Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa
File:                     323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier:          +bc7dUDcl/zyxgFD9hjH1WhAYFjRstDV27EEB/SKBg8=
Subject key identifier:   A6:43:E2:77:7C:B9:38:CA:64:D9:7F:D7:BA:A6:E0:29:60:F0:74:12
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       412A941CF3ED1B6F576C14DD3F4A17AE83040126
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa
Signing time:             Wed 04 Dec 2024 09:03:04 +0000
ROA not before:           Wed 04 Dec 2024 08:58:04 +0000
ROA not after:            Wed 03 Dec 2025 09:03:04 +0000
asID:                     139972
IP address blocks:        2405:c440:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2a:94:1c:f3:ed:1b:6f:57:6c:14:dd:3f:4a:17:ae:83:04:01:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Dec  4 08:58:04 2024 GMT
            Not After : Dec  3 09:03:04 2025 GMT
        Subject: CN=A643E2777CB938CA64D97FD7BAA6E02960F07412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:bb:79:24:27:89:de:ec:5e:81:82:20:d0:
                    2e:97:c2:d7:ee:30:b5:22:42:39:d9:98:37:f4:a2:
                    8d:f5:e8:ec:08:0c:25:23:e1:cf:81:f6:36:76:fc:
                    7c:f3:d3:86:3a:61:c5:32:e0:fd:4d:d9:53:50:9e:
                    6b:f1:ec:1f:a3:47:d7:ff:fe:b8:cc:66:0a:17:45:
                    a8:8e:b9:b0:04:e7:59:40:51:a9:98:0f:a7:94:5a:
                    0f:1d:45:9f:6f:d9:d4:ef:8d:61:c4:fe:54:93:4e:
                    a7:34:b0:2f:cd:b8:40:e9:42:65:c4:e5:20:45:39:
                    27:ce:f5:65:97:3a:13:09:13:e6:ef:00:49:b1:87:
                    79:48:e3:38:74:48:d6:65:31:c9:50:d5:6d:f9:69:
                    cd:80:ef:0a:86:f0:fc:42:b6:68:f8:44:4d:e2:64:
                    a9:f9:70:14:2b:4a:88:2f:fe:6a:21:ad:d9:23:57:
                    9c:58:74:61:b5:e2:f3:4a:8c:1d:0a:97:fb:67:f7:
                    e6:03:e7:41:02:80:26:90:cc:45:15:09:cb:e4:26:
                    5b:70:be:e9:34:d1:48:79:ea:d4:74:c7:d1:13:88:
                    80:d4:e3:3d:98:26:27:04:4f:f1:2a:94:62:42:ff:
                    d1:26:d9:55:bd:e1:7d:54:cc:2d:2d:a2:f4:98:f1:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:43:E2:77:7C:B9:38:CA:64:D9:7F:D7:BA:A6:E0:29:60:F0:74:12
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:c440:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:49:59:c5:37:21:77:4a:9a:dd:ae:d5:ce:7c:d8:9e:a3:91:
         01:db:20:3b:d8:ca:45:0b:8a:f5:c9:5a:97:eb:e9:d9:7a:1d:
         98:96:64:b4:a4:81:ae:1a:84:1d:75:01:72:33:86:a6:47:a5:
         63:17:23:6b:b1:6e:3f:8c:0e:aa:e6:c3:d3:c2:69:53:f2:af:
         d4:77:ce:a9:06:e3:af:7d:eb:1a:ff:c2:f2:a9:a7:50:bc:49:
         be:6f:42:d6:91:c5:c9:6e:33:7a:57:85:c2:52:a2:0e:7c:a1:
         e8:e3:cc:06:d7:bd:38:16:2c:4b:73:f7:0f:62:93:94:1d:e9:
         ee:3b:86:43:4d:c8:88:8c:e8:1e:fc:87:9c:1a:72:37:64:6d:
         b4:07:13:c3:8a:55:e0:cf:f8:5b:9f:e9:0a:2a:5b:f9:92:62:
         7e:23:43:bc:79:88:7b:7e:c8:50:9b:27:1e:bc:68:47:9c:05:
         a6:1f:46:28:66:f1:d9:e2:ec:88:ad:63:e9:e8:b8:79:62:22:
         d4:35:24:57:1b:75:55:e4:c3:e7:75:3d:99:88:aa:8f:90:86:
         a5:df:d5:0e:45:16:4c:d6:4a:a8:27:92:69:ab:4d:93:d7:18:
         3c:dd:e5:62:86:b7:a9:a7:24:87:83:78:bc:80:bf:a2:73:06:
         e7:09:a5:56
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQSqUHPPtG29XbBTdP0oXroMEASYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD
NzhGOTBGOTAeFw0yNDEyMDQwODU4MDRaFw0yNTEyMDMwOTAzMDRaMDMxMTAvBgNV
BAMTKEE2NDNFMjc3N0NCOTM4Q0E2NEQ5N0ZEN0JBQTZFMDI5NjBGMDc0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanbt5JCeJ3uxegYIg0C6Xwtfu
MLUiQjnZmDf0oo316OwIDCUj4c+B9jZ2/Hzz04Y6YcUy4P1N2VNQnmvx7B+jR9f/
/rjMZgoXRaiOubAE51lAUamYD6eUWg8dRZ9v2dTvjWHE/lSTTqc0sC/NuEDpQmXE
5SBFOSfO9WWXOhMJE+bvAEmxh3lI4zh0SNZlMclQ1W35ac2A7wqG8PxCtmj4RE3i
ZKn5cBQrSogv/mohrdkjV5xYdGG14vNKjB0Kl/tn9+YD50ECgCaQzEUVCcvkJltw
vuk00Uh56tR0x9ETiIDU4z2YJicET/EqlGJC/9Em2VW94X1UzC0tovSY8ZFxAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUpkPid3y5OMpk2X/XuqbgKWDwdBIwHwYDVR0j
BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2
NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG
OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04
MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAIw
DQYJKoZIhvcNAQELBQADggEBALdJWcU3IXdKmt2u1c582J6jkQHbIDvYykULivXJ
Wpfr6dl6HZiWZLSkga4ahB11AXIzhqZHpWMXI2uxbj+MDqrmw9PCaVPyr9R3zqkG
46996xr/wvKpp1C8Sb5vQtaRxcluM3pXhcJSog58oejjzAbXvTgWLEtz9w9ik5Qd
6e47hkNNyIiM6B78h5wacjdkbbQHE8OKVeDP+Fuf6QoqW/mSYn4jQ7x5iHt+yFCb
Jx68aEecBaYfRihm8dni7IitY+nouHliItQ1JFcbdVXkw+d1PZmIqo+QhqXf1Q5F
FkzWSqgnkmmrTZPXGDzd5WKGt6mnJIeDeLyAv6JzBucJpVY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:12 2025 by rpki-client