Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/2EB2288A90C011ECB936A8785A40D577.roa
File:                     2EB2288A90C011ECB936A8785A40D577.roa (raw, json)
Hash identifier:          AxVlKBpPoAFuNCsyQd3GGWXPt1L61l1TzYTcMlaBe1Q=
Subject key identifier:   7C:A0:97:2D:FC:D7:DB:22:BF:D1:83:6A:66:E6:77:78:8A:51:C7:A3
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       37
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/2EB2288A90C011ECB936A8785A40D577.roa
Signing time:             Fri 18 Feb 2022 13:39:23 +0000
ROA not before:           Fri 18 Feb 2022 13:39:20 +0000
ROA not after:            Mon 02 Mar 2026 13:39:20 +0000
asID:                     33763
IP address blocks:        160.242.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Feb 18 13:39:20 2022 GMT
            Not After : Mar  2 13:39:20 2026 GMT
        Subject: CN=620fa18b-0c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:7b:c0:78:a7:f0:11:07:27:5a:dc:5f:79:
                    02:3e:9e:f5:74:42:19:fe:4f:a7:d1:8e:80:ad:01:
                    55:fe:25:90:65:1f:3c:42:fb:66:5e:19:51:37:3a:
                    92:51:1b:8f:fb:4d:3c:01:62:19:d1:1d:58:21:af:
                    1d:35:cd:43:87:23:f5:3b:fa:7d:4c:34:5b:df:00:
                    30:45:f5:19:8b:80:5a:4b:53:72:d1:05:de:ae:4b:
                    f9:94:ad:cc:00:d9:44:97:34:76:8a:fc:b2:5c:29:
                    c1:0a:f0:ed:f6:5e:7c:cb:bc:df:2d:ae:93:68:b8:
                    9a:e4:b6:ea:8f:f7:91:09:c9:da:1a:30:66:f8:b8:
                    88:ed:91:fd:ff:15:b9:db:9f:86:a9:83:a4:e8:9e:
                    54:56:82:de:30:8b:02:f4:d5:3b:b3:85:90:24:93:
                    a2:40:51:39:07:2b:2c:d5:0f:b4:9d:4a:d4:5b:d3:
                    33:12:64:f3:fc:a6:6b:5b:37:0f:15:3d:0f:4d:d5:
                    5d:61:b1:ea:10:b3:81:ae:a7:cf:54:7c:32:dd:4d:
                    c6:b6:a9:88:13:84:19:a2:32:09:66:70:b5:51:8c:
                    5c:74:b5:e0:d7:b4:99:45:77:24:76:b2:33:e6:45:
                    13:e2:db:bf:ab:0c:86:84:23:a9:e6:7c:99:9b:b0:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A0:97:2D:FC:D7:DB:22:BF:D1:83:6A:66:E6:77:78:8A:51:C7:A3
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/2EB2288A90C011ECB936A8785A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:a5:0a:f4:0c:ce:07:27:d7:5a:f4:7e:63:fc:4e:dc:20:
         50:59:e0:46:ec:3d:2d:26:67:84:6e:3a:f7:f6:3f:00:0d:81:
         16:fb:83:8f:09:1e:df:e1:f4:61:40:a7:ee:6f:db:75:4e:21:
         b2:26:ee:7c:c8:23:94:b3:f0:de:65:64:5a:7c:7a:fc:ad:cd:
         14:30:04:4b:c7:ab:2a:cf:ec:c5:d1:80:03:3b:46:21:ff:42:
         43:e2:33:52:65:a5:48:57:10:fc:26:00:57:72:62:ae:e3:34:
         a0:22:8f:ed:13:9b:70:0a:15:c2:e6:ee:64:f8:61:2f:de:b1:
         f7:5a:5c:fa:67:73:09:80:68:e6:56:7d:35:51:ce:96:07:73:
         1e:91:1f:0b:13:1d:7f:6e:39:cc:0c:bd:d9:f3:f1:59:27:e3:
         f4:f3:b0:0c:78:5d:08:4b:ec:03:db:86:05:18:ea:01:6d:87:
         1d:e8:45:d0:8b:e1:96:b4:25:27:e1:b3:bd:df:55:33:ec:db:
         95:55:24:be:c3:40:fd:dc:48:f1:90:58:5d:08:e4:92:75:3d:
         d5:b9:2b:83:eb:24:c4:11:76:7c:48:3e:53:2d:7b:d8:cc:ec:
         1c:8b:45:68:b1:4b:55:73:4f:9b:ff:32:f0:51:4e:c5:6e:6f:
         3d:a7:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org