Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31302e302f32332d3233203d3e203538343837.roa
File:                     3130332e3234372e31302e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          7Bw2jV1FNQEjR2EKgjyjuhD3huTCWwNmE8sbY8duMHo=
Subject key identifier:   34:37:42:ED:06:85:E6:8E:CB:0D:46:05:D5:B8:17:C3:A4:82:2F:AA
Certificate issuer:       /CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Certificate serial:       0242B39C8697FFD646789E3B1CD652A348FAE2DA
Authority key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31302e302f32332d3233203d3e203538343837.roa
Signing time:             Wed 01 Dec 2021 08:00:01 +0000
ROA not before:           Wed 01 Dec 2021 07:55:01 +0000
ROA not after:            Thu 01 Dec 2022 08:00:01 +0000
asID:                     58487
IP address blocks:        103.247.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:42:b3:9c:86:97:ff:d6:46:78:9e:3b:1c:d6:52:a3:48:fa:e2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
        Validity
            Not Before: Dec  1 07:55:01 2021 GMT
            Not After : Dec  1 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:85:31:73:1e:80:ee:42:8d:05:87:ff:f6:
                    79:44:22:38:5f:cf:49:66:38:5c:9f:c8:a7:14:db:
                    b2:eb:46:c9:4f:08:b2:a5:93:f2:06:81:47:88:ae:
                    2a:98:11:90:a9:92:7f:53:22:7b:5d:91:2d:8b:3c:
                    2b:69:6e:a7:c6:6f:99:9b:77:40:75:d0:1b:34:88:
                    5c:1e:0b:43:62:d8:60:49:17:0b:22:30:60:24:51:
                    6d:b3:e4:19:0d:71:91:a5:f4:5f:99:90:0e:58:a5:
                    9b:6e:a1:65:36:17:4b:d4:46:42:c6:fb:69:df:5d:
                    c3:29:03:7c:0b:79:22:b6:d8:87:4c:b7:76:e1:20:
                    1a:36:37:32:9d:03:d5:16:e8:f5:9e:7b:65:bc:80:
                    e2:3d:2c:49:3d:f2:cb:c5:0d:59:00:fc:05:c3:b6:
                    1a:4d:ff:1a:24:92:8c:86:82:d0:79:35:10:46:f8:
                    89:be:7c:63:79:c8:7a:f2:20:40:33:e7:c3:21:a6:
                    e3:76:64:10:ef:a8:44:26:c0:a7:1a:c4:67:00:79:
                    99:db:ef:29:cd:62:1f:4a:de:59:09:88:9c:0a:17:
                    d7:f6:1a:b9:61:46:c3:3b:37:57:22:30:9a:c1:9c:
                    7e:98:ca:f8:d2:34:56:0d:a6:a5:4e:56:15:c3:81:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:42:ED:06:85:E6:8E:CB:0D:46:05:D5:B8:17:C3:A4:82:2F:AA
            X509v3 Authority Key Identifier:
                keyid:6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e31302e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:62:59:c8:15:35:db:2e:3d:2e:3a:fc:e1:94:cb:30:ee:
         eb:53:62:b8:ed:bc:fe:60:8e:64:a7:db:07:77:fb:e9:75:f4:
         39:61:55:2d:db:6b:37:e1:cb:3e:27:06:8a:43:4a:c6:b8:a9:
         b8:09:40:d4:9b:b6:e1:bb:2d:d4:d3:a7:04:20:33:46:b3:27:
         04:e9:2f:05:0d:e4:f1:7a:be:11:23:5d:8c:2a:56:09:0b:70:
         31:b9:7c:b3:00:24:a6:e5:6d:1a:1e:da:b5:e9:9b:81:fc:bd:
         6a:98:dc:f6:d6:57:ff:3d:65:ab:7e:ce:ea:af:d0:84:41:ab:
         52:96:b5:42:74:c0:3c:c5:a4:56:fa:f5:95:99:59:b4:29:27:
         f2:fa:e6:c4:13:1b:59:16:c0:9b:21:a6:b6:8e:67:51:5a:64:
         3c:91:45:02:b6:2d:b7:70:9d:28:1a:db:00:62:b0:f6:93:80:
         5f:ff:a8:2f:f4:35:2e:0d:06:4c:2f:ae:d3:87:ad:69:0a:87:
         38:0d:3a:63:91:45:71:71:89:29:52:f1:87:db:56:dd:81:a4:
         9f:21:85:61:4c:c8:67:0d:5c:6c:22:46:3f:3a:1d:9a:76:b9:
         f4:0a:e2:d7:93:d7:99:34:61:e5:15:35:bc:e0:8f:d1:50:81:
         63:29:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org