Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa
File:                     3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (raw, json)
Hash identifier:          wE41NZyo6Pm4ztOuQo15CxbV7OwbZAt3ABv1Or5h/i4=
Subject key identifier:   59:1F:3B:DA:E6:25:91:F2:E9:35:C3:8A:4A:CB:A8:45:A2:91:B6:DF
Certificate issuer:       /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
Certificate serial:       056B6A64922413D505E88BB5BDCAEF82F47E438A
Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa
Signing time:             Sun 05 Jan 2025 03:00:02 +0000
ROA not before:           Sun 05 Jan 2025 02:55:02 +0000
ROA not after:            Sun 04 Jan 2026 03:00:02 +0000
asID:                     149917
IP address blocks:        103.191.116.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6b:6a:64:92:24:13:d5:05:e8:8b:b5:bd:ca:ef:82:f4:7e:43:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
        Validity
            Not Before: Jan  5 02:55:02 2025 GMT
            Not After : Jan  4 03:00:02 2026 GMT
        Subject: CN=591F3BDAE62591F2E935C38A4ACBA845A291B6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:ca:02:55:f5:d7:59:fa:ff:6e:7a:b4:11:
                    51:37:6c:26:ac:04:c5:a4:86:68:77:9a:60:d1:10:
                    45:6b:99:7e:03:53:1d:f5:a1:ae:64:63:e0:e5:27:
                    97:4c:fa:6f:a6:35:65:46:87:93:e8:16:08:fe:b3:
                    d4:af:cb:c8:59:15:6f:10:39:57:32:a6:e4:08:ba:
                    9d:7f:29:5b:b9:df:8b:22:a3:0a:44:c6:b7:eb:84:
                    09:7c:9d:dc:ae:d6:9b:d1:b3:7c:4a:c6:d9:4d:35:
                    5f:62:8b:f2:d0:60:ec:c5:4b:6b:df:ad:ee:18:ad:
                    bd:9d:d7:a5:19:97:f0:24:02:7b:6e:ab:8f:d7:e5:
                    a2:e2:95:60:37:85:de:f4:88:be:63:e7:1c:82:3c:
                    26:ae:62:99:13:1c:56:cf:ea:ee:19:f9:85:37:79:
                    97:50:a2:93:c9:db:0d:56:c8:ee:17:67:34:3b:9d:
                    17:3b:17:60:c6:e7:06:80:3a:ef:fe:0b:03:0a:b6:
                    7d:9e:d8:b3:c2:9b:eb:9e:97:66:5a:6e:14:92:e4:
                    7a:99:c3:24:fa:72:17:9f:87:c9:cb:6c:65:73:fc:
                    e8:cb:f3:bf:c8:01:ce:5b:6d:58:e2:00:2a:ae:f0:
                    c3:61:07:a1:02:39:b6:8b:44:f7:d8:35:26:bb:70:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:3B:DA:E6:25:91:F2:E9:35:C3:8A:4A:CB:A8:45:A2:91:B6:DF
            X509v3 Authority Key Identifier:
                keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:af:b8:4e:19:20:26:c9:da:aa:8d:b2:53:2f:ff:65:b9:13:
         52:29:cd:ed:8f:35:68:4a:28:52:5c:ef:84:f8:fa:9e:74:66:
         41:18:a6:f2:a9:df:64:c3:fe:d7:01:bc:5f:4f:92:f9:3c:f4:
         f7:66:b7:42:d1:db:6c:1a:dc:c6:9b:2d:45:41:95:17:14:87:
         be:71:da:f6:07:da:0f:18:cd:45:5e:63:a1:c5:ac:ae:6d:a5:
         f3:15:f9:77:73:ef:23:34:b7:3d:5b:8f:d2:95:93:21:4f:82:
         5a:05:99:77:fc:eb:37:51:23:81:bd:02:d7:e8:66:a8:ba:d9:
         09:25:ff:45:cd:a3:02:8d:56:05:47:c9:a7:51:0e:82:7a:db:
         76:09:43:77:dc:bf:ed:3e:ea:bd:ca:ba:43:ec:f5:61:e4:51:
         b7:3e:0d:98:a9:d1:1a:b0:98:c4:b0:64:dc:bf:70:69:5c:21:
         60:df:a3:df:d8:58:2e:a8:8c:04:13:30:3b:94:9e:7e:92:95:
         25:4b:6c:e9:10:e6:9f:a0:9c:93:3b:04:04:0f:86:79:9d:5f:
         9f:2a:0e:f6:23:33:ec:d6:e3:28:02:f3:92:72:ac:3d:fa:fa:
         9a:a3:ec:fa:4f:1a:c9:31:d7:2e:28:1c:89:8d:96:d3:5a:a9:
         42:6b:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:31 2025 by rpki-client