Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/9AB6517E90C411EC8C3D53865A40D577.roa
File:                     9AB6517E90C411EC8C3D53865A40D577.roa (raw, json)
Hash identifier:          2TFtweR2JsBs/wy2usPqqxCMeukkzbn5ezMAKSpLwKY=
Subject key identifier:   E4:C2:9F:34:3E:7A:6F:D4:AE:50:85:CF:D0:07:35:C6:F8:B2:CC:9A
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       3B
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/9AB6517E90C411EC8C3D53865A40D577.roa
Signing time:             Fri 18 Feb 2022 14:11:02 +0000
ROA not before:           Fri 18 Feb 2022 14:10:59 +0000
ROA not after:            Mon 02 Mar 2026 14:10:59 +0000
asID:                     33763
IP address blocks:        2c0f:f980:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 14:10:59 2022 GMT
            Not After : Mar  2 14:10:59 2026 GMT
        Subject: CN=620fa8f6-8b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:23:3f:cc:d4:bb:a7:91:05:4f:4d:1f:cc:dc:
                    f2:4f:b9:72:62:66:9d:2b:c1:e1:6a:8d:36:ce:00:
                    20:c7:94:56:f0:37:a7:81:53:bc:82:90:64:0a:85:
                    c7:1d:84:ac:c0:74:a0:dc:25:71:79:d6:41:63:e8:
                    74:d3:18:74:5f:c2:9c:e7:9c:9c:1b:e5:8f:ae:32:
                    0f:1d:07:75:ce:56:0c:a4:4c:fa:b0:f1:45:f6:ac:
                    e5:ad:94:44:47:14:a1:64:b2:33:42:64:61:c7:31:
                    35:6d:41:62:ab:9d:be:bb:9e:8b:94:7f:73:a9:54:
                    49:45:80:5d:bd:31:25:9c:29:80:27:c2:2f:d8:2b:
                    7c:d7:86:35:62:f2:90:5a:c5:96:99:2e:94:f5:84:
                    cc:63:c3:20:2b:dc:a3:91:86:ce:2a:24:0f:51:f5:
                    f9:37:98:96:80:a1:d0:e7:3c:76:0c:5d:6a:dc:ce:
                    43:af:fb:c8:e5:65:fd:63:b6:fa:a1:31:ee:17:4a:
                    2c:2a:30:e4:b0:e7:39:f8:a9:9d:6c:70:4b:66:73:
                    82:78:0f:7b:ce:e6:29:fc:a4:77:2e:f3:e0:15:07:
                    b0:2f:53:45:dd:86:5a:74:fb:b5:ca:c4:0b:74:80:
                    46:78:63:15:a2:c3:c1:02:d5:53:ac:2d:ae:be:35:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:9F:34:3E:7A:6F:D4:AE:50:85:CF:D0:07:35:C6:F8:B2:CC:9A
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/9AB6517E90C411EC8C3D53865A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f980:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:3d:49:f9:a8:e4:55:7a:27:b7:33:b0:54:58:ac:3b:35:
         d7:eb:bf:72:cd:fb:95:96:c5:f3:5b:89:7f:7a:c8:47:98:a5:
         14:7c:1b:f8:38:73:f7:7a:44:d8:56:22:1d:65:8c:25:4d:61:
         d2:cd:78:73:eb:8e:12:d9:4a:b5:d8:69:82:2c:73:9c:74:21:
         71:33:d5:48:fb:44:9c:d2:26:f4:07:85:dd:9d:2b:1a:72:73:
         94:9c:04:d7:f1:ce:00:d6:9d:54:c0:8a:9b:3c:77:56:84:5d:
         38:9d:5a:96:22:71:4c:d1:b3:af:06:3b:a3:69:ff:3d:40:a4:
         9d:c6:f3:e8:03:d7:58:d5:53:e2:e8:e1:e7:22:db:de:6e:ad:
         3c:b0:ac:a5:cc:32:68:51:44:17:a7:65:4e:4d:49:8b:c5:cf:
         6a:3f:02:dd:56:6c:f9:45:2b:ef:e2:3f:66:c1:a2:38:9e:9e:
         0f:63:b5:80:4d:c7:9a:e6:5a:ed:cb:ad:99:34:03:12:3e:f5:
         36:df:09:20:92:f2:4d:bd:6e:8f:97:a2:79:e4:a3:3b:6f:72:
         f1:04:5b:85:ee:fa:f4:01:02:b7:32:df:c2:e3:99:ff:a7:eb:
         ba:a6:a8:ed:79:9d:8d:61:ee:bf:1a:9f:e2:31:54:98:c3:0e:
         39:34:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org