Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/9CCF27F290A011ECB9D4CB9C5A40D577.roa
File:                     9CCF27F290A011ECB9D4CB9C5A40D577.roa (raw, json)
Hash identifier:          l3Jl+rJsluz79X1LXAPBvyb9MThq8X2GGglxbF+OdOo=
Subject key identifier:   6D:75:46:9F:3C:83:B6:99:D5:03:86:D2:BF:D4:8B:FF:74:4A:5B:CE
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       2D
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/9CCF27F290A011ECB9D4CB9C5A40D577.roa
Signing time:             Fri 18 Feb 2022 09:53:24 +0000
ROA not before:           Fri 18 Feb 2022 09:53:21 +0000
ROA not after:            Mon 02 Mar 2026 09:53:21 +0000
asID:                     33763
IP address blocks:        160.242.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Feb 18 09:53:21 2022 GMT
            Not After : Mar  2 09:53:21 2026 GMT
        Subject: CN=620f6c94-e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:da:03:09:b1:0c:91:95:c1:96:47:a7:4a:
                    81:7a:33:27:63:64:1c:92:a8:f7:64:48:29:59:42:
                    80:bb:ba:c9:b2:78:80:c8:03:2c:3f:60:0b:69:3f:
                    be:43:07:a7:43:52:34:9b:8b:9f:31:3c:4a:15:c2:
                    75:19:a7:04:1a:ff:3e:c4:4b:4f:85:f9:16:29:58:
                    99:02:57:af:1e:ed:ff:e7:5b:ec:9d:a7:0d:12:8b:
                    5e:ec:f6:44:21:08:af:b8:1b:88:52:3f:da:0b:a4:
                    86:2b:25:40:51:bb:d2:78:57:74:ac:cc:9b:b4:ad:
                    a8:8b:d4:3d:68:34:ea:7d:c1:10:ba:69:ca:37:ee:
                    83:f9:75:df:ee:6d:29:63:4e:32:35:12:58:d2:7e:
                    ce:87:5d:6c:24:24:30:77:51:bc:12:76:81:29:12:
                    44:b0:83:dc:b9:6f:7d:c1:3c:29:f7:20:7f:9c:d9:
                    37:5d:94:87:f3:97:60:0f:a8:70:a3:3a:b3:6b:ea:
                    55:1f:03:94:dd:a9:a7:f1:82:01:c5:35:18:62:c7:
                    43:48:ed:a4:06:0d:d5:d6:55:64:d4:fd:f4:11:d4:
                    de:02:d2:cd:c7:15:49:a8:77:f9:56:c0:3b:1c:6f:
                    00:00:34:c1:e9:eb:6a:46:d5:8d:78:ff:fb:77:8d:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:75:46:9F:3C:83:B6:99:D5:03:86:D2:BF:D4:8B:FF:74:4A:5B:CE
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/9CCF27F290A011ECB9D4CB9C5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:92:9c:0a:06:ed:d4:1f:c7:b1:ca:df:f1:34:5a:6d:0f:ae:
         ad:f0:f9:9a:11:e8:1a:5b:d1:ae:ee:78:31:20:2b:ef:be:fd:
         31:c3:1f:47:65:8d:38:a4:20:2b:9f:99:7e:b0:c2:f3:f9:d1:
         13:94:fe:58:e1:83:fd:1f:22:2e:58:80:79:1e:e2:93:52:03:
         c3:dc:72:e9:53:52:9a:b6:ce:f7:91:54:62:83:c5:cc:eb:11:
         c5:b4:df:fb:47:78:85:07:61:e7:12:01:bc:40:cc:e9:d4:f8:
         65:da:eb:ea:0d:b7:fe:52:af:62:6e:0c:5f:88:71:d2:a3:a3:
         8f:4c:7a:14:41:eb:cb:e6:90:80:3a:b9:22:2a:c8:db:c3:c6:
         6d:8e:4b:f6:0a:3b:26:48:37:0a:5e:af:eb:3d:75:95:b6:59:
         17:19:fa:8b:26:5a:b9:60:1e:37:b2:63:75:b4:94:a3:09:29:
         50:fa:ed:6f:ca:83:7e:be:7e:78:cb:cf:b8:28:41:6a:a2:34:
         77:9d:19:2e:67:48:fa:da:5e:a7:48:b9:41:73:c6:76:5e:85:
         9d:53:9a:90:e1:23:91:42:84:61:f3:c9:d9:e2:0b:5e:93:18:
         76:01:56:ef:62:37:39:35:89:ec:16:05:20:5b:c1:4e:38:c5:
         56:1c:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org