Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
File:                     3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          FZlGjWO2QHYzsNelbvnW9T+cFLiq8WyISsSRf/rM5oc=
Subject key identifier:   9D:48:A8:48:29:1C:32:BF:10:39:2B:B7:E8:4B:7F:D0:95:B7:A6:EB
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       686ABB6213E2F9A8D211CA374DDC3B05D985A816
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
Signing time:             Thu 28 Nov 2024 03:00:01 +0000
ROA not before:           Thu 28 Nov 2024 02:55:01 +0000
ROA not after:            Thu 27 Nov 2025 03:00:01 +0000
asID:                     141968
IP address blocks:        103.42.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6a:bb:62:13:e2:f9:a8:d2:11:ca:37:4d:dc:3b:05:d9:85:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Nov 28 02:55:01 2024 GMT
            Not After : Nov 27 03:00:01 2025 GMT
        Subject: CN=9D48A848291C32BF10392BB7E84B7FD095B7A6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:a6:49:ee:ee:c2:26:04:fc:c2:75:33:e8:
                    8e:ff:c6:67:71:4a:79:b9:18:ea:10:1a:82:04:43:
                    65:16:33:e9:16:c8:f4:69:e1:e4:94:6c:cc:fc:19:
                    f0:04:a9:dd:ee:ee:64:08:7c:94:82:de:cd:7a:2e:
                    1a:d4:b6:c2:12:30:a7:97:f1:f3:62:b4:0a:52:17:
                    a8:83:fd:fc:6d:ec:25:11:65:2b:03:9c:e5:45:c7:
                    71:07:26:da:a7:74:15:0d:17:cf:20:85:a7:86:44:
                    23:8e:07:29:87:68:13:82:4e:b9:01:94:1a:2c:8e:
                    0a:98:29:2d:b0:aa:64:3e:4d:ee:34:15:63:68:66:
                    40:c2:ba:1d:e2:43:53:75:1a:9f:c1:75:2a:4f:cd:
                    19:ad:8e:a6:53:8c:6c:5d:18:6b:b1:a0:34:1b:56:
                    69:8a:3b:ff:2e:51:07:f1:17:c3:a0:a3:ce:ee:16:
                    8f:70:a8:1a:99:74:65:a4:63:ae:0e:19:e0:50:35:
                    83:de:a2:e7:2d:f8:8f:f5:ec:95:f7:7c:1d:59:cf:
                    70:37:aa:9b:31:56:9a:47:75:35:c0:bb:e8:54:0d:
                    72:f6:b0:14:48:2e:f7:5d:21:a0:90:db:65:98:ee:
                    d8:40:d4:0c:0c:ed:a6:f3:5a:fd:6c:60:71:67:42:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:A8:48:29:1C:32:BF:10:39:2B:B7:E8:4B:7F:D0:95:B7:A6:EB
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:0a:d4:49:21:d5:89:8f:49:29:89:1c:c8:ef:34:14:c1:
         17:30:c4:65:ab:69:a4:f4:8b:b6:b7:2b:be:ef:be:db:7e:19:
         4b:32:5e:30:8d:ee:fe:72:41:42:5d:a5:38:bf:32:f1:e9:77:
         d3:8f:a9:96:f7:1f:db:b6:96:ec:f0:9e:1a:90:a5:43:71:f5:
         39:1d:ce:a4:8e:1d:79:d4:6c:fd:36:61:12:d8:11:e3:31:48:
         35:31:c8:5d:b0:53:97:16:ae:f8:23:5a:ea:98:b6:a6:82:a7:
         17:8a:61:84:98:ee:f0:92:56:1f:ae:9a:06:8b:5f:75:46:d0:
         b9:90:7a:b3:4a:83:12:67:7b:4a:f6:9d:9e:71:a8:90:67:ad:
         85:c7:a7:29:c4:e5:b5:87:66:de:76:00:5a:3e:64:b6:76:b7:
         52:85:43:50:f6:40:c3:2a:dc:b2:77:62:65:74:8b:b4:e1:ee:
         05:34:81:01:b9:66:28:68:d5:1c:49:46:2b:9c:0e:38:dd:fa:
         f3:22:01:12:f5:9e:15:f9:ac:fe:f3:9b:e3:cb:81:21:0f:06:
         2a:de:dd:f6:6e:dd:a0:eb:69:1a:a2:a6:57:b4:86:74:6d:c9:
         06:a7:51:aa:a0:96:e8:61:69:f9:85:9b:b4:1f:c4:ec:09:e2:
         2b:a4:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:05 2025 by rpki-client