Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/65A2395A90A411ECAA6193A75A40D577.roa
File:                     65A2395A90A411ECAA6193A75A40D577.roa (raw, json)
Hash identifier:          jEP8v3bJXUCgnfW/wupyZZxWV23AIM5PMOP5IfaD7o8=
Subject key identifier:   66:94:75:B0:A4:BD:19:78:7B:21:14:CE:86:4A:12:A0:A0:00:98:62
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       30
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/65A2395A90A411ECAA6193A75A40D577.roa
Signing time:             Fri 18 Feb 2022 10:20:30 +0000
ROA not before:           Fri 18 Feb 2022 10:20:26 +0000
ROA not after:            Mon 02 Mar 2026 10:20:26 +0000
asID:                     33763
IP address blocks:        41.218.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 10:20:26 2022 GMT
            Not After : Mar  2 10:20:26 2026 GMT
        Subject: CN=620f72ee-2e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:42:60:f7:9a:69:0c:7b:ba:18:19:96:66:
                    1c:9b:0b:c1:e6:df:4c:89:24:ef:91:b7:f4:2d:51:
                    76:9f:c3:b6:f5:e4:7f:8a:4e:7f:45:38:f8:28:2e:
                    53:44:47:36:54:07:69:97:b9:c4:bf:6e:10:3f:e8:
                    4a:3e:1c:02:78:7f:32:e2:04:22:12:b1:3a:0d:00:
                    90:2b:dd:78:6a:9e:4a:7d:a3:5f:76:24:ed:85:a7:
                    5e:52:65:78:77:20:28:f8:74:5a:2b:af:9f:9f:ed:
                    b1:7b:38:f8:46:31:39:a4:ec:9d:08:00:e3:c2:13:
                    a4:0f:59:b5:9b:63:54:07:78:2a:9a:61:87:94:c4:
                    e9:b3:05:b0:97:2b:0d:53:99:78:3e:7a:17:c0:a2:
                    ca:0e:df:ed:7a:33:86:28:f5:a5:33:4c:b0:e9:0b:
                    d7:cd:f1:46:31:3b:ca:11:c7:11:54:c1:22:4c:1c:
                    d0:68:3a:1d:b5:95:3d:09:bb:5a:60:cd:9b:cc:91:
                    26:46:6b:84:fe:50:9a:9d:00:0b:06:a7:2f:a7:a8:
                    1f:8a:56:a9:2a:3b:09:fe:83:fd:59:dd:38:f3:81:
                    8b:7a:a9:0d:64:e5:a7:f8:51:53:c3:c5:c7:4d:8e:
                    b7:54:1d:6b:2a:77:25:04:fe:4f:48:4d:69:c1:63:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:75:B0:A4:BD:19:78:7B:21:14:CE:86:4A:12:A0:A0:00:98:62
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/65A2395A90A411ECAA6193A75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.218.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:53:51:ec:42:eb:c0:30:5b:5a:ea:dd:1d:84:2a:68:e5:db:
         8f:8a:84:b0:57:a7:ea:68:9a:95:f4:27:37:cd:9b:e7:e4:b9:
         f5:55:7a:e0:e4:87:12:df:75:c0:83:cc:e7:60:dc:56:56:84:
         3f:2d:51:55:77:54:ea:2e:4a:60:6c:f7:63:25:60:7c:50:d7:
         c9:14:38:e4:5c:23:32:9a:09:62:df:ea:a0:e7:bc:13:1b:b9:
         45:47:1c:35:0e:53:27:5b:78:77:95:58:83:1e:00:0c:1f:d5:
         b1:3a:34:e7:a8:0f:fd:51:25:34:f7:8b:6c:a0:8a:59:e7:5e:
         2a:19:09:80:76:db:f9:f3:95:f0:cc:8c:21:b5:0b:80:d7:46:
         dc:06:99:07:08:37:85:6b:57:8c:e0:71:b2:59:fd:9f:30:5a:
         42:d3:ab:d0:2a:58:67:2d:f6:1d:66:d7:62:b5:84:15:40:bd:
         cf:ac:e3:ed:9e:4e:76:21:25:ae:75:b0:a1:34:b4:7f:af:31:
         24:1e:83:e6:a9:06:1d:3d:1d:bb:07:df:7f:8b:bd:c8:67:68:
         cf:16:f8:16:42:3d:80:c9:fe:58:27:fc:bb:ec:bf:92:7f:b4:
         02:bb:a3:da:a6:ce:8e:ad:17:60:d8:91:69:1c:80:03:3a:29:
         eb:11:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org