Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa
File:                     3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa (raw, json)
Hash identifier:          jMsnzJSJesCk13tRFC7z1h0ezZeZGMfai23wXcwwqJY=
Subject key identifier:   7F:EE:F7:D7:8C:F3:B4:8B:4F:C3:50:7B:7A:08:B0:1B:09:D8:6D:6B
Certificate issuer:       /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial:       33D6A2A26ABC1FE9744E84ADD0BADB8959EBB0FC
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa
Signing time:             Mon 01 Jul 2024 01:05:14 +0000
ROA not before:           Mon 01 Jul 2024 01:00:14 +0000
ROA not after:            Mon 30 Jun 2025 01:05:14 +0000
asID:                     139400
IP address blocks:        103.143.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d6:a2:a2:6a:bc:1f:e9:74:4e:84:ad:d0:ba:db:89:59:eb:b0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
        Validity
            Not Before: Jul  1 01:00:14 2024 GMT
            Not After : Jun 30 01:05:14 2025 GMT
        Subject: CN=7FEEF7D78CF3B48B4FC3507B7A08B01B09D86D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:bc:fe:8a:da:0e:38:ec:00:ec:46:a8:0c:
                    73:0b:34:54:29:37:94:57:8c:9d:25:69:81:3d:b7:
                    b8:ed:a7:b4:a9:11:6b:16:4f:fa:35:c7:56:bd:dd:
                    a3:f0:f2:b9:c4:dc:b4:34:26:d1:c7:62:e4:77:9f:
                    51:c9:a0:43:6f:f5:40:f4:fa:fc:3f:dc:0c:47:93:
                    6d:5f:71:9b:ae:64:f4:56:c3:96:fe:8a:4a:4a:de:
                    76:d8:01:62:bc:aa:03:4a:d4:b9:7e:fb:84:25:ad:
                    d4:14:1f:56:91:2e:cd:c3:05:58:67:0c:27:3f:11:
                    c6:e0:85:1f:c3:b9:f1:79:e8:2f:18:02:f9:a7:4d:
                    05:c9:f1:54:f7:47:77:f9:73:6d:89:15:70:33:3e:
                    21:ab:e7:a9:17:2e:f5:b4:59:9d:2d:42:db:b2:28:
                    6f:cd:3b:fd:fe:d5:c1:67:48:73:41:a3:80:14:92:
                    87:f1:2e:f6:48:46:7b:9f:c5:d3:5d:91:3a:f2:5b:
                    d9:12:fb:13:63:50:3b:8e:5f:76:a5:4f:87:31:08:
                    e5:77:ac:85:5e:86:cb:1f:08:09:93:1d:f2:b3:f2:
                    d6:c1:a2:f0:62:7c:a7:3a:4e:fa:f5:02:92:37:9a:
                    e9:ce:5b:83:dc:78:be:77:fd:f0:e1:28:5e:fe:0f:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EE:F7:D7:8C:F3:B4:8B:4F:C3:50:7B:7A:08:B0:1B:09:D8:6D:6B
            X509v3 Authority Key Identifier:
                keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:0f:d1:5b:fc:29:d8:e3:91:a2:3e:ff:a3:ce:37:14:0a:76:
         da:c3:3c:10:22:b7:d7:98:8a:a0:18:08:c1:06:c2:b4:20:8b:
         cb:53:b7:34:f1:48:e7:24:2b:67:33:9c:2d:74:b3:a7:c7:f5:
         2f:d6:5a:9d:51:9e:d0:0e:81:d8:67:c9:46:49:01:cc:15:c2:
         eb:d4:ad:a8:b4:56:f5:bc:c9:c5:d8:eb:5c:d2:15:f1:52:a6:
         2c:c0:4c:9b:35:33:47:37:26:65:9c:8c:6d:5b:6d:1c:ad:ae:
         88:3b:4b:52:32:b8:38:d9:e0:ed:37:00:4f:e0:52:bf:6d:f2:
         33:5a:13:1d:46:52:e6:7d:ae:b3:9c:21:66:69:51:5d:de:4d:
         dc:7b:b1:e5:0b:78:c0:28:4c:23:59:86:5a:f7:73:8e:87:5f:
         39:3b:1d:59:b6:f3:3d:9a:ab:c3:9f:58:fd:96:54:da:3e:9b:
         4e:cf:48:fe:00:5c:11:6f:93:fc:5b:a5:a6:4a:1e:bd:d0:f2:
         86:2f:6c:03:43:15:9b:67:6f:5d:5a:00:d9:5d:94:97:a6:ac:
         74:bc:dc:a7:66:13:4f:3d:bf:d8:0e:90:08:33:7d:1a:1b:11:
         12:1b:39:75:90:35:e5:86:6c:44:13:7f:9f:88:52:34:e9:39:
         17:80:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:00 2025 by rpki-client