Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/109E0998D7E911ECA7BF37A2F1222468.roa
File:                     109E0998D7E911ECA7BF37A2F1222468.roa (raw, json)
Hash identifier:          cbC7YTjawPnk7vRE3wMqLjHzVP47Vi9UWZ5236wJbyM=
Subject key identifier:   93:66:DB:CA:DA:8A:1F:F7:5A:8A:59:83:04:9D:4C:77:BA:99:3C:67
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       04BC
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/109E0998D7E911ECA7BF37A2F1222468.roa
Signing time:             Fri 20 May 2022 03:00:55 +0000
ROA not before:           Fri 20 May 2022 03:00:50 +0000
ROA not after:            Sat 20 May 2023 03:00:50 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 20 03:00:50 2022 GMT
            Not After : May 20 03:00:50 2023 GMT
        Subject: CN=62870467-cb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:72:21:36:bf:ba:15:2b:eb:14:89:b8:8b:
                    c0:66:27:d7:e5:73:bc:17:17:b4:c8:9e:9a:20:08:
                    20:98:0f:02:75:05:90:3b:e8:1e:5d:f3:ad:c1:30:
                    e3:f0:8a:bf:e4:21:64:02:fe:a0:73:24:c9:a2:39:
                    22:bd:81:0f:1a:3a:fb:ea:b1:f3:44:3b:ff:a5:e7:
                    95:bd:f0:c7:58:d1:e9:3c:2e:1b:49:f5:89:90:1e:
                    d6:1e:b5:ba:b5:6d:08:37:14:09:92:7b:ca:d6:9e:
                    7f:cb:bd:eb:fb:ba:05:4c:b3:8f:e1:43:ce:c6:1d:
                    21:6b:9a:46:fa:a4:88:0a:6d:8a:3a:12:e8:b0:47:
                    47:cf:c0:e0:52:41:a2:eb:dd:42:67:4b:14:ea:7c:
                    95:9b:4e:9a:85:dd:21:84:bb:bc:6f:73:f2:35:ac:
                    70:69:64:cd:b5:c9:90:2b:84:c0:f7:15:04:ac:6c:
                    f2:c9:60:c4:39:49:a2:32:20:95:85:ff:ac:32:c4:
                    b9:da:42:a3:cd:0c:a3:33:4c:a6:e3:8c:a9:0e:18:
                    c4:9b:a0:b3:99:4f:52:5b:6d:8c:21:49:0d:2a:f5:
                    87:36:7b:e1:eb:8e:a1:9b:dc:97:78:19:f6:5d:c9:
                    99:94:ce:f0:f7:42:75:8c:30:32:c7:97:d1:53:53:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:66:DB:CA:DA:8A:1F:F7:5A:8A:59:83:04:9D:4C:77:BA:99:3C:67
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/109E0998D7E911ECA7BF37A2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:c4:47:a1:c6:d7:9f:dd:ac:96:f9:30:48:00:84:2d:30:36:
         7e:b5:a2:03:94:1d:92:f6:65:27:52:f0:0e:d7:40:4f:1a:54:
         7c:2a:5b:7a:de:c3:44:ab:4f:0e:52:b8:c8:9e:fb:bf:66:00:
         12:40:35:9b:c5:9d:d3:18:63:e9:4d:a4:4c:2a:cb:0c:97:9e:
         64:89:1f:81:00:ae:42:93:c8:e4:af:cf:bf:c0:b9:ee:c2:6f:
         12:9a:06:eb:24:e9:e1:70:f4:e7:b7:f2:15:38:7a:9b:35:2f:
         9b:e5:21:54:17:c0:ed:39:bd:4b:1a:27:78:a9:d4:44:6d:67:
         8f:1e:85:2d:ae:a3:08:c2:ee:0d:e5:95:19:29:3f:47:3d:f4:
         3a:66:f0:fd:db:a7:1e:57:df:9f:fa:8e:b9:5b:52:d2:75:62:
         cd:d9:a3:80:9f:30:23:91:6e:0e:23:0e:16:3a:f4:68:fb:10:
         02:0f:07:13:3d:a1:cd:57:f6:09:1d:1c:6b:93:66:fb:2d:e8:
         b1:52:8c:a0:6b:7b:68:55:21:d4:a0:7b:a5:5c:71:2a:37:04:
         25:2b:15:c5:d1:b8:a0:8b:84:13:25:dd:c5:2d:83:0a:8a:d8:
         1b:f8:74:0e:ad:c2:74:ae:72:f4:ee:02:84:32:cf:0f:5d:a2:
         9c:f4:c1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org