Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa
File:                     3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=
Subject key identifier:   8C:E4:FD:AD:D3:F7:DF:3E:78:44:54:58:9D:2D:DD:4A:D4:AC:E8:61
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       65AAF5C1671FD408942ED2DD40F527A52E2D33E8
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa
Signing time:             Wed 19 Mar 2025 03:00:02 +0000
ROA not before:           Wed 19 Mar 2025 02:55:02 +0000
ROA not after:            Wed 18 Mar 2026 03:00:02 +0000
asID:                     138818
IP address blocks:        114.141.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:f5:c1:67:1f:d4:08:94:2e:d2:dd:40:f5:27:a5:2e:2d:33:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Mar 19 02:55:02 2025 GMT
            Not After : Mar 18 03:00:02 2026 GMT
        Subject: CN=8CE4FDADD3F7DF3E784454589D2DDD4AD4ACE861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:fc:e1:81:36:f9:2e:9d:cc:74:d3:47:51:
                    7e:41:82:22:b7:82:f7:14:2c:6f:07:8f:96:b5:44:
                    5c:05:dd:3e:b8:d1:fc:bc:dd:bc:25:cd:2c:59:81:
                    5c:a2:34:47:da:ff:d3:8c:d3:9b:2c:94:a2:9b:a4:
                    55:55:10:bb:71:8c:cf:70:fa:2d:f0:e5:4d:a2:cd:
                    6b:cf:8e:9c:f4:ba:24:fd:3f:48:b6:3a:9d:f9:23:
                    47:aa:c7:19:76:2f:a1:22:47:f2:55:87:61:83:27:
                    92:70:51:cc:5e:5c:89:52:62:8a:bd:59:b7:65:4c:
                    b3:f0:37:58:01:bd:94:8d:4b:d1:c7:e4:e0:4b:d5:
                    d4:9c:f6:f3:3f:95:25:eb:73:85:50:05:33:f5:3d:
                    9f:e0:0f:ca:e7:bd:a5:ba:00:68:ef:98:0d:84:58:
                    77:3a:99:ca:2a:e4:bb:36:db:b1:b9:f8:18:71:a8:
                    18:75:8a:a5:c5:b9:20:c5:00:60:8a:e1:32:dc:63:
                    d3:3e:c7:f4:b7:35:41:19:f3:7c:d3:bc:f4:cf:b2:
                    e1:92:be:11:2d:a2:59:31:12:c3:fb:87:aa:3b:99:
                    45:88:1a:1d:ee:f5:c6:31:46:c4:86:c1:48:01:a9:
                    8d:e2:76:e4:f6:eb:c4:f5:72:8d:3c:ab:7e:60:df:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:FD:AD:D3:F7:DF:3E:78:44:54:58:9D:2D:DD:4A:D4:AC:E8:61
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:1e:f9:df:2c:7e:15:84:b2:2d:f4:7c:d5:b2:1f:74:e6:
         f9:7a:ec:e4:67:2e:54:70:61:2c:87:19:5f:0d:00:83:81:17:
         98:78:61:a2:ef:0d:67:50:bb:41:a6:6c:99:54:88:18:de:6f:
         5a:53:9a:da:26:7e:31:e8:90:48:4f:3c:d9:35:24:7e:89:3e:
         43:22:3c:80:11:9e:e1:79:7b:4e:ae:4c:fa:b3:27:88:07:5c:
         55:da:ea:30:4c:4d:3f:c7:00:5b:8a:81:4b:63:f6:3e:e9:2d:
         34:28:8a:a7:6f:21:75:a5:e0:44:59:90:d5:cf:49:f9:7b:95:
         f4:97:45:89:77:d9:94:99:f3:a5:e1:89:d1:e5:b7:99:14:c6:
         f0:67:ff:27:71:61:a2:1a:93:77:03:58:5c:49:81:a1:0c:76:
         19:bd:70:5c:e9:7b:40:7d:97:d8:60:78:ad:78:50:81:7d:9b:
         92:8f:09:9e:b8:de:8e:a0:84:f1:9f:80:c8:dd:e8:6b:2b:ca:
         9f:7a:06:71:91:2a:f4:f3:b8:a8:79:b9:a7:52:45:cd:ce:ab:
         0a:15:9a:8a:df:c4:91:72:be:14:b1:31:bb:7c:4c:97:2c:35:
         a8:12:d2:55:75:72:f1:84:f3:5d:60:70:b3:8d:74:d8:70:08:
         ff:70:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:26 2025 by rpki-client