Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/096EC4462CC111ED943AC69DF1222468.roa
File:                     096EC4462CC111ED943AC69DF1222468.roa (raw, json)
Hash identifier:          5MG+Vq1aHxqeZm0J4zS3LhOtSjgn2lG/pYerZ/aTSh0=
Subject key identifier:   33:62:B7:D2:14:39:7D:AD:0C:51:57:BF:95:84:04:D2:11:C6:AE:13
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       06A1
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/096EC4462CC111ED943AC69DF1222468.roa
Signing time:             Mon 05 Sep 2022 02:18:32 +0000
ROA not before:           Mon 05 Sep 2022 02:18:25 +0000
ROA not after:            Tue 05 Sep 2023 02:18:25 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep  5 02:18:25 2022 GMT
            Not After : Sep  5 02:18:25 2023 GMT
        Subject: CN=63155c78-9017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:3b:fc:61:c7:b1:b4:c9:38:3c:c4:b8:1d:
                    bf:83:cc:b4:2f:96:ed:20:0b:c3:07:f0:08:ad:7d:
                    1c:28:46:29:bd:3d:ed:90:5d:ad:4b:e3:b6:24:6d:
                    2a:ce:e2:80:e9:d0:08:38:d5:a6:f0:46:ed:92:df:
                    30:25:c2:91:4a:25:41:48:6f:1c:f1:66:78:22:c7:
                    7a:a3:28:fd:76:56:02:9c:16:a4:58:94:a4:5e:0f:
                    f2:10:b4:23:05:ac:d6:ed:f7:1c:58:f9:52:10:b5:
                    4f:31:1a:50:ea:74:c8:3e:9f:d8:f5:2d:9c:fb:57:
                    cd:f3:d4:c8:5a:21:98:91:9b:c4:cd:6c:1e:b5:da:
                    48:34:e8:21:77:40:76:0a:20:0f:cc:aa:e8:88:02:
                    b6:a7:0b:b4:c7:0c:9a:4b:5b:d5:11:76:6f:37:3e:
                    de:97:0e:7e:1b:3e:2b:fb:78:82:5a:9c:65:b0:fd:
                    69:2e:1f:35:59:45:c0:05:52:09:04:9d:36:3e:2e:
                    c9:0e:91:3f:28:34:38:93:76:55:44:00:2f:14:02:
                    be:7b:cc:31:57:32:bd:88:1d:cc:1f:2b:ea:68:e1:
                    64:58:28:b7:3e:7c:b6:a1:35:35:44:32:f7:79:7c:
                    c0:78:5b:30:36:cb:ae:68:20:02:2f:ee:d9:cc:10:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:B7:D2:14:39:7D:AD:0C:51:57:BF:95:84:04:D2:11:C6:AE:13
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/096EC4462CC111ED943AC69DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:2e:d1:48:f3:86:bb:7d:7f:8d:7d:74:8e:58:1c:a3:47:81:
         eb:36:7c:64:92:62:15:7b:52:ff:6a:ca:f5:1f:7c:cc:6d:68:
         0b:38:f0:e3:ae:98:91:03:a5:16:4f:a7:0b:a2:fc:f1:e8:0d:
         7e:a2:76:60:cc:9e:3f:7b:52:87:b1:21:c6:c4:0b:5e:83:14:
         1f:2c:ac:bb:8a:94:78:d5:8e:d9:7b:78:15:64:ad:81:ed:21:
         a4:07:57:e2:3f:db:4c:46:71:9e:58:21:af:33:19:ea:7d:7a:
         46:1a:e1:2a:ff:1e:05:e8:51:90:c2:47:93:d0:d9:36:2e:53:
         e1:79:1d:88:c4:19:ff:7e:48:24:49:f1:63:07:ae:4e:86:4a:
         f9:81:fc:da:b7:fe:4f:25:4e:c0:af:5d:1a:76:9d:7c:6a:b1:
         4a:5c:1d:d4:41:e8:56:d3:97:77:98:84:8b:67:06:d9:9b:0f:
         0f:c8:94:12:b6:48:b7:0a:d2:b9:f4:e0:7f:cd:1b:e1:e6:51:
         a9:60:5f:3d:51:7f:71:b0:64:66:3b:94:d7:5e:e0:36:49:0e:
         8c:12:38:f2:57:ac:76:ea:8c:91:5f:f5:1d:94:29:51:58:4b:
         02:9b:ba:cc:8c:a2:c9:80:5d:f6:b3:d3:eb:3d:15:76:b7:1b:
         cc:2a:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org