b:e3:e1:a0:b1:7c:ff:1b:b3:e6:a6:
                    73:ac:56:91:84:0d:6d:23:ad:70:53:1f:17:f1:7b:
                    a9:eb:dc:f0:05:58:55:ce:27:29:4b:b7:c0:cc:f8:
                    c6:a7:4e:23:a7:55:de:d5:e9:1c:60:f2:5b:12:21:
                    7a:4a:a4:30:4c:3f:1b:4f:12:7e:96:0c:f6:92:08:
                    11:96:27:8b:45:9e:7f:e7:e8:d1:0b:25:9a:9d:2c:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:49:9A:6A:8B:C5:91:63:35:D5:16:5B:93:E5:39:3F:3A:4F:E1:F1
            X509v3 Authority Key Identifier:
                keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137302e302f32332d3233203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:c7:7e:ee:19:fe:b7:96:04:1d:2b:7d:61:54:0b:b7:8b:
         e1:94:16:0a:75:20:4e:6a:f6:5b:79:20:1a:0f:71:6f:a4:f0:
         2d:01:f2:6f:d3:45:51:22:59:f3:8a:f1:73:7a:9c:98:88:71:
         d3:fe:3b:68:90:11:21:7d:66:eb:f5:16:d5:e8:e9:5a:95:0c:
         b8:c6:1c:25:7d:3e:ed:be:81:1c:4b:7e:44:4a:31:3e:61:58:
         34:01:89:23:f7:5e:f7:e5:9d:6e:f5:14:02:a6:93:62:a1:94:
         fd:37:ab:c1:ab:3c:14:a4:2b:ca:da:28:ac:7c:bc:26:53:e0:
         a4:99:42:be:50:de:1a:b0:dc:7c:f1:16:ba:36:27:72:e2:55:
         33:4d:a4:43:51:9e:5c:b6:91:ee:76:1a:32:0f:0e:76:92:79:
         e5:5c:1b:27:77:d2:8e:8f:96:59:d6:88:0e:e2:74:a6:56:c6:
         82:8b:e0:1e:40:65:f7:2a:26:ca:2a:63:d3:7b:f1:28:51:76:
         88:23:54:54:d7:b0:bb:d3:53:f1:5b:30:fa:7b:63:12:d8:34:
         a5:89:ee:e5:87:d1:63:01:56:90:20:8e:2a:09:94:fd:9c:48:
         ad:a1:19:0a:bd:2f:be:c3:91:7e:42:a7:5a:0b:e7:9f:91:68:
         ce:0b:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:36 2025 by rpki-client