Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/81B5E5D690C411EC955413865A40D577.roa
File:                     81B5E5D690C411EC955413865A40D577.roa (raw, json)
Hash identifier:          5W9eJ7EFGepKjWk7Yvr+beDlgBk2cJcWFsZ7sIgIve8=
Subject key identifier:   E9:B3:1D:3A:23:5F:35:4B:C3:29:DA:21:F8:DA:FB:64:A0:4D:41:50
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       39
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/81B5E5D690C411EC955413865A40D577.roa
Signing time:             Fri 18 Feb 2022 14:10:21 +0000
ROA not before:           Fri 18 Feb 2022 14:10:17 +0000
ROA not after:            Mon 02 Mar 2026 14:10:17 +0000
asID:                     33763
IP address blocks:        2c0f:f980:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 14:10:17 2022 GMT
            Not After : Mar  2 14:10:17 2026 GMT
        Subject: CN=620fa8cc-2a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:36:81:1f:32:a8:32:e5:8e:07:bc:82:c5:
                    8b:ab:5f:bf:81:3c:70:95:b3:77:c5:3b:b2:32:f3:
                    47:89:dd:f0:1d:53:92:58:03:71:4f:9f:81:0b:45:
                    9d:7c:37:55:77:29:b6:35:70:64:66:6f:e6:bf:04:
                    f0:83:82:26:ee:11:c4:f8:9f:3e:d2:a7:4c:bd:da:
                    45:48:8d:67:28:85:0c:b2:19:11:1c:5c:85:ea:fd:
                    83:3a:d0:c1:88:35:99:2f:7d:31:4e:a1:4f:60:02:
                    8e:88:ad:11:a9:cc:2f:98:f0:51:84:4c:cd:c2:6b:
                    2b:86:da:ea:e3:a3:e9:17:76:aa:bc:dd:71:be:5e:
                    36:b2:65:dc:10:80:44:cb:ee:67:ad:6e:3e:9e:8c:
                    93:45:74:84:3a:98:7b:97:30:e0:40:9d:ce:82:8f:
                    27:3a:c2:d8:e7:39:07:d3:ee:7e:7f:45:6f:cb:06:
                    ff:68:50:19:2b:3a:be:6b:14:08:d7:39:17:fe:24:
                    d9:3d:a7:cb:08:5b:69:bf:7b:5d:fd:ce:69:1f:9a:
                    94:a8:e3:43:bb:81:f3:e6:67:bd:a0:a2:04:fd:e2:
                    d5:38:4b:51:2a:eb:97:af:ca:26:08:08:9b:12:da:
                    41:e9:24:22:45:45:15:64:05:27:55:bd:79:b8:e7:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B3:1D:3A:23:5F:35:4B:C3:29:DA:21:F8:DA:FB:64:A0:4D:41:50
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/81B5E5D690C411EC955413865A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f980:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:48:35:60:b1:54:75:e0:ba:19:fc:d0:07:7c:b1:7a:89:
         9f:c3:b3:7a:2e:20:ff:0b:ab:ea:a5:85:22:b5:3a:fd:80:53:
         d9:26:70:29:ac:6d:8e:1b:81:9c:4f:16:3e:d1:f3:93:79:47:
         2c:7d:a2:8f:ae:e9:63:ae:23:6d:2b:d7:79:42:9a:55:36:26:
         b7:51:01:dc:45:34:5e:c8:ca:de:35:1c:7a:67:7f:e2:b3:ef:
         42:57:16:97:7c:b8:4d:aa:92:ec:69:06:23:65:b6:20:15:99:
         32:db:d5:b6:5d:9b:03:cc:5b:c9:69:5e:a0:17:c7:c1:2c:d8:
         b6:b3:49:ed:64:f0:7e:b2:d7:bf:fc:16:df:7f:e0:bf:75:7f:
         ff:e1:ee:ae:35:a8:b0:f5:61:95:f3:5f:a4:7e:39:44:eb:70:
         59:f7:6e:fb:32:d6:cd:80:f1:fc:37:6a:8a:e1:ef:e4:70:5f:
         6d:20:28:10:ac:f8:67:38:a1:49:70:49:b0:e4:4f:7b:a1:26:
         c7:f7:e9:ab:ed:04:63:92:78:81:f1:b3:15:5e:13:4f:f5:9d:
         1b:a2:e9:cd:97:12:f3:c6:5a:f7:14:78:a7:cf:39:c0:90:10:
         b7:2d:a0:33:60:a6:5d:95:53:8f:dc:c3:22:02:40:07:05:be:
         80:f1:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org