Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa
File:                     3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (raw, json)
Hash identifier:          /YMKURBm9TwSTxyzf2Kmx28ZIOeUEZGW5o7BX+kYPo0=
Subject key identifier:   54:99:81:B2:15:FE:2C:66:14:7B:F9:67:28:13:F3:A5:53:32:B4:ED
Certificate issuer:       /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Certificate serial:       3D6B4E469BA0DFE5B19EAEF59C416117981DE64A
Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa
Signing time:             Fri 29 Nov 2024 03:02:32 +0000
ROA not before:           Fri 29 Nov 2024 02:57:32 +0000
ROA not after:            Fri 28 Nov 2025 03:02:32 +0000
asID:                     149391
IP address blocks:        103.181.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6b:4e:46:9b:a0:df:e5:b1:9e:ae:f5:9c:41:61:17:98:1d:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
        Validity
            Not Before: Nov 29 02:57:32 2024 GMT
            Not After : Nov 28 03:02:32 2025 GMT
        Subject: CN=549981B215FE2C66147BF9672813F3A55332B4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:bd:92:8d:e7:ac:9e:71:cb:d4:39:f5:ee:
                    88:32:87:fc:d4:a4:85:0b:a4:b9:12:1b:15:0e:76:
                    08:4d:82:57:62:8e:aa:ca:80:86:48:fd:74:0f:e2:
                    42:26:94:1e:44:63:10:35:78:29:dd:49:08:2a:75:
                    06:81:33:43:ce:79:07:86:0e:97:36:c1:41:3e:ea:
                    9f:76:d7:66:41:a2:85:14:03:48:1f:f9:15:37:70:
                    1a:36:7b:49:47:59:8b:1e:5e:8e:52:5e:c1:60:35:
                    d6:62:d3:10:96:56:5e:ea:3f:72:dd:63:de:bd:1d:
                    71:61:a7:cc:86:ec:88:15:c9:79:79:ac:2c:b1:54:
                    49:72:bf:79:63:4c:f0:93:5e:48:00:7d:3b:70:c1:
                    11:41:0c:ff:14:5a:fd:5a:3c:9e:33:ed:d3:df:cd:
                    b8:62:09:73:17:5e:a8:88:e9:d6:1e:ab:63:c1:3d:
                    24:90:22:cd:08:53:8f:9e:9a:1a:70:62:24:26:42:
                    e8:ae:9d:54:2e:e9:a6:04:68:6a:2c:82:08:ff:9e:
                    ac:20:5a:f6:f6:5a:e9:90:df:63:3d:65:c1:39:f5:
                    2b:28:24:2d:bd:b0:4f:75:e8:4f:53:28:45:1c:82:
                    8e:36:6c:2b:a6:5c:f4:cf:94:6b:49:cb:09:b3:7a:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:99:81:B2:15:FE:2C:66:14:7B:F9:67:28:13:F3:A5:53:32:B4:ED
            X509v3 Authority Key Identifier:
                keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:de:19:cb:fd:75:04:0c:b1:8b:cc:d9:56:be:1d:57:29:
         14:be:33:a2:60:19:9f:97:e6:f1:72:76:0d:86:ab:66:aa:0f:
         cf:1f:65:ac:43:34:84:7a:c5:91:64:9a:5d:75:8d:7c:fb:a8:
         a1:62:b7:7f:e4:3a:56:13:34:22:08:ce:93:5b:1c:c7:c9:9f:
         be:15:b5:0b:24:6e:46:7d:04:0e:f9:b3:fd:d1:b4:73:c2:de:
         84:7f:30:fd:b7:09:40:73:49:a8:73:84:03:76:d9:3c:7a:74:
         d1:49:99:0f:5c:b9:5d:c6:05:5c:68:d8:64:b9:ea:49:4f:45:
         5e:b1:16:c8:a1:6a:0e:c1:ae:a6:50:be:49:58:14:1f:2f:62:
         de:ca:42:5f:7d:f5:a9:59:ac:4e:9b:a1:2e:64:07:81:1e:69:
         9c:cb:01:d1:8f:4c:15:0b:26:6c:2a:5f:d6:7c:4f:5e:63:5c:
         18:fd:8f:8d:02:32:81:9e:9d:6d:bc:0f:de:27:87:93:6e:0c:
         3c:14:d8:aa:b0:f7:00:e0:73:64:a9:3d:9c:cd:68:3c:36:30:
         7f:4f:10:f2:f1:b1:53:90:ed:db:c4:ba:7a:91:2a:e5:6f:08:
         4c:f2:5d:7c:24:f8:67:1c:24:3f:24:68:ba:ae:89:73:3e:08:
         46:2a:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:23 2025 by rpki-client