Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa
File:                     3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (raw, json)
Hash identifier:          I97S8ZLukPT3OvIAQZGbDvFdPCncrJKV5+kzzspVF2Q=
Subject key identifier:   23:63:58:D3:F2:B5:E1:04:81:1B:85:5C:7F:9C:38:55:F8:0E:96:5A
Certificate issuer:       /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Certificate serial:       05BA237647DD62FAA5B50CCE3AC62C3B41ACBCDC
Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa
Signing time:             Fri 29 Nov 2024 03:02:32 +0000
ROA not before:           Fri 29 Nov 2024 02:57:32 +0000
ROA not after:            Fri 28 Nov 2025 03:02:32 +0000
asID:                     149391
IP address blocks:        103.181.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ba:23:76:47:dd:62:fa:a5:b5:0c:ce:3a:c6:2c:3b:41:ac:bc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
        Validity
            Not Before: Nov 29 02:57:32 2024 GMT
            Not After : Nov 28 03:02:32 2025 GMT
        Subject: CN=236358D3F2B5E104811B855C7F9C3855F80E965A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:ef:c3:5b:a9:93:f7:cc:ae:0d:6c:81:88:
                    59:e5:5e:1e:01:57:fb:39:46:a2:a9:eb:6c:ca:58:
                    6e:a0:4b:b5:aa:48:19:2c:23:e9:85:67:c2:6c:dc:
                    7a:28:3c:14:7c:76:d3:70:aa:08:0a:53:9b:d4:8c:
                    51:b9:3e:1c:f9:be:ff:d4:98:f7:b8:cf:09:fb:04:
                    45:f7:a0:cd:86:71:c7:b0:45:31:5d:7e:c7:a5:b4:
                    7d:33:6f:b7:be:bd:72:58:ae:66:eb:e1:49:ad:ac:
                    cc:af:b5:9f:35:72:95:25:30:ec:d1:a5:6f:56:e3:
                    22:ca:ee:d6:98:34:b8:cb:8d:2c:bb:74:3c:95:2c:
                    7d:60:95:a5:55:2d:ee:58:b3:d6:45:0c:a5:b2:16:
                    bf:59:be:e8:cc:43:2f:3c:6d:fc:f1:5a:54:9a:75:
                    33:21:88:1a:b6:2b:e3:5f:bd:6e:37:e0:a6:40:8d:
                    68:a7:f9:54:bf:20:69:da:9f:a4:06:b2:06:b7:ce:
                    c5:8d:b1:66:46:4b:48:b8:9e:d5:8b:0e:0d:d9:d7:
                    e2:50:e7:41:7f:f2:e7:55:13:45:28:a7:8e:d8:95:
                    c4:af:65:a3:da:da:62:ef:1e:38:bb:24:fa:5b:2b:
                    23:c5:e2:a6:bf:10:80:47:4e:52:89:8c:64:ab:2d:
                    8e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:63:58:D3:F2:B5:E1:04:81:1B:85:5C:7F:9C:38:55:F8:0E:96:5A
            X509v3 Authority Key Identifier:
                keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:43:0f:7b:db:9b:5e:4a:f8:fb:5c:e0:f8:33:55:57:93:a4:
         6d:9f:26:b1:2d:e6:bd:13:c8:76:25:5e:0b:3e:68:78:9d:1f:
         9f:1b:fc:6e:e3:26:5a:5f:e7:e4:ab:35:a8:36:a5:ea:79:6f:
         bb:40:6e:9c:d9:5b:82:da:86:e0:d4:6d:be:48:63:d6:64:09:
         15:94:45:3b:98:99:33:ab:f4:50:90:1c:2f:ab:0b:d3:f8:0a:
         de:13:dd:cd:b6:2b:77:cd:b4:3c:1e:7d:4b:11:ed:f2:80:df:
         c2:d3:ec:35:1f:cc:93:37:e3:33:4a:20:9a:84:71:2b:fc:81:
         3c:d8:36:40:90:93:4a:f1:a7:44:07:71:3e:1f:57:bd:d6:a2:
         7f:ad:07:0a:cb:b3:15:b9:0c:68:c7:24:9e:a0:7e:0e:74:59:
         91:64:50:ab:72:81:48:ac:df:aa:e4:04:a2:fd:6d:71:c3:2d:
         d2:af:e3:8f:94:dd:52:03:4f:d3:fc:68:48:1f:95:8c:bb:c3:
         77:61:18:aa:20:53:77:8f:3b:f0:19:c5:b4:bd:a6:c3:04:7a:
         69:de:23:37:e1:3c:b5:10:12:e9:7b:8e:41:99:4d:13:ce:8e:
         36:f3:39:38:cc:3c:ae:8c:28:66:1a:cb:5e:af:78:42:c3:ab:
         b0:6e:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:17 2025 by rpki-client