Route Origin Authorization

$ rpki-client -vvf rsync.rpki.blade.sh/repo/Blade/0/3130332e3135332e362e302f32342d3234203d3e20313430383934.roa
File:                     3130332e3135332e362e302f32342d3234203d3e20313430383934.roa (raw, json)
Hash identifier:          KzFMM/NZlDQ6kkkPRRiDTqed7FSyJh3oO0IJpcNTyNk=
Subject key identifier:   7C:35:88:FF:22:9E:EA:FF:78:00:99:91:8D:89:27:A4:25:91:FB:AD
Certificate issuer:       /CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
Certificate serial:       3455C51A99B0A7BD05C344A41F5B4F452095EB3D
Authority key identifier: 40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer
Subject info access:      rsync://rsync.rpki.blade.sh/repo/Blade/0/3130332e3135332e362e302f32342d3234203d3e20313430383934.roa
Signing time:             Tue 08 Mar 2022 13:24:00 +0000
ROA not before:           Tue 08 Mar 2022 13:19:00 +0000
ROA not after:            Tue 07 Mar 2023 13:24:00 +0000
asID:                     140894
IP address blocks:        103.153.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:55:c5:1a:99:b0:a7:bd:05:c3:44:a4:1f:5b:4f:45:20:95:eb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510500000/serialNumber=407047ADB0ABA85AE234970052228E9B1F0239E2
        Validity
            Not Before: Mar  8 13:19:00 2022 GMT
            Not After : Mar  7 13:24:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:cc:f2:9a:17:68:3e:3f:03:29:58:4e:bd:
                    d2:67:56:19:0e:4c:4f:98:9e:ef:f3:2e:00:e4:2f:
                    38:97:51:08:54:94:89:fd:fd:f4:4d:13:71:ea:3d:
                    50:9c:7a:c0:7c:ea:bf:e4:05:8d:fe:57:0d:ae:1a:
                    10:2f:38:9b:f5:4b:dd:eb:1e:26:b9:04:73:10:88:
                    4f:f2:5f:be:bb:30:0f:a1:2a:84:44:7f:1d:aa:70:
                    78:8c:9c:d0:30:42:05:5e:a8:b6:6c:84:a8:fc:07:
                    dd:4b:d7:b5:05:97:e7:5d:74:1f:d9:2c:98:82:28:
                    90:dd:9a:4d:61:02:b1:bb:fb:24:72:80:b6:ca:b0:
                    d6:5b:a4:1f:9e:1e:ac:87:71:29:f3:08:1b:94:42:
                    b3:c2:46:b3:f8:24:27:ad:9c:b6:94:82:86:50:8c:
                    bd:bd:97:26:d4:44:01:01:76:74:dc:3c:8a:3c:72:
                    42:33:55:7b:4a:d6:10:c9:f7:4e:b4:52:0c:1c:ab:
                    78:7b:80:6b:d8:63:8f:93:94:67:d1:83:84:c7:a8:
                    b6:c6:15:f1:1d:14:97:0c:88:44:1f:8a:8a:4a:d3:
                    2f:1e:fe:c8:fc:7c:0f:b4:a1:fb:1b:e2:09:09:23:
                    72:ed:f2:95:c9:4f:d2:dd:f5:c3:cb:00:e9:1c:3a:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:88:FF:22:9E:EA:FF:78:00:99:91:8D:89:27:A4:25:91:FB:AD
            X509v3 Authority Key Identifier:
                keyid:40:70:47:AD:B0:AB:A8:5A:E2:34:97:00:52:22:8E:9B:1F:02:39:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/407047ADB0ABA85AE234970052228E9B1F0239E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHBHrbCrqFriNJcAUiKOmx8COeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.blade.sh/repo/Blade/0/3130332e3135332e362e302f32342d3234203d3e20313430383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:f8:db:7d:98:ac:4f:cc:65:0b:7c:83:e5:54:7c:8b:02:
         a2:7b:43:f4:d1:18:d8:93:c6:02:fa:be:f5:5b:57:a7:60:c3:
         50:0c:52:7a:83:87:72:c8:8b:a9:d5:9c:a3:7b:41:76:61:0d:
         ae:c5:99:08:f4:79:ac:9d:5a:82:b7:2a:4c:4d:a4:4b:8c:ed:
         ce:d4:fc:28:59:d9:93:97:b7:e9:24:ca:84:b9:d2:61:1a:a8:
         9c:79:27:94:58:39:df:fb:da:c6:10:03:a4:c4:6c:4a:5c:72:
         a8:4b:7d:9f:67:51:00:56:12:3e:62:0c:e6:11:db:57:59:00:
         12:b3:ed:fb:61:26:55:52:a8:5a:78:ab:bb:e9:02:87:6c:b4:
         be:45:ea:40:21:45:15:a4:e8:a5:bf:67:6e:e9:5e:34:16:39:
         61:d7:fa:65:bf:5d:55:4b:1c:3f:42:18:ed:47:fd:40:58:99:
         45:3b:73:68:26:93:ab:2e:ea:c4:32:0c:7a:50:e5:b1:24:1b:
         32:a8:55:77:b1:6e:b6:29:41:c1:9b:f2:79:70:f8:40:86:93:
         d1:06:a2:f5:d0:b4:79:33:00:c6:54:2e:f6:fe:b8:92:99:90:
         79:37:be:4d:32:eb:6d:dd:f7:1d:b4:21:79:14:53:a2:94:56:
         d3:92:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org