Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa
File:                     3230322e31302e35342e302f32332d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          mrQV3K4ZfNyFu4dz4PQjyYnBuXTV/qSLCJuvGp+za9Q=
Subject key identifier:   11:CD:31:F3:B0:A8:D4:4C:DE:42:C3:E5:57:18:E7:32:CF:CD:5A:BC
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       3537B74F87C567AF32D4F528DBF3906B19B8FF48
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa
Signing time:             Tue 11 Mar 2025 09:14:13 +0000
ROA not before:           Tue 11 Mar 2025 09:09:13 +0000
ROA not after:            Tue 10 Mar 2026 09:14:13 +0000
asID:                     140475
IP address blocks:        202.10.54.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:37:b7:4f:87:c5:67:af:32:d4:f5:28:db:f3:90:6b:19:b8:ff:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Mar 11 09:09:13 2025 GMT
            Not After : Mar 10 09:14:13 2026 GMT
        Subject: CN=11CD31F3B0A8D44CDE42C3E55718E732CFCD5ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:8f:f2:08:d2:ba:95:65:48:7e:88:58:a3:
                    6c:e5:85:0f:3b:54:a1:bf:ef:be:6c:2c:bb:14:6c:
                    32:0a:85:db:34:d2:76:c7:4b:27:fd:34:8f:ee:ea:
                    9e:5f:91:cc:e5:c8:60:1d:7a:7c:5a:f7:38:ad:02:
                    56:b1:8a:7e:4a:21:63:fd:33:dc:5f:c3:63:4f:7e:
                    bf:1a:ab:4a:30:95:38:a8:2c:53:ca:62:44:51:0a:
                    73:bf:c4:9c:08:1b:24:22:6f:c7:92:42:da:e7:c2:
                    7d:42:bd:07:96:e0:6f:8b:8c:db:ba:00:eb:13:83:
                    dc:d6:e8:16:91:ab:b1:39:80:1f:fc:b9:34:b7:92:
                    78:9c:81:60:c1:e0:ba:45:a4:d2:fb:03:7a:86:b5:
                    5c:5c:60:68:be:da:04:5e:c8:ab:1f:64:c9:47:0c:
                    f6:79:93:3d:67:9a:a5:9d:11:38:09:fb:c5:83:a6:
                    b2:d0:a7:00:6d:c3:d7:aa:93:85:b0:31:4b:0a:74:
                    24:b9:1b:90:69:2e:21:74:21:38:3b:6e:a2:a3:a3:
                    58:5a:7b:9d:bb:72:c8:f0:4b:00:74:41:f6:51:42:
                    83:9e:68:a0:1d:ef:97:e6:98:20:c5:87:1f:95:e7:
                    4f:25:ce:b8:11:f1:88:f3:2a:32:d1:27:1d:d4:ce:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CD:31:F3:B0:A8:D4:4C:DE:42:C3:E5:57:18:E7:32:CF:CD:5A:BC
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32332d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:c0:c7:94:f3:98:a0:b2:1e:db:14:ef:aa:36:6f:17:b5:
         35:f5:c6:61:83:2f:2b:57:43:96:28:47:81:d5:73:7e:5d:60:
         34:59:8f:fe:74:55:71:ef:30:5b:c0:da:f0:78:67:78:2b:c0:
         4f:07:61:62:b5:79:3a:06:6d:7a:e0:29:e9:d6:45:bc:fb:14:
         1f:dc:f4:34:2a:d1:41:88:0d:50:87:08:c4:f7:95:0a:cb:21:
         c2:2a:ca:ef:d1:9b:a7:a6:69:86:8a:0d:fe:5c:a2:d5:ef:df:
         74:88:83:f5:d3:77:57:45:be:45:42:71:cd:86:e5:6e:1d:5c:
         20:fe:73:fa:03:60:6b:98:48:d1:1d:cf:1d:06:42:68:3f:1e:
         9f:67:54:fa:6b:54:8b:62:ad:61:73:13:10:2f:a4:38:d2:a9:
         c0:34:82:96:89:26:ab:07:e8:b0:70:50:86:3a:e8:09:4c:12:
         e9:89:fb:3c:20:3a:21:77:c9:82:b1:a5:ed:95:de:86:01:d7:
         6e:08:7a:ec:40:bf:ed:97:ab:9e:54:bf:ad:b5:58:90:4c:3f:
         22:5d:e8:f2:b7:d7:89:f1:ec:8e:d2:6c:90:d3:a6:1a:41:9e:
         42:67:8d:7b:e4:bf:58:3b:25:76:45:a2:52:e2:be:d8:cd:ab:
         af:f1:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:29 2025 by rpki-client