Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/03C62F50FC2611ECBDD853F0F1222468.roa
File:                     03C62F50FC2611ECBDD853F0F1222468.roa (raw, json)
Hash identifier:          L/bnw8IWWb7f+86DzQnhsr60OP4Ie+2PcAR5POOexp0=
Subject key identifier:   AE:DA:38:7B:FB:89:CF:5F:E3:BB:54:79:F0:C9:7D:88:1C:1A:8E:4D
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       05F5
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/03C62F50FC2611ECBDD853F0F1222468.roa
Signing time:             Tue 05 Jul 2022 05:47:54 +0000
ROA not before:           Tue 05 Jul 2022 05:47:49 +0000
ROA not after:            Wed 05 Jul 2023 05:47:49 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jul  5 05:47:49 2022 GMT
            Not After : Jul  5 05:47:49 2023 GMT
        Subject: CN=62c3d08a-104f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:0e:98:08:4e:2c:9c:89:25:e0:1b:a2:33:
                    a3:05:5d:cf:79:e6:55:50:a1:1a:9c:14:2e:93:59:
                    6c:e9:90:2c:66:e2:a2:b5:c0:c5:f0:98:e9:48:31:
                    d6:e2:8d:50:cb:1a:60:db:ce:76:ec:ef:11:cd:8e:
                    79:b3:85:a0:48:94:32:2c:98:2b:a1:e7:92:87:06:
                    d3:7b:32:0f:92:c8:fe:51:05:9c:9b:0d:9b:48:4b:
                    18:be:bf:fe:27:31:82:83:67:f8:65:88:8c:f5:92:
                    a4:d8:fd:61:f3:d9:ae:1b:e6:db:ac:62:97:63:92:
                    4f:34:1b:4c:62:d5:c3:e4:51:d4:47:c6:95:47:63:
                    4f:81:1a:37:a4:8d:f6:10:65:1f:bf:5c:90:83:ba:
                    6c:84:06:52:4f:bb:f9:29:c8:30:f7:f3:04:75:ce:
                    31:c5:93:ba:0f:63:dc:d6:9e:a4:2d:01:e9:58:2a:
                    ed:db:16:89:fc:c3:f4:e7:77:6f:77:f3:2a:89:39:
                    88:88:8a:34:25:e0:e4:ce:b6:4b:a0:db:09:08:40:
                    89:da:c4:f5:95:8c:82:c1:ae:fa:c7:93:2c:ee:88:
                    1c:d5:f1:3e:7a:68:da:da:2a:74:0c:35:13:e2:6d:
                    d3:55:78:e9:2a:19:22:37:8b:be:e5:f7:62:5f:d4:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DA:38:7B:FB:89:CF:5F:E3:BB:54:79:F0:C9:7D:88:1C:1A:8E:4D
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/03C62F50FC2611ECBDD853F0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:6d:d1:00:98:50:47:0c:14:9c:3f:78:9b:17:75:2b:e2:
         0c:4b:24:2a:1b:cc:67:71:32:5c:8d:19:b2:7b:5b:79:1c:f5:
         cf:c5:1d:bc:ee:ba:46:cf:5a:7c:ba:a7:e6:eb:c4:35:c5:b5:
         cb:6a:41:4a:b4:0b:29:4f:40:0c:a9:34:2a:70:19:58:b7:8f:
         95:d0:85:4e:6e:4c:88:90:73:73:bb:76:20:cb:e6:fe:71:da:
         ea:37:93:ba:e5:5a:4e:42:3b:7d:16:7f:fb:a3:b1:c5:c4:78:
         d6:a6:a4:45:91:a8:93:e6:92:a0:9e:6f:37:d6:46:7a:63:9e:
         1d:a6:09:7c:cc:58:ac:28:f1:e7:e8:17:26:3a:7e:24:34:75:
         b4:04:ac:71:51:68:e3:79:7c:d1:e7:1e:a5:14:14:d6:ce:7c:
         f5:fe:9e:41:d1:ab:f8:3a:aa:2f:e6:e5:85:44:1c:63:90:da:
         c4:e3:f4:92:0c:8a:59:62:b0:85:f7:6d:51:4c:fb:f8:46:eb:
         ab:a2:df:89:f0:00:53:72:29:0c:24:51:cf:85:e4:5c:7a:74:
         0b:ee:12:0b:d8:6d:80:d7:12:19:90:ce:a9:0d:17:75:3e:dd:
         35:23:df:f8:4d:86:09:1d:3c:cd:38:ca:19:89:85:88:dd:8a:
         54:5a:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org