Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/7DB8229690BF11EC9E55A0765A40D577.roa
File:                     7DB8229690BF11EC9E55A0765A40D577.roa (raw, json)
Hash identifier:          ARDDY5LE18fdq5r9jvwNAMGmPsv10ToA+eIapHFxS18=
Subject key identifier:   AD:49:9A:49:E5:2E:8A:00:E9:3C:8D:A1:A1:64:90:55:C1:9A:4F:91
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       2F
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/7DB8229690BF11EC9E55A0765A40D577.roa
Signing time:             Fri 18 Feb 2022 13:34:26 +0000
ROA not before:           Fri 18 Feb 2022 13:34:22 +0000
ROA not after:            Mon 02 Mar 2026 13:34:22 +0000
asID:                     33763
IP address blocks:        160.242.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Feb 18 13:34:22 2022 GMT
            Not After : Mar  2 13:34:22 2026 GMT
        Subject: CN=620fa062-5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:be:ec:3c:27:f3:cd:75:c6:49:46:1d:a7:
                    84:2f:8f:d0:24:c0:75:7e:26:bc:1a:2c:e4:b2:d3:
                    06:c3:1c:49:82:26:9c:0c:f4:fb:f4:ca:39:04:7a:
                    5a:86:54:e3:a2:de:29:4e:67:b4:bd:e6:bd:e3:84:
                    c2:43:47:85:68:b8:59:b4:99:84:7d:95:5e:7e:fe:
                    f9:c0:ca:08:03:7b:88:55:92:7f:c2:39:74:ca:7b:
                    51:48:93:9b:ff:59:4b:93:de:7d:fd:77:1e:8e:0d:
                    f8:1c:4f:15:8d:25:89:d3:36:2f:e0:b7:60:56:d4:
                    9d:2d:92:0e:39:da:a3:62:32:97:a6:67:dd:db:74:
                    e3:1a:7b:a8:4c:ed:16:71:1e:9a:0d:47:e5:c4:b1:
                    db:ff:ec:04:78:ac:e2:41:06:42:20:00:68:d2:3a:
                    4b:18:36:6f:72:32:82:d8:d0:2a:ba:6d:b5:03:66:
                    85:a2:55:95:95:c4:01:e3:89:f9:21:cd:6d:0c:14:
                    bc:41:30:46:0a:95:53:35:f3:bd:8c:42:71:7c:4e:
                    58:13:2a:4b:eb:fb:13:92:25:70:69:e1:cf:23:d4:
                    b7:b8:47:9b:f2:ae:b3:64:7f:40:47:3a:ea:0c:dd:
                    95:87:b6:86:d5:22:93:06:36:ef:cd:f2:69:2a:c1:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:9A:49:E5:2E:8A:00:E9:3C:8D:A1:A1:64:90:55:C1:9A:4F:91
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/7DB8229690BF11EC9E55A0765A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:09:ba:2d:43:49:40:e0:de:98:66:e0:76:a2:6b:8c:d7:
         9b:d6:a8:37:19:a2:a5:a6:11:86:9b:54:a1:53:dc:a8:07:cf:
         38:a1:7c:0f:40:8e:d6:7f:03:d6:ea:f0:e8:c6:8d:8b:36:1f:
         a1:2f:a9:cb:39:03:d2:da:f2:ba:b3:1c:38:4a:a5:91:14:bd:
         18:69:84:28:af:b8:5e:9d:a0:26:8c:00:4a:d1:23:62:30:76:
         52:c3:4a:44:27:f8:5f:42:cb:15:68:ef:b3:7f:f4:c1:5b:8b:
         31:c9:9f:ec:ed:49:59:96:c0:5e:9d:49:5a:a1:31:3b:28:a0:
         45:22:05:f7:ea:2e:24:81:ae:48:cf:33:ef:f9:cd:34:65:a5:
         ed:16:6e:3f:07:dc:e5:74:e5:36:3e:68:47:8e:51:bf:66:ab:
         ec:06:46:44:df:a2:ae:7f:9c:1e:e7:cd:01:57:3b:09:e2:3f:
         cb:b0:2a:4f:23:b4:78:2d:eb:72:b0:86:53:87:c2:45:b6:0e:
         68:47:74:41:07:85:14:7b:53:4c:0e:48:d1:85:0b:1e:8a:fc:
         e5:a2:3e:aa:c6:f0:61:a2:d7:32:8d:74:d2:d7:7e:2f:13:d5:
         fd:f1:3a:6e:d8:b2:89:ab:ba:b8:ed:af:0c:94:d3:3e:2d:b0:
         e2:27:f5:b8
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBLzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFSMTEwLwYDVQQFEyhBNThCNjMyN0E1RDRDN0NDQzI1RDdFRjQ4MkE4MTNE
MDBEOUVFQ0UzMB4XDTIyMDIxODEzMzQyMloXDTI2MDMwMjEzMzQyMlowGDEWMBQG
A1UEAwwNNjIwZmEwNjItNTgwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALavvuw8J/PNdcZJRh2nhC+P0CTAdX4mvBos5LLTBsMcSYImnAz0+/TKOQR6
WoZU46LeKU5ntL3mveOEwkNHhWi4WbSZhH2VXn7++cDKCAN7iFWSf8I5dMp7UUiT
m/9ZS5Peff13Ho4N+BxPFY0lidM2L+C3YFbUnS2SDjnao2Iyl6Zn3dt04xp7qEzt
FnEemg1H5cSx2//sBHis4kEGQiAAaNI6Sxg2b3IygtjQKrpttQNmhaJVlZXEAeOJ
+SHNbQwUvEEwRgqVUzXzvYxCcXxOWBMqS+v7E5IlcGnhzyPUt7hHm/Kus2R/QEc6
6gzdlYe2htUikwY2783yaSrB+jsCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBStSZpJ
5S6KAOk8jaGhZJBVwZpPkTAfBgNVHSMEGDAWgBSli2MnpdTHzMJdfvSCqBPQDZ7s
4zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvODJDQTk5NUE3NDdGMTFFQzlDQjIzQTk3NUE0MEQ1NzcvcFl0ako2
WFV4OHpDWFg3MGdxZ1QwQTJlN09NLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
cFl0ako2WFV4OHpDWFg3MGdxZ1QwQTJlN09NLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTQ3NEEvODJDQTk5NUE3NDdGMTFFQzlDQjIzQTk3NUE0MEQ1
NzcvN0RCODIyOTY5MEJGMTFFQzlFNTVBMDc2NUE0MEQ1Nzcucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDyEDANBgkqhkiG9w0BAQsFAAOC
AQEACZ4Jui1DSUDg3phm4Haia4zXm9aoNxmipaYRhptUoVPcqAfPOKF8D0CO1n8D
1urw6MaNizYfoS+pyzkD0tryurMcOEqlkRS9GGmEKK+4Xp2gJowAStEjYjB2UsNK
RCf4X0LLFWjvs3/0wVuLMcmf7O1JWZbAXp1JWqExOyigRSIF9+ouJIGuSM8z7/nN
NGWl7RZuPwfc5XTlNj5oR45Rv2ar7AZGRN+irn+cHufNAVc7CeI/y7AqTyO0eC3r
crCGU4fCRbYOaEd0QQeFFHtTTA5I0YULHor85aI+qsbwYaLXMo100td+LxPV/fE6
btiyiau6uO2vDJTTPi2w4if1uA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org