Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/FCE1D7189F9411EC8334EA8C5A40D577.roa
File:                     FCE1D7189F9411EC8334EA8C5A40D577.roa (raw, json)
Hash identifier:          8wwFw8K8xKqDUle0mnKwTOzMEWskLwGKxM1TU51ijZo=
Subject key identifier:   28:73:4C:72:E6:D8:52:01:9F:76:AD:49:B9:20:CB:F3:C1:3C:C0:C4
Certificate issuer:       /CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
Certificate serial:       4E
Authority key identifier: A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/FCE1D7189F9411EC8334EA8C5A40D577.roa
Signing time:             Wed 09 Mar 2022 10:37:59 +0000
ROA not before:           Wed 09 Mar 2022 10:37:55 +0000
ROA not after:            Fri 07 Mar 2025 10:37:55 +0000
asID:                     29286
IP address blocks:        160.242.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAR/serialNumber=A58B6327A5D4C7CCC25D7EF482A813D00D9EECE3
        Validity
            Not Before: Mar  9 10:37:55 2022 GMT
            Not After : Mar  7 10:37:55 2025 GMT
        Subject: CN=62288387-aca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:2e:ac:00:5c:9f:a0:7a:a2:a9:c5:95:6b:
                    fb:84:2e:7e:e1:9f:35:cf:67:ab:74:89:8b:47:fd:
                    19:45:a3:dc:20:65:d6:c1:50:2c:00:56:28:8c:ca:
                    f3:db:a4:d1:fe:c2:f1:0d:c9:5d:dd:29:09:dd:41:
                    82:fc:cb:6b:f9:0b:e0:2d:96:19:dd:79:69:f1:22:
                    93:42:ff:37:46:d9:82:0f:9e:04:b9:46:3e:11:10:
                    36:b1:15:e6:70:00:51:f7:94:0e:ee:3e:2f:df:44:
                    32:0d:fa:f4:a3:9f:75:bc:95:33:0c:a8:ed:9e:36:
                    c1:84:57:83:4a:f1:ad:b1:b0:84:e6:72:9b:f5:f9:
                    8d:3e:c8:3c:a8:c4:13:1c:9b:11:f3:46:2f:24:ed:
                    0e:3e:64:6e:d1:eb:17:30:20:09:bc:2f:e8:da:eb:
                    26:cb:d1:2c:3c:d6:69:35:dd:fa:62:c6:c2:f4:ce:
                    2b:2e:08:0e:91:0b:d2:28:a6:4f:ce:23:7a:3c:3f:
                    2e:6d:06:19:d1:b5:dd:44:43:14:07:ae:a0:28:23:
                    2a:9f:fc:af:a2:85:83:b1:43:65:d3:d6:f4:81:88:
                    01:f8:52:c7:19:ec:3c:4b:80:be:1a:8e:b8:3b:e7:
                    90:73:52:ac:3f:5c:7c:e0:c1:7e:5e:86:59:3d:bb:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:73:4C:72:E6:D8:52:01:9F:76:AD:49:B9:20:CB:F3:C1:3C:C0:C4
            X509v3 Authority Key Identifier:
                keyid:A5:8B:63:27:A5:D4:C7:CC:C2:5D:7E:F4:82:A8:13:D0:0D:9E:EC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/pYtjJ6XUx8zCXX70gqgT0A2e7OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pYtjJ6XUx8zCXX70gqgT0A2e7OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/82CA995A747F11EC9CB23A975A40D577/FCE1D7189F9411EC8334EA8C5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:c0:79:8d:1e:f1:2d:f8:bd:d9:45:d0:a0:29:0f:63:b6:
