Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/230ADCC89F9511ECBA5F578D5A40D577.roa
File:                     230ADCC89F9511ECBA5F578D5A40D577.roa (raw, json)
Hash identifier:          1vflD0WWZcJJga3NYZp8LXhbh2dHWhD1QAqLE6/vaNQ=
Subject key identifier:   D0:5F:60:32:E2:DB:22:9D:69:38:EB:DD:3D:93:A9:B0:88:48:E1:12
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       50
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/230ADCC89F9511ECBA5F578D5A40D577.roa
Signing time:             Wed 09 Mar 2022 10:39:03 +0000
ROA not before:           Wed 09 Mar 2022 10:38:59 +0000
ROA not after:            Fri 07 Mar 2025 10:38:59 +0000
asID:                     29286
IP address blocks:        160.242.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Mar  9 10:38:59 2022 GMT
            Not After : Mar  7 10:38:59 2025 GMT
        Subject: CN=622883c7-0027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:64:7a:5e:8f:89:7a:03:0d:01:b5:ba:a9:
                    25:36:e1:ec:52:46:41:93:0b:54:87:20:80:00:f6:
                    b8:94:e1:10:1a:02:b3:2a:41:fa:b6:3e:de:be:e0:
                    cf:56:e3:4a:82:ef:03:73:56:7b:7a:9f:4f:d3:f3:
                    2c:84:b4:f2:30:a1:70:d1:44:4f:b3:b2:52:29:a6:
                    c1:cd:64:d3:38:2f:7c:d0:89:22:a9:21:cb:80:12:
                    c8:d0:1c:e4:f6:09:e3:bb:09:82:c6:fe:5a:2c:66:
                    ae:b4:20:d5:62:87:bb:50:67:c0:82:20:cf:2b:65:
                    9a:75:19:9d:f6:cd:f2:27:2a:a6:9c:4a:09:44:4a:
                    3c:9e:54:ec:8a:a9:94:fc:9e:e5:dd:ef:e7:12:75:
                    2e:b8:7f:72:33:1e:a3:62:be:58:da:77:90:6f:d5:
                    4b:e5:77:91:18:ef:a9:b1:10:25:7a:5c:29:c5:3b:
                    ef:c6:26:48:3e:8d:22:28:86:3b:d6:fa:54:54:96:
                    5a:c9:8b:f5:cc:e0:69:01:d0:14:9e:7a:8d:90:56:
                    50:0f:9d:70:66:c3:e1:de:84:e3:04:91:81:02:5b:
                    5d:09:04:47:59:39:5d:58:f1:bd:7c:f8:43:43:20:
                    1b:f5:74:73:b3:da:07:c0:3d:7d:25:17:87:d4:ea:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5F:60:32:E2:DB:22:9D:69:38:EB:DD:3D:93:A9:B0:88:48:E1:12
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/230ADCC89F9511ECBA5F578D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:6c:20:37:d9:a0:d2:df:12:fa:be:10:b6:8f:d6:43:4a:
         20:f8:7a:db:58:f1:8c:de:5f:d5:3c:33:b5:cc:0d:00:b2:a1:
         a5:2b:b6:a8:a8:8c:39:8c:33:98:3b:bc:c8:09:b2:f3:a2:a1:
         d6:5b:5f:43:c1:d3:4d:30:fd:95:c7:91:b7:bd:f5:29:9e:c9:
         55:37:ad:5c:43:c0:fd:a8:a5:2b:1f:7d:57:73:26:54:e6:86:
         8e:9e:24:4f:41:26:78:6c:15:56:5d:59:dc:d2:f5:e1:be:b0:
         15:9d:69:57:c2:05:64:84:88:a4:ce:80:ea:ea:d7:15:60:4e:
         e1:08:d9:28:6f:1d:f5:77:a0:b2:65:d9:ac:ae:89:7f:05:48:
         8c:c1:cb:8d:88:7e:89:c0:06:31:72:3b:d6:15:2c:f2:3c:dd:
         53:ed:08:22:34:3a:7d:34:ee:0e:71:f4:77:fe:d9:31:d7:71:
         f6:e8:26:39:d3:56:c7:c0:36:73:af:3d:45:dc:b3:3f:d5:97:
         37:d8:2d:4f:6e:69:b7:04:a1:b8:70:c4:04:c4:bb:a2:f7:7d:
         5d:bc:24:0f:25:06:e3:cb:05:ee:85:96:c6:53:3e:cd:f0:14:
         82:04:18:0b:81:db:8c:2a:a1:e1:08:a8:12:5f:57:c2:54:23:
         7b:fd:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org