Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/A271DD4890BF11ECA77615775A40D577.roa
File:                     A271DD4890BF11ECA77615775A40D577.roa (raw, json)
Hash identifier:          vnyqM7UqGZkNpB9mdPsUIMUgiwy+5qQpU3OrV4CDY/s=
Subject key identifier:   CF:FE:46:E7:8B:9F:FD:C4:DE:26:6A:11:FA:CB:83:7B:9D:FC:A2:F4
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       31
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/A271DD4890BF11ECA77615775A40D577.roa
Signing time:             Fri 18 Feb 2022 13:35:28 +0000
ROA not before:           Fri 18 Feb 2022 13:35:24 +0000
ROA not after:            Mon 02 Mar 2026 13:35:24 +0000
asID:                     33763
IP address blocks:        160.242.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Feb 18 13:35:24 2022 GMT
            Not After : Mar  2 13:35:24 2026 GMT
        Subject: CN=620fa0a0-e3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:8e:48:4d:35:fc:f8:fe:6b:e5:29:f9:56:
                    34:f9:92:5b:20:e5:87:5f:08:fe:ec:c8:13:0b:a2:
                    16:b9:88:17:70:02:ae:c1:d5:5c:51:ef:30:8d:6b:
                    e4:cc:37:81:d9:81:5d:19:59:79:62:c2:0c:ca:82:
                    4a:89:9f:ee:ea:f2:4e:05:f8:73:17:eb:52:b9:17:
                    76:b1:fe:b7:c6:eb:ab:f6:10:c2:cd:41:24:d2:5c:
                    99:37:51:f0:75:13:95:94:84:4c:a9:e6:ea:32:db:
                    9a:25:9d:91:66:1e:d9:93:1b:a3:9b:e9:35:8e:87:
                    48:32:c2:e8:85:ca:a6:be:cb:2b:36:07:2e:32:19:
                    1a:23:9d:4e:71:c4:a3:ee:56:fb:b3:ca:a5:f3:8a:
                    96:08:7f:81:40:29:58:23:29:e0:42:4d:31:90:af:
                    2e:79:9b:0e:55:a0:6a:de:eb:46:c0:48:b3:7c:d7:
                    a5:5e:f7:e7:a9:53:bd:75:6e:83:85:cd:61:07:b6:
                    b9:06:77:63:58:d1:c1:4b:8e:72:14:cc:8d:1e:e5:
                    e2:59:ff:4e:40:4c:c3:4e:ef:47:5d:3d:fe:b7:4e:
                    bb:be:1d:04:f7:b4:e5:a6:c0:b7:fc:5c:86:05:08:
                    5d:49:2a:e0:ca:5d:9a:8d:f2:93:b9:c7:8d:2b:42:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:46:E7:8B:9F:FD:C4:DE:26:6A:11:FA:CB:83:7B:9D:FC:A2:F4
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/A271DD4890BF11ECA77615775A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:be:cd:96:c2:b7:f1:ab:25:d2:bd:c8:00:3c:5d:7c:82:76:
         29:21:d3:27:af:f3:1e:6f:c6:76:f7:ef:a5:a6:b1:35:2d:75:
         35:91:e1:91:4f:1b:60:03:33:01:b0:30:a6:f3:c7:be:88:11:
         66:28:c6:4f:e8:1b:b3:2b:76:25:2a:8f:36:c9:0b:d1:b5:dd:
         01:5a:04:54:19:0c:80:fd:3a:d8:86:dd:d2:f2:80:1e:d3:a0:
         0a:b5:b3:98:a8:be:57:0b:79:16:d7:61:f8:43:fc:d9:63:d0:
         a8:08:93:d9:a3:c5:4c:44:d6:82:32:38:fb:99:ba:af:4f:38:
         18:40:ae:00:26:e8:a1:3d:55:50:1c:30:f1:01:e2:20:9c:d9:
         2d:c9:c1:3d:f5:b4:06:e2:19:fa:80:60:11:10:52:86:4a:a4:
         49:4d:89:8e:3d:f0:64:1b:33:02:b2:6f:ab:25:e9:63:4e:2a:
         2e:21:57:7e:c1:3c:8c:de:06:b3:ce:3c:d5:0b:76:61:1f:f0:
         53:cb:3e:ae:9d:7b:9f:e0:c9:28:41:41:a1:19:b4:f8:d5:bf:
         68:4f:d0:cd:82:78:2b:84:23:d6:12:8d:3b:35:6b:a5:5e:62:
         56:63:39:b7:d0:7c:7c:b6:06:88:1a:42:b6:bf:d0:b8:4e:fe:
         ca:dd:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org