Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          EM84Uit+jHEPaWwxIet7fMczMLekd8I1jzqnzjCGoSs=
Subject key identifier:   3E:30:F3:21:D7:95:7B:97:8B:4A:77:CE:F4:4D:9C:F3:45:3B:AE:F7
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       3353B4BE89CE1BEDE3543ABD789DCFB70B16A5CA
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 04 Aug 2024 08:00:00 +0000
ROA not before:           Sun 04 Aug 2024 07:55:00 +0000
ROA not after:            Sun 03 Aug 2025 08:00:00 +0000
asID:                     135474
IP address blocks:        103.73.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:b4:be:89:ce:1b:ed:e3:54:3a:bd:78:9d:cf:b7:0b:16:a5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Aug  4 07:55:00 2024 GMT
            Not After : Aug  3 08:00:00 2025 GMT
        Subject: CN=3E30F321D7957B978B4A77CEF44D9CF3453BAEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:2d:59:a1:27:71:ff:65:45:29:de:d5:66:
                    0a:bc:a9:65:94:b2:a1:47:61:6f:0c:8a:27:08:e3:
                    60:bd:eb:b0:5c:48:04:58:53:6a:1f:eb:74:1e:b3:
                    99:7b:8d:4c:34:f7:f1:a5:07:69:c4:42:b4:bf:b7:
                    d8:e2:89:8f:e4:e4:6b:ee:b5:36:20:7d:9b:5d:9d:
                    89:da:bb:42:7f:78:05:e6:c9:00:c6:8c:08:90:2e:
                    0e:4d:c2:8c:22:48:86:03:0a:88:40:0b:1d:3d:97:
                    d5:de:be:f6:82:d0:2e:76:87:94:b8:c4:fc:47:d3:
                    8e:53:e3:af:a9:21:95:ed:ac:f4:c9:26:a2:b6:74:
                    fd:18:5c:e2:ac:ef:bb:e0:df:7d:cf:56:b9:e7:4e:
                    8e:e1:19:c8:29:d8:50:40:c8:94:ec:ec:99:df:10:
                    cd:fb:4d:cd:f6:2e:a8:9c:52:63:00:29:6d:b0:be:
                    50:b7:57:72:49:64:ee:ad:5a:c1:2f:3c:c1:ba:20:
                    30:d4:ce:31:cf:17:99:fb:20:35:31:90:16:32:94:
                    21:36:b5:c9:4d:eb:49:68:65:6d:c7:28:63:a2:dc:
                    10:e8:eb:d3:54:77:b8:ab:af:e2:26:4b:c2:59:29:
                    83:bb:a8:e8:38:c9:69:63:70:cc:97:64:65:7c:08:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:30:F3:21:D7:95:7B:97:8B:4A:77:CE:F4:4D:9C:F3:45:3B:AE:F7
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:14:6d:69:13:28:73:7f:23:3d:5b:05:1e:b1:6a:c6:87:
         58:c1:38:b2:44:01:b0:59:e7:c8:df:99:05:77:0b:0d:cb:3b:
         cd:a6:c7:f1:ef:8c:77:32:d1:89:84:19:d1:06:42:69:7b:5c:
         9e:c0:8d:4b:b2:0d:95:5a:0d:a5:7b:e7:b5:7f:15:9b:3d:d5:
         e8:0b:d4:e6:47:c4:fd:36:7c:b7:be:db:58:a3:98:ae:06:ec:
         af:23:6e:f3:38:70:5a:e2:45:b4:c9:49:53:30:61:94:76:de:
         93:b9:bb:e9:0e:6c:32:a0:25:01:d1:16:95:56:bc:32:19:e1:
         8a:f5:a5:cb:49:bd:d2:6d:75:b3:1e:e2:bc:0f:e3:71:f2:f1:
         37:7b:a0:d9:c8:26:f9:0e:d2:6b:f6:ac:13:67:49:37:07:f3:
         1c:72:05:af:93:22:81:5d:40:a1:20:5b:69:80:65:ce:0a:cf:
         33:91:c8:5c:2f:cd:04:d7:2c:a6:f9:a5:7a:95:fb:f3:1f:70:
         67:a6:5b:e3:02:69:78:b8:2d:9d:93:98:4d:87:76:25:ea:8b:
         8f:97:a6:4e:bf:69:ba:b0:e2:60:0a:c1:21:4c:45:79:99:2a:
         75:8d:2a:f1:5f:36:42:93:a5:37:af:b5:4b:f4:a8:e0:7d:2c:
         07:34:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:08 2025 by rpki-client