Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/EFB374B890BF11EC8DC2EB775A40D577.roa
File:                     EFB374B890BF11EC8DC2EB775A40D577.roa (raw, json)
Hash identifier:          10ieOna8oJHEUHvmRNc1rFuh7Y2uDt0g60q5eaycWHo=
Subject key identifier:   F9:B0:89:DA:43:BC:04:7F:DE:71:C3:42:5B:0A:FC:1F:0F:F3:A5:9E
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       35
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/EFB374B890BF11EC8DC2EB775A40D577.roa
Signing time:             Fri 18 Feb 2022 13:37:38 +0000
ROA not before:           Fri 18 Feb 2022 13:37:34 +0000
ROA not after:            Mon 02 Mar 2026 13:37:34 +0000
asID:                     33763
IP address blocks:        160.242.22.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Feb 18 13:37:34 2022 GMT
            Not After : Mar  2 13:37:34 2026 GMT
        Subject: CN=620fa122-2e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:e1:ab:e1:c3:f3:a7:66:6a:ed:54:aa:34:
                    63:7c:96:29:49:06:ce:e3:19:72:05:24:a5:41:55:
                    00:f2:a1:d2:62:0a:44:db:1c:79:5a:ff:a4:28:3e:
                    17:c0:16:26:10:85:55:6e:02:26:79:64:7f:4a:a4:
                    5a:42:c8:f9:67:be:bf:88:95:66:be:b5:3f:4d:d8:
                    6d:7c:f8:d4:1f:b3:82:39:2d:43:f3:13:73:67:4c:
                    a0:a1:be:fe:5d:14:31:0f:74:1e:1a:cd:5a:1c:10:
                    ef:d8:bf:94:8b:8a:ea:e8:32:ed:3a:e6:76:d9:c8:
                    c3:f4:a3:48:80:f1:a9:14:26:37:7a:3d:ae:b8:0f:
                    e4:56:1b:ba:f8:da:00:b0:e2:e2:2a:cf:5d:ac:37:
                    44:97:44:c8:96:f4:c3:ef:d1:95:29:2e:b2:c8:29:
                    03:54:e5:ec:14:53:09:b2:88:30:f5:74:9b:eb:bf:
                    38:a5:7b:a3:6e:38:98:e9:e4:2c:b1:32:05:6f:c4:
                    ac:3e:66:da:91:90:b8:fb:6d:ae:b3:dc:02:fc:24:
                    83:4e:7c:45:81:6e:f3:07:c0:6b:7d:c8:11:96:bf:
                    38:a8:c1:27:3d:35:49:02:7d:43:4e:73:f4:f6:ff:
                    82:2d:87:93:25:c9:e7:b9:4b:ba:a3:f3:75:46:c8:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:89:DA:43:BC:04:7F:DE:71:C3:42:5B:0A:FC:1F:0F:F3:A5:9E
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/EFB374B890BF11EC8DC2EB775A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:70:1b:75:75:f4:8c:01:ee:63:fc:5c:78:90:2a:37:93:9f:
         6a:e3:6e:3f:e6:28:90:d7:75:06:7f:06:96:e1:75:3c:75:28:
         6f:e7:3e:a1:22:0e:87:0d:3c:bc:65:57:ee:98:de:ac:a6:ef:
         49:3e:25:39:8a:de:61:6d:23:a9:4b:cb:b0:cf:7a:1b:1c:a9:
         8f:d5:5a:52:4a:dc:ad:e5:60:c5:b3:3f:e8:d8:ff:6e:e3:b7:
         ea:68:28:79:60:75:5f:4d:ea:1c:42:a2:f0:72:7c:f9:b3:17:
         56:a6:0e:b0:a3:5d:cd:55:12:e9:ad:68:4d:6f:04:3f:ad:03:
         9a:61:1d:1e:e9:40:ae:bf:ae:ce:83:9e:0c:d4:74:8e:69:8e:
         42:01:0f:b4:d9:a6:68:3f:e9:38:b1:22:63:19:98:24:97:1a:
         36:31:d8:4e:96:0e:c8:a4:64:e4:8f:df:7e:9a:c4:22:fc:9e:
         ea:15:5e:83:94:e8:1f:e7:f0:be:77:b1:26:a6:68:6d:5b:14:
         0d:69:b0:07:a4:4c:ea:5a:44:92:29:ea:ea:2b:62:96:7c:5c:
         12:20:f1:e5:7e:91:3d:f8:ca:ad:98:91:eb:88:5f:20:06:d8:
         01:8f:6e:f5:ba:8c:63:d4:91:6c:af:b5:ac:02:3b:79:6e:98:
         35:e3:fd:db
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBNTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFSMTEwLwYDVQQFEyhBNThCNjMyN0E1RDRDN0NDQzI1RDdFRjQ4MkE4MTNE
MDBEOUVFQ0UzMB4XDTIyMDIxODEzMzczNFoXDTI2MDMwMjEzMzczNFowGDEWMBQG
A1UEAwwNNjIwZmExMjItMmU0ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNW4avhw/OnZmrtVKo0Y3yWKUkGzuMZcgUkpUFVAPKh0mIKRNsceVr/pCg+
F8AWJhCFVW4CJnlkf0qkWkLI+We+v4iVZr61P03YbXz41B+zgjktQ/MTc2dMoKG+
/l0UMQ90HhrNWhwQ79i/lIuK6ugy7TrmdtnIw/SjSIDxqRQmN3o9rrgP5FYbuvja
ALDi4irPXaw3RJdEyJb0w+/RlSkussgpA1Tl7BRTCbKIMPV0m+u/OKV7o244mOnk
LLEyBW/ErD5m2pGQuPttrrPcAvwkg058RYFu8wfAa33IEZa/OKjBJz01SQJ9Q05z
9Pb/gi2HkyXJ57lLuqPzdUbIS/sCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBT5sIna
Q7wEf95xw0JbCvwfD/OlnjAfBgNVHSMEGDAWgBSli2MnpdTHzMJdfvSCqBPQDZ7s
4zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvODJDQTk5NUE3NDdGMTFFQzlDQjIzQTk3NUE0MEQ1NzcvcFl0ako2
WFV4OHpDWFg3MGdxZ1QwQTJlN09NLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
cFl0ako2WFV4OHpDWFg3MGdxZ1QwQTJlN09NLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTQ3NEEvODJDQTk5NUE3NDdGMTFFQzlDQjIzQTk3NUE0MEQ1
NzcvRUZCMzc0Qjg5MEJGMTFFQzhEQzJFQjc3NUE0MEQ1Nzcucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDyFjANBgkqhkiG9w0BAQsFAAOC
AQEAZ3AbdXX0jAHuY/xceJAqN5OfauNuP+YokNd1Bn8GluF1PHUob+c+oSIOhw08
vGVX7pjerKbvST4lOYreYW0jqUvLsM96Gxypj9VaUkrcreVgxbM/6Nj/buO36mgo
eWB1X03qHEKi8HJ8+bMXVqYOsKNdzVUS6a1oTW8EP60DmmEdHulArr+uzoOeDNR0
jmmOQgEPtNmmaD/pOLEiYxmYJJcaNjHYTpYOyKRk5I/ffprEIvye6hVeg5ToH+fw
vnexJqZobVsUDWmwB6RM6lpEkinq6itilnxcEiDx5X6RPfjKrZiR64hfIAbYAY9u
9bqMY9SRbK+1rAI7eW6YNeP92w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org