Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/981D05B6400511EDAD75969AF1222468.roa
File:                     981D05B6400511EDAD75969AF1222468.roa (raw, json)
Hash identifier:          OEnA6s0k5DW0ZZB/Kf8iQ5N8Q+WMMudDqyL0DQ/tqUk=
Subject key identifier:   EA:AF:37:B0:C7:48:0B:3E:F9:B2:4E:CA:5F:9A:CC:0F:EF:6F:69:AB
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       0122
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/981D05B6400511EDAD75969AF1222468.roa
Signing time:             Thu 29 Sep 2022 14:47:09 +0000
ROA not before:           Thu 29 Sep 2022 14:47:04 +0000
ROA not after:            Wed 29 Sep 2027 14:47:04 +0000
asID:                     29286
IP address blocks:        160.242.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Sep 29 14:47:04 2022 GMT
            Not After : Sep 29 14:47:04 2027 GMT
        Subject: CN=6335afed-2c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:f1:4b:a6:82:70:4c:d7:b0:08:05:6c:f3:
                    f5:21:bb:20:a7:57:f0:17:ee:6e:93:69:d3:0b:80:
                    81:d9:a4:c7:78:d2:2b:04:13:fb:d5:85:5f:6f:5e:
                    ea:6c:be:62:a6:c7:e3:14:97:ac:14:86:db:ac:be:
                    67:de:db:85:97:65:0c:ce:c1:79:fb:0e:8c:86:97:
                    5e:26:51:c7:98:2c:c8:74:ea:e7:3e:ef:22:be:82:
                    58:c5:90:49:cd:fc:a6:1e:a1:da:9d:5f:66:1e:bf:
                    ff:7c:ca:be:f0:d5:74:9b:74:5c:19:3f:ce:b5:24:
                    ba:c5:ce:fa:eb:64:01:66:60:73:08:81:68:f9:e8:
                    19:fe:05:d5:bf:3e:07:c3:16:2e:58:af:11:79:e4:
                    fb:aa:12:02:c2:27:bc:62:03:a2:1a:d9:fa:7d:a6:
                    49:36:20:c1:08:c9:eb:7e:74:3c:ea:f0:63:95:0c:
                    6e:ea:6a:b3:3d:36:12:be:96:31:69:51:17:d0:ea:
                    52:0e:10:1e:36:2e:a6:85:51:d0:a0:ff:77:6c:65:
                    04:f5:4e:1f:5e:e1:e7:99:95:5a:be:ec:7e:b0:c8:
                    bd:dc:07:09:fe:62:eb:39:f9:52:6e:1a:f0:71:14:
                    c0:d5:60:41:15:a7:ad:33:09:c2:b4:48:60:9f:be:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:37:B0:C7:48:0B:3E:F9:B2:4E:CA:5F:9A:CC:0F:EF:6F:69:AB
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/981D05B6400511EDAD75969AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:c1:2b:93:1b:be:1d:9c:4e:ca:4c:89:9a:dd:d5:e3:c8:
         27:7c:dc:39:33:62:d2:79:68:75:01:ec:bf:e1:1d:d5:d6:a8:
         a7:e9:80:69:f6:44:e1:ec:3e:37:7c:1d:82:4f:3a:41:17:6f:
         e7:68:56:b0:f9:5f:47:44:bb:9c:3d:6d:6e:37:4e:39:18:e3:
         23:d7:82:56:7c:b4:e7:78:50:ce:93:8a:16:f6:07:7f:31:bf:
         a4:a6:f7:62:44:f9:07:4b:8a:2c:15:6c:43:c0:7e:c2:f4:db:
         97:07:ac:47:25:45:75:13:b4:61:79:02:8f:9e:2c:cd:82:04:
         c9:8a:de:d9:75:f9:3b:30:b9:32:0c:43:eb:e5:62:cd:19:5b:
         d2:89:e0:25:a6:8f:6e:cf:2d:55:e5:69:b5:fd:78:d0:29:c6:
         de:6a:b9:8e:fb:59:cb:75:4f:3d:6d:eb:1d:23:bc:14:68:ab:
         f0:a0:a2:12:85:25:fe:03:f2:87:3c:dc:fa:65:d6:a4:3e:06:
         4a:5a:35:1a:4d:5b:36:e2:62:c2:99:e6:fd:41:60:99:79:a2:
         9b:b2:33:4e:8a:26:f4:15:0c:39:0c:6d:46:65:d0:39:93:36:
         25:ab:fc:61:c5:0e:c8:2f:8b:8a:95:f8:e7:8a:bb:1c:7e:a2:
         ef:14:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org