         19:52:9f:86:7c:cb:2c:b7:45:e9:09:5f:c2:98:a8:2e:92:73:
         b9:19:12:79:81:a4:d1:27:54:ea:7b:71:13:3c:ca:de:66:59:
         b8:bd:ea:ce:de:b7:19:a6:54:46:9b:dd:ed:df:90:80:fa:09:
         dd:50:d8:eb:4d:62:57:5c:bb:94:9e:6c:4f:df:c7:9b:54:f3:
         08:36:bb:14:11:b2:c8:99:09:1c:91:2a:36:0a:ff:71:41:83:
         bd:93:f8:f9:18:42:ef:14:0a:a3:d5:af:77:ff:78:b7:d2:d4:
         c6:c5:ec:b5:8a:2a:01:19:02:4c:85:e4:58:d2:e7:07:6a:80:
         f9:c1:aa:56:f8:7a:5e:73:e6:4a:e2:74:1c:28:99:1c:82:0a:
         4b:e2:bc:23:08:e7:3f:44:de:35:ba:1e:47:e8:6c:c7:f1:04:
         9e:92:f1:ac:81:b6:c6:30:40:82:98:db:ad:a1:e4:3f:14:33:
         09:0d:56:80:84:ed:e7:de:06:85:09:eb:a1:98:56:d4:17:b0:
         ba:29:2f:42:6b:8c:0f:df:61:5a:db:56:cb:af:da:94:9e:80:
         7f:d6:0f:c2:65:b9:9f:93:8b:4b:d0:2e:d8:5a:e8:5c:a6:14:
         be:ce:e5:37
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBTjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFSMTEwLwYDVQQFEyhBNThCNjMyN0E1RDRDN0NDQzI1RDdFRjQ4MkE4MTNE
MDBEOUVFQ0UzMB4XDTIyMDMwOTEwMzc1NVoXDTI1MDMwNzEwMzc1NVowGDEWMBQG
A1UEAwwNNjIyODgzODctYWNhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3FLqwAXJ+geqKpxZVr+4QufuGfNc9nq3SJi0f9GUWj3CBl1sFQLABWKIzK
89uk0f7C8Q3JXd0pCd1BgvzLa/kL4C2WGd15afEik0L/N0bZgg+eBLlGPhEQNrEV
5nAAUfeUDu4+L99EMg369KOfdbyVMwyo7Z42wYRXg0rxrbGwhOZym/X5jT7IPKjE
ExybEfNGLyTtDj5kbtHrFzAgCbwv6NrrJsvRLDzWaTXd+mLGwvTOKy4IDpEL0iim
T84jejw/Lm0GGdG13URDFAeuoCgjKp/8r6KFg7FDZdPW9IGIAfhSxxnsPEuAvhqO
uDvnkHNSrD9cfODBfl6GWT27dkcCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBQoc0xy
5thSAZ92rUm5IMvzwTzAxDAfBgNVHSMEGDAWgBSli2MnpdTHzMJdfvSCqBPQDZ7s
4zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvODJDQTk5NUE3NDdGMTFFQzlDQjIzQTk3NUE0MEQ1NzcvcFl0ako2
WFV4OHpDWFg3MGdxZ1QwQTJlN09NLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
cFl0ako2WFV4OHpDWFg3MGdxZ1QwQTJlN09NLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTQ3NEEvODJDQTk5NUE3NDdGMTFFQzlDQjIzQTk3NUE0MEQ1
NzcvRkNFMUQ3MTg5Rjk0MTFFQzgzMzRFQThDNUE0MEQ1Nzcucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDyRTANBgkqhkiG9w0BAQsFAAOC
AQEAQtLAeY0e8S34vdlF0KApD2O2GVKfhnzLLLdF6QlfwpioLpJzuRkSeYGk0SdU
6ntxEzzK3mZZuL3qzt63GaZURpvd7d+QgPoJ3VDY601iV1y7lJ5sT9/Hm1TzCDa7
FBGyyJkJHJEqNgr/cUGDvZP4+RhC7xQKo9Wvd/94t9LUxsXstYoqARkCTIXkWNLn
B2qA+cGqVvh6XnPmSuJ0HCiZHIIKS+K8IwjnP0TeNboeR+hsx/EEnpLxrIG2xjBA
gpjbraHkPxQzCQ1WgITt594GhQnroZhW1BewuikvQmuMD99hWttWy6/alJ6Af9YP
wmW5n5OLS9Au2FroXKYUvs7lNw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org