Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e392e302f32342d3234203d3e203538343837.roa
File:                     3130332e3234372e392e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          pIiyiemSPq2wuMyt8KtbvJaDbmZIFZDGnL9QvnE4tg0=
Subject key identifier:   07:25:CA:A9:68:4B:3D:AE:D2:1B:FE:1A:2B:4D:3D:BE:DD:10:73:38
Certificate issuer:       /CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Certificate serial:       56EEFA4DFF26AECE8070B2CB49E7054F1129C9CA
Authority key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e392e302f32342d3234203d3e203538343837.roa
Signing time:             Wed 01 Dec 2021 08:00:01 +0000
ROA not before:           Wed 01 Dec 2021 07:55:01 +0000
ROA not after:            Thu 01 Dec 2022 08:00:01 +0000
asID:                     58487
IP address blocks:        103.247.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ee:fa:4d:ff:26:ae:ce:80:70:b2:cb:49:e7:05:4f:11:29:c9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
        Validity
            Not Before: Dec  1 07:55:01 2021 GMT
            Not After : Dec  1 08:00:01 2022 GMT
        Subject: CN=3082010A0282010100C105FDDB43020E420B69EBFE9DBC4209776F06D229A84A5DB894DD913BE6C831FBBB67EF31F63F73E620DCEEE265A81FFF89244441E37A733DC0E37637D448A87FBF1C604DE10FA1AFE624ADF2BAA4A97361B6D5B713AF785045F16A0C6C2062DAC126785F05C96DD79DFE828ADDE3BD0252C3DDB99BB9F7C435F71313E680AE267F660D97B410EFC23EEAFC2FE42AC4FCE09A682065ACFF9846243BA76E1081928C37DA0EFC432A0A9BDCB7C58C49D8A15757E4B5C2844AC7325A2D325F13D7B9C0268CB7FCBCC5D7E19BDFCE07EF3C2019C30817C54558C66699068429EF3C99C51CC15CAD9CF85F3E5867DC5C6058041BCBD6DEA0C001F279620BEE7CDD410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:fd:db:43:02:0e:42:0b:69:eb:fe:9d:bc:
                    42:09:77:6f:06:d2:29:a8:4a:5d:b8:94:dd:91:3b:
                    e6:c8:31:fb:bb:67:ef:31:f6:3f:73:e6:20:dc:ee:
                    e2:65:a8:1f:ff:89:24:44:41:e3:7a:73:3d:c0:e3:
                    76:37:d4:48:a8:7f:bf:1c:60:4d:e1:0f:a1:af:e6:
                    24:ad:f2:ba:a4:a9:73:61:b6:d5:b7:13:af:78:50:
                    45:f1:6a:0c:6c:20:62:da:c1:26:78:5f:05:c9:6d:
                    d7:9d:fe:82:8a:dd:e3:bd:02:52:c3:dd:b9:9b:b9:
                    f7:c4:35:f7:13:13:e6:80:ae:26:7f:66:0d:97:b4:
                    10:ef:c2:3e:ea:fc:2f:e4:2a:c4:fc:e0:9a:68:20:
                    65:ac:ff:98:46:24:3b:a7:6e:10:81:92:8c:37:da:
                    0e:fc:43:2a:0a:9b:dc:b7:c5:8c:49:d8:a1:57:57:
                    e4:b5:c2:84:4a:c7:32:5a:2d:32:5f:13:d7:b9:c0:
                    26:8c:b7:fc:bc:c5:d7:e1:9b:df:ce:07:ef:3c:20:
                    19:c3:08:17:c5:45:58:c6:66:99:06:84:29:ef:3c:
                    99:c5:1c:c1:5c:ad:9c:f8:5f:3e:58:67:dc:5c:60:
                    58:04:1b:cb:d6:de:a0:c0:01:f2:79:62:0b:ee:7c:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:25:CA:A9:68:4B:3D:AE:D2:1B:FE:1A:2B:4D:3D:BE:DD:10:73:38
            X509v3 Authority Key Identifier:
                keyid:6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/3130332e3234372e392e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:c4:0b:f8:97:1a:92:87:ac:1b:d6:b2:e9:d0:b0:ff:c8:
         4f:08:60:98:2d:26:b2:cb:f6:08:cf:c1:6d:9b:51:8c:d7:f8:
         a2:11:3a:26:1b:b5:e5:23:89:f4:64:a1:c4:0b:72:0f:72:52:
         f9:fa:e0:70:4d:97:be:44:fd:1d:81:2c:08:7e:0b:b7:ce:53:
         b6:92:f9:d2:be:a8:c2:ac:f0:e8:6f:77:6c:d0:fe:7c:28:d1:
         dd:de:39:9e:02:68:14:8a:45:95:fd:de:34:6e:24:74:60:af:
         4f:a7:85:85:6f:c2:f5:68:5d:6a:27:db:0d:66:48:a5:77:bb:
         e1:a0:34:1e:de:42:91:18:aa:8b:5f:d9:1f:be:8b:31:5a:c4:
         0b:7d:a9:86:85:2f:24:1d:a1:39:4a:b6:d0:5b:a5:2b:91:97:
         c7:8e:b3:ad:01:f2:11:a5:e2:90:9c:9e:82:af:58:2b:c0:68:
         3e:e4:53:4f:07:01:9c:da:2b:1f:55:46:18:ac:23:ec:d6:e1:
         53:1f:be:23:e7:cb:bc:96:0d:71:62:16:fb:dd:bd:ad:f8:b5:
         e7:19:65:80:d8:2b:78:e0:14:c3:4f:bb:04:6e:3f:20:85:10:
         3a:ec:98:03:40:ea:75:f2:f5:b3:ee:ef:16:12:ec:92:a2:dd:
         41:09:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org