Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/028591162F1211EDA942E7C5F1222468.roa
File:                     028591162F1211EDA942E7C5F1222468.roa (raw, json)
Hash identifier:          w2KRVJY1bMRw+pJyMToFi/aHCRgWhkB21A9gdfx54Oc=
Subject key identifier:   55:C6:5F:14:94:FB:FB:2F:9E:65:8E:88:55:BA:82:FB:A2:23:08:A7
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       06B5
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/028591162F1211EDA942E7C5F1222468.roa
Signing time:             Thu 08 Sep 2022 01:03:12 +0000
ROA not before:           Thu 08 Sep 2022 01:03:06 +0000
ROA not after:            Fri 08 Sep 2023 01:03:06 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep  8 01:03:06 2022 GMT
            Not After : Sep  8 01:03:06 2023 GMT
        Subject: CN=63193f50-afcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:a1:0e:d1:0b:dc:c3:23:8b:a7:ab:52:3b:
                    5a:ae:92:90:68:5c:ae:53:03:05:27:8b:85:9b:1e:
                    de:94:73:15:3c:1c:c0:12:6c:7a:3b:c2:03:d1:73:
                    74:46:d7:9c:d3:3d:7a:9c:ad:c0:d5:5c:26:46:d9:
                    8b:9f:5c:53:cb:8c:61:25:ba:3a:0b:8a:be:bf:89:
                    d0:21:44:93:54:df:48:8e:b6:b3:4a:f4:64:76:ef:
                    8b:07:f5:ae:2c:c7:85:8a:fb:26:aa:ed:b0:a2:96:
                    40:a8:81:96:21:f4:97:d1:be:1b:e4:fd:89:31:ed:
                    1d:13:4b:cf:f2:be:84:2c:fd:df:ad:2d:3e:4a:03:
                    16:b3:4c:19:45:e1:89:86:97:cc:22:fe:bd:93:74:
                    34:e5:44:d8:83:76:70:8d:39:02:a0:84:b5:10:33:
                    e8:1e:b3:32:6f:83:c5:bf:59:e7:ab:d7:5f:a6:c3:
                    53:f5:70:01:45:9e:3e:0d:65:1b:d6:10:79:21:f7:
                    ba:68:a0:fa:c9:94:25:b6:5f:f7:05:5a:98:2b:4d:
                    b7:c1:eb:f8:b4:57:2a:0f:06:94:6d:ca:5d:e3:b5:
                    3c:09:20:68:d8:be:52:17:71:67:85:44:f2:d5:f3:
                    09:15:a7:70:45:66:f7:4d:9b:fc:c6:46:63:82:0b:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C6:5F:14:94:FB:FB:2F:9E:65:8E:88:55:BA:82:FB:A2:23:08:A7
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/028591162F1211EDA942E7C5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:68:2c:ca:4c:aa:3a:b4:85:b5:52:72:34:90:76:c9:51:
         cb:ea:7c:ff:a5:40:d0:8f:3a:e0:a2:bf:2a:15:68:50:d8:ac:
         7a:d8:69:ab:39:7b:18:12:48:6a:db:b0:7a:0f:47:0c:2d:10:
         16:3a:9a:77:45:e6:e1:f0:e8:d5:d0:c7:98:37:c8:86:41:72:
         d3:92:9e:48:64:53:46:d9:4c:c3:f3:91:4b:ab:bf:fd:94:73:
         07:2d:22:1e:ec:5f:f6:0e:af:40:9a:36:a8:fc:f4:8c:7c:42:
         96:99:87:0a:70:df:b6:e1:71:d3:68:87:d8:89:b8:80:71:ed:
         fa:87:27:8e:98:ce:87:b0:b7:df:a2:0d:c4:b5:a0:37:3f:eb:
         50:54:b8:7a:cb:e0:e6:25:eb:4d:b7:b9:e3:df:ae:dc:2f:ca:
         d8:d7:3b:f6:2a:7c:45:4e:55:62:69:b2:fa:ce:58:26:fc:29:
         aa:6b:82:3d:0a:9b:03:9e:da:4d:d5:91:b9:34:61:8e:eb:c8:
         f9:b2:f4:72:b5:63:b3:55:04:07:a0:4d:b5:66:73:12:37:aa:
         7c:6c:b5:7e:42:c2:3f:d9:e3:70:5f:be:54:b2:1b:a4:2f:b0:
         49:f1:9d:6f:75:d9:d6:26:a2:85:ac:c0:a8:e9:cf:e0:e5:fd:
         3c:c2:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org