Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/C6A5AE3890BF11EC90C081775A40D577.roa
File:                     C6A5AE3890BF11EC90C081775A40D577.roa (raw, json)
Hash identifier:          yDLL/109o0nJjf0bC5Rs3EsKNknxtTyew53p/M9JJLA=
Subject key identifier:   6A:0A:91:85:69:11:03:09:76:07:2F:80:35:6C:A2:97:CA:0D:21:66
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       33
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/C6A5AE3890BF11EC90C081775A40D577.roa
Signing time:             Fri 18 Feb 2022 13:36:29 +0000
ROA not before:           Fri 18 Feb 2022 13:36:25 +0000
ROA not after:            Mon 02 Mar 2026 13:36:25 +0000
asID:                     33763
IP address blocks:        160.242.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Feb 18 13:36:25 2022 GMT
            Not After : Mar  2 13:36:25 2026 GMT
        Subject: CN=620fa0dd-b976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:54:da:fe:bd:20:79:55:6f:af:57:6d:0e:
                    da:8f:e8:32:c1:2a:cb:28:59:89:4d:89:dc:c4:68:
                    c4:e5:ce:51:d1:49:92:c7:d4:6f:e7:a1:3d:e6:95:
                    9b:35:4d:f3:f6:58:ec:97:bf:a7:e6:b6:5c:04:15:
                    12:c8:41:65:67:6e:fe:c1:ed:97:89:f1:85:f0:f7:
                    8c:d6:11:9c:5b:12:f7:81:84:fb:6a:10:38:68:c1:
                    9b:7d:49:d3:ed:e9:40:8f:23:8c:f2:53:d0:c1:5d:
                    f0:3e:63:8b:c1:db:88:af:eb:e7:81:20:4c:cd:d0:
                    81:f5:64:bb:a8:39:a6:a0:df:29:95:07:e2:e2:bd:
                    2c:20:29:9e:16:a8:d9:b5:94:74:23:35:1b:03:e5:
                    86:95:a4:fb:18:07:fd:7c:e1:12:44:50:56:6d:2b:
                    ab:70:3a:ef:39:25:ac:61:03:b6:c5:d0:d5:88:a6:
                    17:51:cb:d1:3f:e3:e3:d1:c9:62:33:66:20:5a:bd:
                    d2:47:1b:2b:7c:61:cb:d9:fc:ed:c3:95:83:c8:ab:
                    a9:fb:db:b2:ea:ac:39:b8:2e:75:25:5d:21:e2:8f:
                    9b:90:29:c3:9b:7c:24:2a:86:3a:20:4f:3f:f6:18:
                    55:18:3d:75:e7:5c:88:2b:24:66:b5:fd:e9:ba:cf:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:91:85:69:11:03:09:76:07:2F:80:35:6C:A2:97:CA:0D:21:66
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/C6A5AE3890BF11EC90C081775A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:20:da:ce:84:9b:b0:14:c7:44:16:b9:b1:be:29:a8:1f:
         d0:5f:c6:ae:b7:b5:41:41:42:98:70:2a:11:c5:ee:c6:1f:e9:
         b8:02:52:c4:11:48:19:cb:d5:a4:f8:5a:bc:15:58:a0:cc:20:
         b8:cb:5f:6c:df:fc:40:21:47:a7:1f:53:5d:ea:39:3d:c1:64:
         5f:79:e6:28:e7:8a:cb:23:88:b3:85:2f:37:0d:89:36:6d:9e:
         d2:44:28:95:52:32:a8:ba:30:31:ef:23:cd:36:ec:b1:3e:58:
         09:1f:96:34:6c:31:c3:7a:b3:c7:98:d8:93:2c:f6:35:d3:b7:
         d2:7d:29:6e:ac:6c:35:f6:39:fa:66:7e:2b:24:d1:a8:a0:e9:
         27:40:ed:6c:56:f0:a5:18:aa:e5:04:06:82:0b:7f:99:0c:ee:
         a7:a2:5a:ce:f9:36:02:f2:e2:53:a9:54:4c:72:20:be:30:9e:
         d9:4d:4a:e2:11:37:8a:a8:fa:a3:56:c3:72:c7:4e:bf:4f:ad:
         33:84:39:8a:4a:45:f2:7f:62:d3:55:c8:aa:78:fc:e5:9d:ae:
         7d:66:b9:4f:e6:0f:3e:cb:be:bb:1f:48:35:9c:91:fb:e2:8a:
         96:b0:83:44:db:6a:5d:b2:ef:3d:18:2d:1a:98:7b:90:f7:58:
         25:b8:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org