Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/82F1436CCCFA11EF98386986762E951A.roa
File:                     82F1436CCCFA11EF98386986762E951A.roa (raw, json)
Hash identifier:          WFETggbNMlIPJwzATTFNhe/4NNL01rzgeTk5fQnvT8o=
Subject key identifier:   60:05:16:E5:50:49:F8:5B:C9:0A:A5:11:1B:9B:AE:90:AC:E5:5E:1A
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       0599
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/82F1436CCCFA11EF98386986762E951A.roa
Signing time:             Tue 07 Jan 2025 13:22:58 +0000
ROA not before:           Tue 07 Jan 2025 13:22:54 +0000
ROA not after:            Wed 31 Dec 2025 13:22:54 +0000
asID:                     43260
IP address blocks:        102.36.162.0/24 maxlen: 24
                          102.218.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF
        Validity
            Not Before: Jan  7 13:22:54 2025 GMT
            Not After : Dec 31 13:22:54 2025 GMT
        Subject: CN=677d2ab2-a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:74:77:46:fb:0a:f1:68:0c:66:31:85:18:
                    d0:cc:b3:af:54:48:2d:76:35:73:74:e7:4d:23:c9:
                    08:78:54:52:8b:76:8a:54:83:01:e9:8e:a3:e3:0e:
                    96:b9:46:ed:e8:df:16:8e:19:50:20:3d:b6:8c:3d:
                    54:5f:34:90:5f:e2:52:db:b0:7a:d1:84:f9:5b:1a:
                    71:1b:0f:79:5f:81:d9:e5:bd:d4:44:82:bb:cb:dd:
                    e7:4e:bd:da:71:05:f8:a7:3c:a5:0c:e1:6d:3d:0a:
                    c5:4d:26:b6:4a:ee:fe:d7:e4:6f:86:2a:aa:39:68:
                    85:a0:b6:28:99:3b:63:61:e3:9a:45:5c:d4:62:c3:
                    ec:ed:25:f9:bd:79:2c:43:de:b6:e0:58:bf:6d:9c:
                    dd:b0:b5:38:2c:c1:db:6b:a5:b1:97:d4:22:34:ab:
                    bb:1c:0b:9c:22:64:fe:d2:ad:d1:3f:25:57:4b:83:
                    ff:79:fe:24:e1:cc:d6:22:87:2f:c2:a6:f8:a3:ac:
                    6b:b9:27:5c:92:b5:4e:c8:2f:18:fc:2f:e8:1b:6a:
                    b3:e3:4d:2a:87:88:be:5c:8f:d9:26:93:06:0c:d8:
                    81:fa:df:b3:ea:10:7e:78:e3:46:1a:ed:e2:ac:77:
                    c4:76:f4:fd:44:e9:80:f0:60:8d:ed:7a:cb:ab:74:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:16:E5:50:49:F8:5B:C9:0A:A5:11:1B:9B:AE:90:AC:E5:5E:1A
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/82F1436CCCFA11EF98386986762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.162.0/24
                  102.218.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:52:ca:33:32:a2:a2:e8:b9:ef:27:42:61:c9:0c:1c:16:7d:
         9c:30:c7:99:b3:46:4d:3c:ce:77:23:b5:af:6f:30:5b:81:20:
         e8:ba:09:d2:43:e7:90:bc:dc:3e:c2:d5:4d:93:3d:47:03:55:
         bd:40:27:80:00:55:b7:89:71:5f:f0:1f:01:90:e7:ff:c1:2e:
         83:1d:f9:64:49:5e:e7:4b:16:4c:c2:c1:49:b3:da:27:5b:a4:
         98:62:2e:4c:b8:1d:fd:a0:80:45:f0:fc:fe:d3:3b:25:01:41:
         69:1a:e5:0a:4c:c5:da:85:7e:34:e4:3f:b5:f1:33:c5:2f:1c:
         d8:d3:fd:ff:1a:2f:8d:ef:a7:07:5d:ed:44:0b:0a:8b:16:f4:
         b7:fd:80:d3:e2:1b:37:58:4e:ff:d6:47:96:68:e2:32:8c:0d:
         f1:6b:73:b8:d7:36:2a:ab:39:58:02:39:a1:37:ab:68:c4:e8:
         bf:31:f7:be:03:fe:be:74:7f:21:89:ab:8b:cf:1a:5a:8f:82:
         75:17:1c:aa:b6:c9:d5:21:65:ef:85:a8:ad:af:59:55:3f:67:
         73:da:4e:b8:30:44:06:68:36:19:84:20:2e:79:fe:a2:a3:67:
         06:6a:fd:ae:86:b5:15:9e:ec:70:b4:22:bc:d7:1c:ba:f8:22:
         57:9a:75:cb
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkMxOENBRjExMC8GA1UEBRMoNjNFMEJCNkIzNDMzQ0Q1RDcxQTQyQjAxNjlCREIw
MUUyMEU0NTU3RjAeFw0yNTAxMDcxMzIyNTRaFw0yNTEyMzExMzIyNTRaMBgxFjAU
BgNVBAMTDTY3N2QyYWIyLWEyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHUHR3RvsK8WgMZjGFGNDMs69USC12NXN0500jyQh4VFKLdopUgwHpjqPj
Dpa5Ru3o3xaOGVAgPbaMPVRfNJBf4lLbsHrRhPlbGnEbD3lfgdnlvdREgrvL3edO
vdpxBfinPKUM4W09CsVNJrZK7v7X5G+GKqo5aIWgtiiZO2Nh45pFXNRiw+ztJfm9
eSxD3rbgWL9tnN2wtTgswdtrpbGX1CI0q7scC5wiZP7SrdE/JVdLg/95/iThzNYi
hy/CpvijrGu5J1yStU7ILxj8L+gbarPjTSqHiL5cj9kmkwYM2IH637PqEH5440Ya
7eKsd8R29P1E6YDwYI3tesurdNSpAgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUYAUW
5VBJ+FvJCqURG5uukKzlXhowHwYDVR0jBBgwFoAUY+C7azQzzV1xpCsBab2wHiDk
VX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4QUVBMjI4L1ktQzdh
elF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQzdhelF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4
QUVBMjI4LzgyRjE0MzZDQ0NGQTExRUY5ODM4Njk4Njc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABmJKIDBABm2mUwDQYJKoZI
hvcNAQELBQADggEBALlSyjMyoqLoue8nQmHJDBwWfZwwx5mzRk08zncjta9vMFuB
IOi6CdJD55C83D7C1U2TPUcDVb1AJ4AAVbeJcV/wHwGQ5//BLoMd+WRJXudLFkzC
wUmz2idbpJhiLky4Hf2ggEXw/P7TOyUBQWka5QpMxdqFfjTkP7XxM8UvHNjT/f8a
L43vpwdd7UQLCosW9Lf9gNPiGzdYTv/WR5Zo4jKMDfFrc7jXNiqrOVgCOaE3q2jE
6L8x974D/r50fyGJq4vPGlqPgnUXHKq2ydUhZe+FqK2vWVU/Z3PaTrgwRAZoNhmE
IC55/qKjZwZq/a6GtRWe7HC0IrzXHLr4Ileadcs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:14 2025 by rpki-client