Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa
File:                     3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (raw, json)
Hash identifier:          R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=
Subject key identifier:   26:1C:2B:CF:E7:10:B5:B6:AB:AD:DD:45:53:C5:5B:1D:C3:81:11:DD
Certificate issuer:       /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51
Certificate serial:       0C9B51E603D55A926E0B50136BF07FBE085A6223
Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa
Signing time:             Fri 21 Feb 2025 07:00:02 +0000
ROA not before:           Fri 21 Feb 2025 06:55:02 +0000
ROA not after:            Fri 20 Feb 2026 07:00:02 +0000
asID:                     149709
IP address blocks:        103.185.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9b:51:e6:03:d5:5a:92:6e:0b:50:13:6b:f0:7f:be:08:5a:62:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51
        Validity
            Not Before: Feb 21 06:55:02 2025 GMT
            Not After : Feb 20 07:00:02 2026 GMT
        Subject: CN=261C2BCFE710B5B6ABADDD4553C55B1DC38111DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:15:11:15:1c:19:bf:c4:ea:d8:53:e2:2d:
                    9c:f5:9e:1e:0c:55:ef:78:9c:90:86:1a:fc:fe:a9:
                    00:15:aa:88:0b:3a:ae:8d:f6:05:c3:4e:a1:e4:2a:
                    91:cc:01:b3:43:64:98:d1:05:48:20:e8:98:ff:83:
                    cb:a8:81:a5:f7:b2:9b:1f:c0:62:87:4c:7e:b9:1f:
                    50:2d:8b:d4:ba:64:21:a8:eb:cf:d4:f5:b3:45:af:
                    df:ac:79:6b:0b:27:88:0f:8a:ba:8e:4a:2e:8e:ae:
                    c7:be:0b:19:d9:4e:67:4d:58:db:0e:e5:d6:06:6f:
                    8d:76:60:38:99:41:7c:ee:56:3d:1c:8e:58:63:fa:
                    86:3d:de:d2:81:bd:c6:a0:6e:a2:6d:95:87:87:e3:
                    24:49:f8:b7:4d:12:ca:ec:d3:3b:19:a1:87:04:8c:
                    52:f5:9f:e1:8d:32:b4:fd:8d:88:7e:22:a8:80:27:
                    b8:bd:ef:9c:b5:7a:94:5b:33:c8:47:c0:fe:6d:5b:
                    95:97:9b:25:51:1c:3a:26:ff:5c:a4:10:8f:6f:89:
                    dc:8e:b1:99:b7:90:36:29:b1:3e:e3:5b:1c:d8:38:
                    c5:31:16:3a:8f:32:87:24:d9:8a:15:5d:62:6c:e0:
                    a8:0a:f4:43:8c:7d:e0:a7:e0:72:2c:18:ee:e2:4d:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1C:2B:CF:E7:10:B5:B6:AB:AD:DD:45:53:C5:5B:1D:C3:81:11:DD
            X509v3 Authority Key Identifier:
                keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:cd:8f:f4:4b:8d:71:f1:c3:4b:af:f1:ad:99:ec:f5:6d:
         6d:c5:f5:b7:21:20:54:f7:01:a3:7c:9a:4a:66:3c:eb:c3:48:
         64:51:f9:cb:86:d9:e6:d9:6f:11:82:4e:cf:e6:b8:95:a7:81:
         ca:6c:1b:19:5d:13:e0:40:3f:ad:61:6c:72:0e:ff:c9:d7:61:
         09:0a:53:ef:c3:d7:b0:2c:01:ff:54:95:dd:a3:25:b2:24:af:
         6f:fd:38:ec:bc:bf:f0:88:43:97:f1:4f:b2:34:46:3d:e3:63:
         13:ae:d9:27:03:dc:23:94:62:c2:63:3d:36:e0:87:6c:3d:38:
         43:66:ba:47:ae:18:b5:e5:5f:e0:fe:a0:fd:c1:3a:21:6e:34:
         f7:87:e1:9d:5a:86:55:8f:b5:7c:86:5c:70:53:22:98:88:9d:
         c7:c0:6c:02:2e:db:81:bf:7c:e3:21:7f:19:12:1e:39:ad:4a:
         42:36:d9:90:6a:5c:2f:93:6a:d8:09:44:19:72:d6:a8:f2:4f:
         1d:fa:8c:65:39:80:b3:2a:19:e4:8a:86:63:4b:2f:f5:27:96:
         d4:07:89:00:90:7b:8b:6c:2b:ab:7e:26:2c:97:e2:be:9d:e4:
         b9:38:d2:5e:14:36:38:a8:1b:bd:f9:fc:16:89:6f:6f:a2:91:
         f6:ef:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:11 2025 by rpki-client