Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230302e302f32312d3231203d3e203338343936.roa
File:                     3131362e36362e3230302e302f32312d3231203d3e203338343936.roa (raw, json)
Hash identifier:          rmSghWO91Ba50BSWPeoKtoDBGdXtviuqzXsEiViTMT0=
Subject key identifier:   7D:A4:E5:F0:A7:26:C1:1C:BC:12:76:2D:F8:26:64:DC:B9:39:24:10
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       58D05E87D7005A4BAB5462A1BA8185FCDD95B7A0
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230302e302f32312d3231203d3e203338343936.roa
Signing time:             Thu 22 Aug 2024 11:00:02 +0000
ROA not before:           Thu 22 Aug 2024 10:55:02 +0000
ROA not after:            Thu 21 Aug 2025 11:00:02 +0000
asID:                     38496
IP address blocks:        116.66.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d0:5e:87:d7:00:5a:4b:ab:54:62:a1:ba:81:85:fc:dd:95:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Aug 22 10:55:02 2024 GMT
            Not After : Aug 21 11:00:02 2025 GMT
        Subject: CN=7DA4E5F0A726C11CBC12762DF82664DCB9392410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:59:ef:fc:78:69:21:9c:f4:df:0b:29:cf:
                    20:fe:8c:4f:66:57:6d:2d:b9:cc:b3:73:54:2f:9d:
                    b7:39:4d:97:62:4d:e9:23:2f:f8:9b:a8:5f:a7:5d:
                    12:95:08:35:24:15:a9:29:6a:b6:f9:30:33:76:77:
                    f1:66:d3:aa:fc:92:38:97:5f:0d:bd:43:18:53:21:
                    b8:d9:77:c2:01:71:fa:b8:b0:b0:8c:91:a0:a5:27:
                    a2:f5:6d:f9:fd:a1:d0:e1:00:aa:7d:2c:f6:40:77:
                    03:4a:9d:1f:2a:db:a0:ba:85:13:57:d9:bd:ae:5b:
                    88:b6:6f:bc:57:21:6c:1a:ce:80:82:18:58:18:cc:
                    75:db:1d:03:30:eb:61:37:4f:2f:94:59:70:43:7d:
                    c9:f7:54:a9:ba:79:cf:52:27:b5:15:09:f3:41:80:
                    f8:8d:32:af:21:11:ac:a7:86:3e:cd:c5:00:5f:46:
                    4c:a1:7f:1b:69:69:e7:38:8c:77:c7:df:72:f8:76:
                    4b:17:40:9a:67:54:54:ff:df:f6:ca:ed:e6:de:82:
                    d5:7c:de:f1:22:cf:e7:15:d1:36:c0:a5:fa:5d:bd:
                    46:64:14:0f:f8:27:6f:58:d3:ee:bb:32:4a:0c:f7:
                    c2:c9:96:49:bf:ae:10:d6:a8:1e:41:31:1e:14:f6:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A4:E5:F0:A7:26:C1:1C:BC:12:76:2D:F8:26:64:DC:B9:39:24:10
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131362e36362e3230302e302f32312d3231203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:cc:1e:ef:11:ab:59:70:7f:b8:8e:ae:31:10:8f:4e:36:
         95:98:b0:5a:7e:a8:df:40:09:61:51:2b:d9:f1:20:87:58:06:
         3d:aa:ff:31:9d:0b:c7:6a:af:c1:bf:45:e9:d3:fa:75:58:f8:
         17:d0:f6:21:fb:c0:26:3b:e2:3c:2d:61:2a:1f:85:57:ce:ee:
         f7:f1:ad:4a:36:dd:10:71:7a:f6:d6:bc:70:7e:07:85:7e:a1:
         dc:1e:3f:39:94:20:aa:ba:70:b1:1d:99:64:a8:4d:e0:e2:90:
         c4:8e:16:6c:87:f2:db:80:ff:43:04:c6:15:60:9b:ba:2a:13:
         f3:46:81:e5:57:cc:11:41:a4:4c:0f:a3:ce:69:71:17:d5:09:
         c2:9b:b0:1c:b5:c6:e8:ba:15:9c:20:76:97:a5:f3:db:0c:97:
         8c:e7:d1:c0:9b:3b:04:5f:b1:f4:3a:1a:28:df:16:21:90:f1:
         8d:8b:84:41:70:ac:0a:8e:27:65:0b:77:9b:cd:a1:57:1a:74:
         e1:b4:26:a5:8b:f1:09:dc:5c:32:64:6c:b3:e1:c8:30:4f:15:
         12:13:77:3d:52:70:b1:56:cf:14:66:21:ce:2f:bc:64:bf:fc:
         c8:a9:8d:8a:54:47:e4:46:c3:c7:05:de:d9:7e:1c:7a:4f:d7:
         0a:e7:fd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:53 2025 by rpki-client