Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/00896BB0F04E11EC88116FCBF1222468.roa
File:                     00896BB0F04E11EC88116FCBF1222468.roa (raw, json)
Hash identifier:          RiaPz41EUzOS3EsCdxdMgJMETRyeOkTr+uUISIXir2s=
Subject key identifier:   B6:77:6A:37:44:89:F5:1E:36:D0:55:E6:23:21:72:1D:E8:E5:30:22
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0591
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/00896BB0F04E11EC88116FCBF1222468.roa
Signing time:             Mon 20 Jun 2022 04:03:55 +0000
ROA not before:           Mon 20 Jun 2022 04:03:50 +0000
ROA not after:            Tue 20 Jun 2023 04:03:50 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 20 04:03:50 2022 GMT
            Not After : Jun 20 04:03:50 2023 GMT
        Subject: CN=62aff1ab-a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:30:5d:b0:0c:f4:c7:47:ed:53:83:4a:45:
                    14:ae:4e:36:b9:3b:db:2d:c6:79:2b:03:96:9a:aa:
                    ca:da:e1:24:b5:7d:d0:a5:55:b4:65:27:29:f0:37:
                    dc:6a:0e:60:d3:e6:eb:1a:3e:4d:52:8c:62:70:dc:
                    ed:60:7f:88:5c:de:70:c3:b9:2c:df:dd:4d:2b:18:
                    a5:8d:0d:b4:b9:4c:b2:25:97:4d:ee:0c:14:32:90:
                    db:24:9a:2f:62:d8:db:34:fb:a0:d8:20:85:25:ee:
                    7e:58:08:56:15:92:71:f7:c9:0d:d8:4e:64:1f:f0:
                    f7:9b:18:92:2b:ee:91:8e:0a:bc:ad:20:d9:38:2e:
                    51:1f:8f:55:69:03:1a:ef:aa:28:b7:0b:da:6e:33:
                    74:1f:99:6b:23:5e:8a:93:1b:56:78:eb:4b:38:fd:
                    99:17:da:36:94:dc:2e:ae:8e:d8:be:8f:b4:21:98:
                    ec:6a:73:46:63:c0:bc:84:8c:38:1a:88:a7:cf:6e:
                    fa:f9:09:92:a8:b4:cc:86:3a:28:ea:c5:34:d2:1d:
                    0e:59:93:36:b5:06:c9:1b:de:e6:94:45:72:a7:ea:
                    f2:77:9d:3d:a1:97:42:e9:df:b2:84:d5:ca:06:5b:
                    e6:15:cd:a7:bf:17:62:ee:40:24:82:7d:d3:d4:e1:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:77:6A:37:44:89:F5:1E:36:D0:55:E6:23:21:72:1D:E8:E5:30:22
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/00896BB0F04E11EC88116FCBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:7b:7b:09:35:db:2a:5e:6d:62:41:c8:30:6c:9e:87:49:
         63:d3:b1:14:eb:b0:1a:a7:33:3b:d6:2a:20:5e:d9:e0:b3:ca:
         6c:da:3b:64:81:e9:71:9a:8d:d0:6c:a3:d5:25:1e:4c:4f:d2:
         72:1c:ac:13:88:43:17:f4:d8:f5:95:42:ae:9f:5e:ae:e2:1a:
         b2:d1:6c:1e:70:1f:41:2f:92:19:a3:d8:93:d2:ac:c8:f0:88:
         09:5c:35:ce:0b:89:d5:8f:6a:b7:a7:8a:39:f7:ce:0b:2b:a4:
         bc:6f:c0:c3:0c:0a:c9:35:89:59:fd:b9:75:ea:02:c9:fa:c7:
         9f:9b:ca:39:2d:c2:b7:41:b3:c0:d0:77:12:93:a1:4b:e7:4f:
         79:57:45:3c:99:5b:0b:94:5b:88:9d:40:0d:00:69:29:7b:5b:
         fa:55:fc:d2:ba:d5:e1:c6:b5:a3:68:ff:53:0e:88:69:18:0e:
         ab:2b:ce:ba:f8:f8:d6:ec:c8:fa:ca:cb:18:ee:cc:2f:97:91:
         b0:10:98:39:5f:b3:01:70:c7:60:3b:33:2d:fc:11:ce:ac:43:
         24:12:83:63:34:45:58:d7:9a:36:0a:66:41:84:da:22:05:82:
         05:6a:4b:0c:4a:0c:36:2c:53:6c:b5:fd:d3:59:6a:16:5b:30:
         59:6e:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org