Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa
File:                     3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (raw, json)
Hash identifier:          fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=
Subject key identifier:   30:F4:66:01:F3:8F:9A:33:B8:E4:7A:D9:59:23:5B:95:8F:BF:95:77
Certificate issuer:       /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
Certificate serial:       38E3A11880F4ACE9548BDB77C3B4F0EBD46EB76D
Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa
Signing time:             Mon 10 Mar 2025 10:00:01 +0000
ROA not before:           Mon 10 Mar 2025 09:55:01 +0000
ROA not after:            Mon 09 Mar 2026 10:00:01 +0000
asID:                     149728
IP address blocks:        103.187.226.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e3:a1:18:80:f4:ac:e9:54:8b:db:77:c3:b4:f0:eb:d4:6e:b7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA
        Validity
            Not Before: Mar 10 09:55:01 2025 GMT
            Not After : Mar  9 10:00:01 2026 GMT
        Subject: CN=30F46601F38F9A33B8E47AD959235B958FBF9577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:54:21:9e:d4:39:34:c7:9c:aa:37:11:9d:
                    36:e8:a7:cf:5a:94:3e:ee:8c:03:21:45:65:53:de:
                    0a:ed:0e:e0:d7:f6:01:78:be:92:9c:8d:a5:0d:6f:
                    db:37:64:9a:b4:41:dd:1c:de:70:b8:44:9f:91:71:
                    3e:fe:51:23:75:15:c9:24:cf:55:18:77:e7:12:3d:
                    55:06:71:f4:ed:8b:e2:c7:95:18:e3:14:1d:8b:69:
                    b6:56:e9:93:ef:f3:06:da:4b:7e:ce:73:6d:54:5a:
                    56:b5:92:e4:02:4a:4a:36:96:14:0e:1e:f5:3c:60:
                    27:90:43:e8:b9:6a:19:2e:ec:7f:53:9c:e3:5f:e2:
                    80:a5:7b:d0:92:c3:a8:98:a0:39:66:e7:b8:90:a3:
                    e6:e2:aa:72:7d:ee:5d:81:2c:3d:cd:b7:ec:a5:3f:
                    c0:63:ed:f0:0b:8f:8a:33:76:c8:eb:96:ab:04:6a:
                    c2:41:56:a1:b9:a6:5a:15:70:07:fc:e6:65:81:76:
                    28:cd:a4:32:ad:12:b5:1d:2c:18:78:ad:7e:2e:34:
                    21:d8:35:67:9e:84:03:1b:78:ec:d4:be:4d:34:1a:
                    df:78:c4:56:04:27:1a:7b:c0:a9:91:d0:bb:87:a9:
                    2e:cc:70:66:e7:05:dc:2a:5e:8d:ee:cc:52:7c:76:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:66:01:F3:8F:9A:33:B8:E4:7A:D9:59:23:5B:95:8F:BF:95:77
            X509v3 Authority Key Identifier:
                keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:11:ad:df:96:80:3c:55:3d:e5:16:8b:0d:ff:6d:54:ff:
         05:01:23:5c:1f:a4:bc:e7:6a:2e:e1:2f:8b:bd:73:be:19:eb:
         b5:9f:e0:0b:cb:aa:2a:ee:e9:21:72:51:5b:d3:c1:4c:03:2d:
         e6:9f:c3:2e:72:30:c8:ce:98:9c:ea:2f:f7:9c:84:2d:f7:ac:
         27:52:52:b7:62:b7:f9:a5:2f:6b:37:e2:bf:08:4f:24:a7:18:
         0d:aa:ad:c0:e6:31:4d:58:b5:eb:c3:fa:c7:27:a1:9d:8b:5d:
         12:00:fe:d3:42:c8:44:cb:14:80:df:59:19:38:56:8f:88:4f:
         46:54:b5:7f:88:1b:0b:b4:6d:90:8c:ee:3d:8c:8e:62:ae:32:
         07:bb:7e:4e:bb:1d:b3:46:b0:6e:b7:98:2d:e0:06:3b:03:fe:
         26:c1:cc:f9:ea:94:cd:3a:4f:aa:01:b2:ee:a3:ed:2b:90:4b:
         33:59:15:b7:89:93:00:0c:be:2d:b8:bb:ed:e0:18:5c:75:34:
         d7:f6:c7:ec:ee:be:f5:1b:8f:7b:c8:42:ec:a7:8f:05:b8:5f:
         2c:79:f1:62:1d:8d:eb:73:65:98:66:5c:8d:90:10:4c:03:36:
         14:2c:d3:45:f3:5d:16:e1:65:9c:67:48:7e:3f:bc:0e:12:31:
         3d:e8:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:25 2025 by rpki-client