Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          8atertBAoq5yEAkltXHxSAliyI1nYscsWMVcVvPZwUk=
Subject key identifier:   25:D5:C9:13:38:1C:60:1A:9C:E4:E6:BE:8A:61:86:78:04:C9:98:82
Certificate issuer:       /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Certificate serial:       131F5287B0EB10F51AB03EE58C05A2D0EAC0CE4F
Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 04 Dec 2024 05:02:33 +0000
ROA not before:           Wed 04 Dec 2024 04:57:33 +0000
ROA not after:            Wed 03 Dec 2025 05:02:33 +0000
asID:                     135478
IP address blocks:        103.121.102.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1f:52:87:b0:eb:10:f5:1a:b0:3e:e5:8c:05:a2:d0:ea:c0:ce:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
        Validity
            Not Before: Dec  4 04:57:33 2024 GMT
            Not After : Dec  3 05:02:33 2025 GMT
        Subject: CN=25D5C913381C601A9CE4E6BE8A61867804C99882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:da:00:1f:e6:57:2a:9e:2d:a8:1e:e3:48:
                    b0:27:9a:f3:32:8c:49:0c:e5:8c:a5:74:92:06:9b:
                    9c:04:78:d0:36:e6:92:2f:02:d2:4f:c6:21:5d:aa:
                    dc:1c:fb:eb:84:a0:48:d9:90:36:5b:4c:b0:2d:f1:
                    fe:18:51:f0:ae:12:90:07:3d:db:5e:13:a9:a1:5b:
                    f4:57:d0:ae:46:a6:29:a1:d8:a6:f9:9d:c4:40:26:
                    31:2f:5a:5b:4e:ab:ff:16:f6:ce:31:f1:4f:9e:a2:
                    6a:18:a2:15:96:57:95:bf:df:16:ef:8f:43:a0:a0:
                    a3:6f:75:17:3b:33:01:48:68:fa:4e:2c:f7:81:88:
                    38:e6:4c:eb:50:b4:4a:8f:27:f2:72:e0:3b:5f:c0:
                    7a:e0:37:61:f4:8b:99:c9:be:35:9a:b4:21:4b:11:
                    4b:d8:58:5b:fd:d7:73:a6:47:0b:e3:cc:06:08:34:
                    bc:44:f4:67:8c:8b:33:d4:bd:c8:d4:6d:cb:f9:1d:
                    1c:28:58:f8:71:6d:da:06:af:68:67:3b:03:73:2d:
                    82:79:fe:26:66:03:87:b2:72:d2:ac:a2:74:f5:64:
                    15:41:6c:54:b8:78:00:08:d0:e8:c0:08:89:4f:e8:
                    ab:c3:0c:9b:72:13:15:45:37:48:50:70:c2:78:dc:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:C9:13:38:1C:60:1A:9C:E4:E6:BE:8A:61:86:78:04:C9:98:82
            X509v3 Authority Key Identifier:
                keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:be:84:9e:4c:b0:a7:b8:f6:04:35:a8:e8:05:18:ea:3a:86:
         f0:37:26:47:89:0e:7d:94:ca:0a:83:20:ae:bf:cc:66:50:02:
         47:89:19:c4:a5:e9:dc:ff:f9:5d:6d:3b:8a:0b:ea:f5:d4:05:
         d9:4d:e1:2a:8d:80:5d:81:b9:75:fa:c2:02:95:38:6f:d7:e6:
         8e:8d:d0:0a:84:c3:d8:24:fb:e2:59:7d:ed:16:07:61:5b:25:
         dc:78:17:00:be:64:08:c9:6c:26:ec:2a:c6:c8:e5:3b:fa:d0:
         f6:e7:49:ad:e0:5d:4b:ae:8a:da:73:10:f9:4b:e7:cd:18:82:
         54:50:5b:49:70:f6:67:71:99:b5:67:0b:63:0f:a6:57:57:ad:
         84:89:57:e6:11:f8:c8:53:81:a9:b0:fb:f7:a2:64:52:b8:c5:
         e3:dc:3e:88:0a:66:ea:0f:a2:95:63:3b:a8:d5:96:ca:e9:0e:
         5c:76:6f:7c:e1:20:91:04:34:42:b7:bb:1d:39:10:d7:89:87:
         56:15:c7:d1:a6:0a:d6:ed:56:91:ac:00:ec:e3:c5:17:0d:a1:
         77:1d:6d:d6:a4:7e:80:1e:df:2b:7a:b9:4b:61:0a:f3:be:87:
         52:99:04:a0:57:34:18:c2:a8:eb:e8:4b:1d:0a:2c:14:a8:6f:
         d4:7c:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:26 2025 by rpki-client