Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/08079E74D1B411ECB665FC9DF1222468.roa
File:                     08079E74D1B411ECB665FC9DF1222468.roa (raw, json)
Hash identifier:          ulGuI24Dkdq4ebss0M+xb14IgBhiAGyS67z/9qThDms=
Subject key identifier:   64:48:F1:02:D3:D9:0D:4D:5D:79:FA:50:20:2C:67:22:A8:92:7E:73
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       048A
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/08079E74D1B411ECB665FC9DF1222468.roa
Signing time:             Thu 12 May 2022 05:26:10 +0000
ROA not before:           Thu 12 May 2022 05:26:06 +0000
ROA not after:            Fri 12 May 2023 05:26:06 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 12 05:26:06 2022 GMT
            Not After : May 12 05:26:06 2023 GMT
        Subject: CN=627c9a72-5ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:75:b1:49:be:42:d7:fc:2b:c0:03:c8:0f:
                    73:42:f1:7f:33:9b:77:2f:84:e2:70:4a:67:9a:b3:
                    4f:00:40:7c:15:e8:d4:67:e0:f6:01:2d:33:02:97:
                    12:c8:21:e0:fe:11:05:d8:b4:8d:7c:b5:e2:c9:dc:
                    a9:d1:a3:9f:68:1a:2e:05:cf:13:6b:2f:e7:8a:8c:
                    3c:fb:1e:23:a9:18:41:51:bd:5d:82:be:b3:06:0a:
                    fa:e8:06:95:14:78:42:98:a5:a7:e6:50:54:13:e0:
                    31:4c:57:c6:fe:25:79:a0:cb:1a:4b:91:a6:b3:40:
                    62:16:75:89:7d:86:8c:b9:16:32:f1:20:45:a5:eb:
                    13:84:51:4a:e3:68:f5:0f:69:73:86:5c:3e:f5:43:
                    18:b9:fe:f3:2a:03:1f:7a:f4:9c:02:68:10:91:0c:
                    05:a8:6a:f2:09:f0:ff:52:af:52:50:f1:e6:5a:17:
                    64:c7:75:c1:e8:40:0d:f7:d5:e2:06:85:6f:66:e2:
                    d7:08:7a:6b:80:c1:60:ba:8b:f5:5a:a9:41:14:46:
                    ae:a8:5c:45:7b:0b:c3:19:c5:25:76:cd:dd:39:eb:
                    41:b1:fe:92:11:aa:19:4c:e6:96:e4:d0:03:5f:ef:
                    23:57:b4:30:57:ca:8d:62:f4:95:99:10:0c:5c:1e:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:F1:02:D3:D9:0D:4D:5D:79:FA:50:20:2C:67:22:A8:92:7E:73
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/08079E74D1B411ECB665FC9DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:49:b3:83:c0:09:be:2b:3c:31:ae:19:fa:e6:ff:6c:5c:7e:
         c5:9c:60:16:40:db:6e:85:0a:cf:9f:42:ea:81:b1:a5:bc:3e:
         dc:45:5a:d8:6f:dc:fb:d9:97:d6:90:33:5d:3e:46:47:2d:34:
         98:5d:e2:d1:0f:5b:89:9b:f6:3c:dc:1d:8a:12:3f:e8:d1:be:
         8c:09:83:30:bc:d6:2a:98:73:39:c1:ad:dd:ae:44:34:49:17:
         cd:c0:00:04:d4:32:4e:f5:27:93:0c:58:a1:e7:5b:b6:dc:fd:
         26:56:eb:c6:84:f2:19:5a:23:68:0e:80:3b:25:ca:56:69:2e:
         90:bc:9a:cd:55:0e:45:90:f6:33:32:d7:40:c3:07:a9:60:ea:
         71:74:93:5e:c7:f8:5e:32:e4:76:52:7b:92:47:dc:70:48:4a:
         dd:9d:7e:74:16:c0:d5:7e:3d:a8:99:0a:b3:6b:77:31:3b:6c:
         92:cf:2a:0e:2e:dc:31:1b:ea:99:05:38:87:53:34:67:ef:45:
         1d:1c:2f:87:9f:02:3f:1d:a0:8e:89:93:25:68:77:18:88:9b:
         b5:07:0f:d6:74:fe:7d:51:43:b2:99:86:b2:f1:1f:5a:71:d8:
         4b:9f:ea:09:a1:85:c8:e5:30:07:8c:f9:52:df:28:53:b1:5b:
         b3:f3:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org