Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa
File:                     AS142369.roa (raw, json)
Hash identifier:          HTAAUTYZ1TwyeRlIOhioC5EykgwHkqs4vnuFcczkeCY=
Subject key identifier:   63:F3:C2:CF:21:F1:CA:3B:83:35:1A:7A:8A:47:D6:80:19:4C:F6:90
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67D51B572EBE4D303980B95601092483A40D0EA8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa
Signing time:             Tue 10 Dec 2024 05:00:10 +0000
ROA not before:           Tue 10 Dec 2024 04:55:10 +0000
ROA not after:            Tue 09 Dec 2025 05:00:10 +0000
asID:                     142369
IP address blocks:        2001:df0:1740::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d5:1b:57:2e:be:4d:30:39:80:b9:56:01:09:24:83:a4:0d:0e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:10 2024 GMT
            Not After : Dec  9 05:00:10 2025 GMT
        Subject: CN=63F3C2CF21F1CA3B83351A7A8A47D680194CF690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:80:ce:08:45:45:42:49:fd:01:29:75:37:
                    6d:d1:f6:cd:df:7f:58:6a:68:e3:61:d0:61:69:be:
                    c4:a4:42:63:af:eb:28:8d:79:85:23:ac:cf:d8:05:
                    ff:10:db:ef:5c:e7:e9:01:8d:d7:b6:ae:6a:ac:26:
                    5a:65:5d:53:f5:df:f9:82:a1:61:a9:e2:73:c4:2b:
                    33:df:3b:31:26:be:f9:12:35:cb:b4:d1:51:d8:a7:
                    45:af:94:14:76:b8:df:c6:5e:d8:d3:5b:eb:f2:ba:
                    b8:d9:3d:ed:2c:30:ad:07:ce:83:56:9d:08:50:48:
                    2f:75:3e:c2:73:c1:4f:c0:fa:17:ed:12:42:c8:4c:
                    d3:84:c5:7b:66:79:15:21:2d:2f:bd:ab:1b:1b:f9:
                    45:b0:80:08:60:6a:89:cc:62:34:00:78:d1:29:4f:
                    94:b5:3a:4c:49:2c:f4:59:28:97:a8:ab:e9:f1:f3:
                    91:a0:dc:cf:d7:dc:a2:3e:59:62:1e:4a:a8:5b:41:
                    fc:ea:d0:dc:bb:dd:db:d0:c5:fb:d4:61:80:12:c3:
                    e8:c3:8b:d6:ef:cd:ab:c9:d8:82:69:13:21:bb:3d:
                    77:93:76:32:e1:57:8c:70:a7:67:87:48:e4:59:49:
                    c8:05:56:5e:c6:87:c4:49:35:d5:5b:06:57:78:07:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:C2:CF:21:F1:CA:3B:83:35:1A:7A:8A:47:D6:80:19:4C:F6:90
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:1740::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:df:0e:a9:45:27:22:f8:a9:d0:cf:7b:cc:6a:00:39:4f:
         3e:22:67:9e:9f:79:ff:82:ca:49:47:80:1c:28:ee:ca:ba:8d:
         78:df:54:cf:1a:b8:45:99:95:5e:20:9b:a7:44:20:b8:5d:71:
         4a:f6:f1:c0:e4:c0:ae:68:64:ca:b2:e6:5d:d1:f3:66:1e:4b:
         be:44:71:41:2b:f8:67:00:92:f7:69:57:a8:dd:0d:a8:2d:d5:
         7c:91:9a:f0:5c:e0:80:0a:49:03:5f:04:86:ca:6b:1b:93:ac:
         c7:92:89:26:c4:76:43:86:08:57:f1:96:ec:b9:a0:65:bf:e0:
         5b:39:35:36:9f:c7:a3:27:7c:6d:82:e7:18:8f:e8:38:4c:eb:
         a8:3a:9d:11:fb:7a:0c:da:37:52:76:5a:03:ab:3c:c1:cf:55:
         b0:5e:c6:a3:13:c7:80:d5:b0:d7:99:f7:29:16:b2:ac:43:82:
         1f:dd:a5:d6:c1:d4:3f:65:d9:af:6c:66:dc:65:df:3f:ed:b3:
         fb:74:66:dd:b2:2e:dd:95:d2:a8:8b:1e:19:7b:c8:d2:e9:6d:
         4f:a1:88:6b:02:6c:79:fc:fd:fc:e8:cf:52:94:b6:04:20:6e:
         1f:74:b9:4c:18:33:f8:3c:64:86:71:b1:30:d2:1c:51:de:e1:
         b1:ca:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:06 2025 by rpki-client