Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0618F85A86EC11ECB892B29B5A40D577.roa
File:                     0618F85A86EC11ECB892B29B5A40D577.roa (raw, json)
Hash identifier:          5+u64fAjdOQtBBsysr0U3MK/tryzi+90lUJvLnJ6YT0=
Subject key identifier:   01:DD:E1:4F:58:95:EB:A9:E4:91:18:5A:F8:2C:55:95:99:34:4E:0F
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0252
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0618F85A86EC11ECB892B29B5A40D577.roa
Signing time:             Sun 06 Feb 2022 01:28:02 +0000
ROA not before:           Sun 06 Feb 2022 01:27:57 +0000
ROA not after:            Mon 06 Feb 2023 01:27:57 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb  6 01:27:57 2022 GMT
            Not After : Feb  6 01:27:57 2023 GMT
        Subject: CN=61ff2421-b95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:76:91:79:0a:4e:6b:08:9e:ea:8a:ff:71:
                    38:1c:b4:81:1a:5e:58:24:92:22:45:71:82:0c:e3:
                    44:26:8c:70:a5:17:47:da:f4:76:af:83:6e:38:47:
                    e1:0a:7b:f4:da:c7:5f:ec:76:2e:0d:69:81:74:ff:
                    bd:8d:80:b4:5d:d9:7c:6d:45:b6:a8:0c:4f:14:b6:
                    52:f9:25:71:d2:cc:06:98:53:96:41:68:cd:bf:40:
                    a8:9d:a3:f5:63:68:b3:f2:3f:a4:15:cc:4a:36:17:
                    71:f0:ef:b7:4b:21:22:52:29:a7:53:ac:fd:a8:10:
                    c6:fd:40:d5:b2:09:9a:df:af:32:e5:77:60:2d:9d:
                    97:1f:f1:99:cb:6a:5c:ae:59:e1:e6:96:e8:24:d4:
                    77:3c:5f:1b:6d:f0:74:07:87:ea:c8:3a:77:97:f9:
                    c0:ea:03:c6:32:25:b8:27:28:7d:b7:68:9d:b7:82:
                    b0:c4:49:5e:4f:f4:b7:20:b8:3f:21:45:2c:7d:04:
                    cd:ed:d4:e7:1b:da:73:a7:13:cf:8c:63:3f:d2:3e:
                    e7:1a:2a:c0:33:23:ee:1e:18:0f:5f:1b:c8:12:84:
                    34:6f:7b:4a:28:f7:75:a6:c6:86:f0:48:2b:38:2a:
                    b9:d2:a3:9d:1c:c7:8b:84:dc:5a:e9:43:b3:72:ff:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:E1:4F:58:95:EB:A9:E4:91:18:5A:F8:2C:55:95:99:34:4E:0F
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/0618F85A86EC11ECB892B29B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         da:13:be:b1:7c:e2:44:0a:b0:3f:38:aa:de:62:95:54:c9:72:
         4c:aa:c5:bc:d6:5c:42:74:00:5d:a3:66:33:48:2b:90:51:36:
         be:1d:59:22:42:c3:cb:29:cb:30:e7:ba:57:bf:0f:e8:ae:ad:
         32:a5:79:b5:c7:f8:fa:6e:bc:6d:f9:21:67:2f:0c:6c:6b:f2:
         c9:b0:be:49:8c:9a:00:cb:a5:5e:8b:5a:63:90:00:9a:80:83:
         dc:22:1e:8d:81:27:f0:85:23:06:21:20:03:61:30:7d:8d:2a:
         06:33:9e:2e:6c:44:34:2d:6b:11:02:de:30:b6:27:ad:f4:7c:
         2d:8a:02:4a:38:9b:15:f2:1e:27:da:5f:7c:17:bf:3d:dd:c9:
         fa:58:60:ea:fb:49:0b:de:a2:c3:74:9a:cd:c4:a5:9c:4b:8b:
         ac:ed:6f:95:c8:07:bd:eb:6a:d1:d3:0e:f2:e8:1b:e1:8f:3f:
         cf:fc:dd:bc:1a:11:05:a8:1b:f8:19:c1:31:25:6c:fb:6f:fc:
         bc:b3:b6:0a:4f:38:ac:32:5f:d9:17:a2:10:a1:3c:ea:eb:e4:
         99:6c:b2:d0:14:ce:0c:23:e5:e5:49:2d:e7:68:ac:e9:0d:f7:
         96:c2:fd:29:7f:45:0c:65:fd:f0:af:40:b5:a5:78:2e:a8:8f:
         b6:7d:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org