Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          /1qlOOJUeIQJuNJP2rwLlmsOg5XjE3wMrr8H+gToMuU=
Subject key identifier:   20:0A:F5:6A:F2:28:22:C2:3B:B3:4A:9E:60:08:A8:4C:4D:82:39:6E
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       1A96230B39A68A7899368879D94C0896D40D229D
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa
Signing time:             Tue 03 Dec 2024 00:02:32 +0000
ROA not before:           Mon 02 Dec 2024 23:57:32 +0000
ROA not after:            Tue 02 Dec 2025 00:02:32 +0000
asID:                     149374
IP address blocks:        103.180.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:23:0b:39:a6:8a:78:99:36:88:79:d9:4c:08:96:d4:0d:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Dec  2 23:57:32 2024 GMT
            Not After : Dec  2 00:02:32 2025 GMT
        Subject: CN=200AF56AF22822C23BB34A9E6008A84C4D82396E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:6b:47:2c:6a:26:16:f1:6e:79:b5:a4:80:
                    dc:63:41:d5:64:a3:1f:30:e3:4b:fc:82:c7:57:65:
                    92:01:f9:39:01:2e:aa:44:38:b6:aa:78:8f:92:79:
                    23:fe:16:e6:5c:d6:97:cc:a6:df:1a:23:70:cc:4e:
                    1c:21:3b:84:cd:3b:93:60:96:e9:ae:9e:a9:01:f9:
                    03:95:ed:6e:db:e1:db:ab:2f:57:b1:72:26:bf:c8:
                    ea:40:fa:5d:fb:e6:12:4f:78:f2:13:15:8e:c4:76:
                    fd:86:eb:59:d7:af:b5:ea:1b:a7:21:ad:f2:d3:f4:
                    ae:f6:ce:08:f3:9c:7a:e4:ec:80:17:4c:9a:ea:d7:
                    a0:43:bd:75:3b:53:9a:a0:98:fb:1d:57:e4:da:c9:
                    da:2b:71:75:b0:8a:3b:8d:ec:d3:84:7d:fd:72:77:
                    4c:5f:b6:fb:9e:23:16:bc:0d:90:b9:89:ee:1b:80:
                    30:77:93:18:94:ef:00:4c:ef:bd:9c:0b:39:b7:8f:
                    18:94:08:7f:a2:56:b9:b2:38:2c:ac:ce:6e:88:f0:
                    8b:36:64:1c:73:45:e9:fa:aa:50:a5:0f:5c:64:40:
                    36:55:97:a4:f4:c6:ba:24:31:50:bc:c0:8f:21:58:
                    15:9c:0b:2e:f6:37:07:11:fa:f8:ed:28:75:d4:5c:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0A:F5:6A:F2:28:22:C2:3B:B3:4A:9E:60:08:A8:4C:4D:82:39:6E
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:31:20:fd:14:71:89:f0:aa:34:17:cf:56:cc:eb:24:85:84:
         d5:8e:3f:97:0d:78:cc:ae:08:5d:7f:03:b3:7b:91:15:0e:df:
         05:5f:0c:44:9e:f6:07:74:0c:d7:0a:87:a3:62:22:32:23:50:
         34:77:a1:b6:e5:74:94:44:61:e6:7a:fd:da:40:95:59:bb:5e:
         02:8f:d6:52:eb:d8:3a:d9:f2:a9:8e:74:ce:18:34:41:51:fa:
         6a:08:84:91:c7:2e:ed:cd:f5:bc:91:10:e8:81:7c:92:7c:72:
         72:40:67:ed:56:59:a6:87:90:ae:0b:b6:85:4a:a1:90:67:bc:
         ab:26:59:c3:0e:1c:29:ea:a9:2d:15:35:79:71:93:aa:d9:fb:
         89:ff:31:8a:d9:b7:42:7d:08:91:10:4e:03:ab:e7:62:3c:90:
         2d:9f:32:fa:bc:ca:e7:60:60:e1:61:c0:b4:d5:27:60:73:ef:
         7c:2e:78:f0:e8:52:54:33:96:4d:e4:10:38:25:d1:f8:1f:96:
         7f:46:de:23:71:b4:7c:42:fa:be:cd:44:b4:d5:49:66:51:8b:
         ed:5d:37:b4:a9:fa:17:4a:db:9b:58:1b:d8:6f:4f:d1:f4:67:
         3c:50:b3:52:34:ce:d6:fd:d1:5c:24:04:7d:d9:a7:ee:2d:fc:
         dc:fa:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:43 2025 by rpki-client