Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37392e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37392e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          0Vx/6gGdBycrbMoc2pS9yz9JdS5jqA+BnnMw9UFh0cI=
Subject key identifier:   D1:2A:EA:FF:C4:5A:42:5D:46:02:37:39:9C:17:19:AA:F8:B8:E6:5F
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       26A148043F4DF9077910969EA450E8B51719A7BD
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37392e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 04 Aug 2024 09:00:00 +0000
ROA not before:           Sun 04 Aug 2024 08:55:00 +0000
ROA not after:            Sun 03 Aug 2025 09:00:00 +0000
asID:                     135474
IP address blocks:        103.73.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a1:48:04:3f:4d:f9:07:79:10:96:9e:a4:50:e8:b5:17:19:a7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Aug  4 08:55:00 2024 GMT
            Not After : Aug  3 09:00:00 2025 GMT
        Subject: CN=D12AEAFFC45A425D460237399C1719AAF8B8E65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:ab:66:99:31:2f:de:e6:7c:6f:0e:3c:c6:
                    1f:72:d9:b7:b1:fb:22:8c:9a:25:14:55:3b:bf:da:
                    0a:67:df:1a:8f:c8:7c:25:76:f5:20:b0:dd:7b:76:
                    9d:e2:1c:ba:20:e9:38:e6:30:7e:b5:c0:1b:7b:89:
                    2f:16:26:53:7c:57:6d:3f:56:3c:28:ea:af:10:6d:
                    9d:97:a5:76:3a:9f:4a:9a:5e:bb:20:77:41:64:b5:
                    13:37:20:dd:68:0b:2a:07:a1:7e:90:08:08:07:12:
                    aa:df:b8:57:8b:24:1f:b7:ee:38:5e:38:8c:ae:6c:
                    ae:08:1b:2e:26:42:b1:cc:a3:bd:44:59:2a:fe:52:
                    c1:49:1a:2d:d5:06:e8:90:80:d4:98:38:dd:f8:c4:
                    de:c3:81:3e:63:74:b5:23:18:9d:82:9b:01:37:15:
                    f0:57:5e:e7:b5:e2:7d:ee:86:2a:5a:42:37:44:48:
                    d7:86:eb:99:77:63:d5:b7:fc:54:a2:b6:ee:6a:fa:
                    dd:69:eb:67:93:73:1f:7a:3c:93:3c:ce:19:a8:37:
                    d0:4d:40:2d:c5:38:2e:26:85:cc:3f:d2:51:c6:75:
                    86:76:03:0d:53:36:68:68:ad:59:81:ec:3c:e6:68:
                    d6:ff:a1:e8:bd:8b:aa:4d:c9:37:f2:ad:4c:28:f6:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2A:EA:FF:C4:5A:42:5D:46:02:37:39:9C:17:19:AA:F8:B8:E6:5F
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37392e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:51:04:e5:9b:0f:32:af:bd:55:d8:82:b4:81:fd:ad:91:1f:
         2c:4e:59:06:fb:d0:4d:61:35:96:46:1c:ee:f3:75:ff:25:7f:
         66:23:04:28:e3:31:c4:73:e2:4c:e0:b0:60:32:7a:9a:c1:8e:
         92:14:8b:57:8e:55:0f:17:a3:c8:ac:45:5b:fb:d2:48:15:bd:
         6d:11:64:0d:da:cd:2b:80:cc:e3:17:ab:03:c8:af:12:f4:61:
         24:36:f7:57:d9:7d:04:eb:85:fb:0e:85:84:0e:9a:d8:d3:ca:
         b1:fe:13:55:b6:a9:8c:25:41:0e:5d:18:3a:e9:ae:12:09:63:
         09:e9:1c:3f:43:e9:9b:61:79:23:6b:ba:ed:e6:54:13:f9:96:
         e0:14:28:81:39:81:a2:49:ae:7d:a6:e5:29:46:fe:20:62:14:
         69:5e:45:8c:ab:09:e8:f2:03:fd:bd:7f:0a:9d:74:0b:60:f2:
         4e:e0:f2:a8:8d:42:d8:82:6c:1c:30:67:0b:f7:16:55:43:7d:
         61:da:39:b3:8f:95:13:b8:50:de:65:bd:2c:8f:6c:6a:54:c7:
         76:e4:28:10:50:85:a0:50:49:70:6e:23:b5:68:d9:59:b4:d4:
         db:37:a5:39:2d:8c:e6:30:08:18:6a:27:52:e1:60:71:e4:3b:
         1c:a7:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:24 2025 by rpki-client