Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa
File:                     3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (raw, json)
Hash identifier:          0VdjtLo1xUnDKpM3htIEr490C2svqFG92AsZbj9kqUE=
Subject key identifier:   11:F3:2C:5A:7A:94:AE:E7:18:EA:DA:81:B7:98:9C:75:A3:08:1A:57
Certificate issuer:       /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4
Certificate serial:       4D55A8E2CDDCAD9F580E39F9D116DC2D56ED6EFE
Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa
Signing time:             Sat 14 Sep 2024 08:00:01 +0000
ROA not before:           Sat 14 Sep 2024 07:55:01 +0000
ROA not after:            Sat 13 Sep 2025 08:00:01 +0000
asID:                     134620
IP address blocks:        103.203.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:a8:e2:cd:dc:ad:9f:58:0e:39:f9:d1:16:dc:2d:56:ed:6e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4
        Validity
            Not Before: Sep 14 07:55:01 2024 GMT
            Not After : Sep 13 08:00:01 2025 GMT
        Subject: CN=11F32C5A7A94AEE718EADA81B7989C75A3081A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:03:03:31:03:c2:df:72:4d:c4:7e:42:32:
                    44:bd:57:e4:38:4f:a3:c5:57:7e:0d:93:bc:5b:0b:
                    ef:48:4e:ec:59:9e:ce:ef:1c:fa:ec:45:a2:d6:cc:
                    1a:7e:0c:8d:29:09:04:cb:3c:27:be:e6:fd:5b:e7:
                    ff:49:20:a2:7d:59:d2:07:fa:d4:2f:4b:fb:2e:4d:
                    a4:ee:3b:c6:2f:f7:16:68:95:ff:d4:e4:19:49:65:
                    ea:2a:88:38:dc:a9:1c:ff:bd:80:87:ae:33:8c:2a:
                    9d:72:9f:f0:11:86:75:8f:65:07:ca:d9:02:eb:34:
                    d6:bf:2f:ef:1c:05:07:69:4c:d1:63:2a:74:7c:bd:
                    e2:22:c1:c2:4e:c3:f8:1f:4a:62:64:04:55:7f:56:
                    06:f2:0d:c7:f6:b1:0c:34:32:86:89:53:4d:32:84:
                    e2:37:4b:10:cb:61:a1:90:82:d6:9d:fa:cc:66:50:
                    4e:47:c7:d2:85:e9:37:52:b4:e7:83:b0:08:9d:e8:
                    eb:cf:22:cb:92:78:9b:c7:35:d3:54:47:45:7e:ac:
                    30:f7:1c:69:f8:e8:6d:06:de:f1:ae:56:8c:27:f1:
                    7f:40:52:8f:9a:6f:29:cb:2f:3b:8e:1d:d5:94:3e:
                    85:d9:1c:3d:e5:f0:65:5b:28:10:2a:11:65:d8:59:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:2C:5A:7A:94:AE:E7:18:EA:DA:81:B7:98:9C:75:A3:08:1A:57
            X509v3 Authority Key Identifier:
                keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:dd:88:41:5c:34:3a:de:58:4b:91:c6:62:b6:cf:d0:f5:
         57:2c:94:2f:2a:5f:05:a6:25:a7:ab:66:29:cb:04:13:76:c5:
         0d:06:db:79:79:30:02:97:58:6d:fb:ae:4d:a9:05:12:1f:8c:
         e1:f5:17:a6:3d:c9:50:e9:36:28:ce:03:b7:bc:3d:a5:e7:37:
         71:bc:8a:a9:3e:2a:dd:a2:87:5c:24:fc:3e:aa:e5:05:27:d6:
         f0:17:56:fa:0b:26:42:01:fb:be:c2:87:f3:08:3e:e3:f2:d1:
         44:70:d1:35:ba:78:c4:b5:11:f6:ad:5d:cf:d1:e2:94:18:5e:
         bb:0d:ce:a0:3b:b3:8f:16:c4:9b:37:78:91:e9:51:38:5f:ce:
         5a:ae:a8:a1:f5:e9:1f:ec:73:03:7c:c1:b3:a1:c3:c6:88:f0:
         52:35:17:14:46:e9:0c:dc:81:05:51:a3:c3:3b:e0:f3:d1:2b:
         f8:5a:c5:96:aa:53:11:81:6c:f2:f9:5f:d6:8c:cf:fe:9e:ea:
         dc:93:d6:98:0d:94:12:e7:b9:43:90:8f:ac:86:94:3b:cf:44:
         46:f5:26:c7:83:44:fe:84:26:a7:85:fe:a1:2f:74:91:30:68:
         04:f7:62:eb:f5:22:7c:e7:26:d1:93:a8:7e:83:33:3b:2e:38:
         8e:8a:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:19 2025 by rpki-client