Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          wrzqaNynx40P6I+2V5LgTBezdoEL6ZnvzSzRxIRtLZk=
Subject key identifier:   0A:D7:5E:AA:8A:BB:2B:32:81:F5:F1:BD:6F:A9:9B:99:06:D4:92:CF
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       7C0632F16009564E5D8EE68938A3C5CCE69C73FB
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa
Signing time:             Tue 03 Dec 2024 00:02:32 +0000
ROA not before:           Mon 02 Dec 2024 23:57:32 +0000
ROA not after:            Tue 02 Dec 2025 00:02:32 +0000
asID:                     149374
IP address blocks:        103.180.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:06:32:f1:60:09:56:4e:5d:8e:e6:89:38:a3:c5:cc:e6:9c:73:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Dec  2 23:57:32 2024 GMT
            Not After : Dec  2 00:02:32 2025 GMT
        Subject: CN=0AD75EAA8ABB2B3281F5F1BD6FA99B9906D492CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:f6:d0:9f:31:da:60:33:b9:2d:0f:d3:e4:
                    27:eb:c4:c7:25:b1:09:7a:1e:5a:28:e0:00:2b:72:
                    c6:61:7b:ac:4d:e2:a3:59:82:14:4a:d3:10:91:54:
                    84:64:22:09:49:85:af:09:22:f9:d3:e3:6a:ae:84:
                    37:ed:40:55:07:67:1c:14:d9:fc:f4:7e:17:e3:dc:
                    b8:f2:04:b7:82:c7:74:4f:bc:f0:88:8b:b9:a4:4f:
                    38:7e:3d:0b:54:9f:23:9c:e3:c7:0d:4d:0a:55:8c:
                    27:6b:91:b7:31:c7:b0:27:1c:1c:58:e8:54:4d:42:
                    b2:69:49:c7:de:8b:d4:8b:98:2a:95:d0:dd:53:e5:
                    6a:2b:ed:7b:b7:14:bc:2a:a1:9c:35:bc:b7:cc:6e:
                    75:2b:87:13:34:02:fd:ff:a3:aa:8c:a5:0d:07:09:
                    8c:c2:8f:eb:2f:3e:93:38:0b:e2:fc:2c:b2:87:ac:
                    f8:1f:3f:b1:1b:c2:1f:f5:1f:fe:19:66:b3:d6:3d:
                    31:04:ff:b3:77:f7:6b:e8:12:44:a3:c2:55:6f:3a:
                    c9:93:d9:ad:13:08:1d:41:24:3c:c9:8e:47:53:3d:
                    0f:12:de:02:57:99:6c:2f:fd:14:ed:dc:db:3d:85:
                    30:f1:69:12:00:d3:c1:70:d4:04:a8:35:fc:a5:a4:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D7:5E:AA:8A:BB:2B:32:81:F5:F1:BD:6F:A9:9B:99:06:D4:92:CF
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:e4:0b:cc:f6:bc:1c:3f:eb:c9:15:24:87:3b:11:2a:30:
         0d:e1:fa:af:96:8c:42:c3:b9:24:e5:f4:eb:2b:8c:e9:7a:75:
         63:5d:fa:de:1d:d9:f7:28:b6:42:d1:7e:3e:23:c1:ce:28:34:
         a3:ec:1a:2c:74:fe:f0:6e:41:dc:66:ad:ae:e6:53:b0:de:cb:
         d8:ca:51:e6:03:b3:12:c6:aa:08:e3:f0:f7:ce:42:59:33:bb:
         94:d0:08:84:7a:82:23:3f:2b:a8:6c:ff:0a:7f:df:51:40:7c:
         12:3f:39:83:a0:a3:88:e8:a6:ba:1f:33:ed:eb:ee:bf:f7:9d:
         9e:85:3b:3b:ef:d1:98:64:a0:ce:08:06:9f:e5:f4:07:e0:84:
         c5:22:e0:77:40:d8:17:24:95:ae:a1:49:27:02:42:c3:e1:35:
         a4:fe:cb:2f:14:d3:26:1f:08:76:dc:12:02:fd:f7:a6:ee:a6:
         d0:d9:e7:b1:4e:cc:cd:9d:1b:69:ff:17:cf:e9:8b:95:f3:11:
         96:26:59:24:d7:02:82:95:ff:c5:6d:99:22:ee:ec:59:c4:a9:
         b6:38:0b:10:6d:99:b2:c1:8a:b2:9d:52:a1:6a:02:1f:63:dc:
         62:14:bf:ca:46:be:97:92:91:be:db:eb:89:db:6a:1f:00:bb:
         8a:e1:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:48 2025 by rpki-client