Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/19C761BAC2D411EC85721FD1F1222468.roa
File:                     19C761BAC2D411EC85721FD1F1222468.roa (raw, json)
Hash identifier:          oGjJ7+eANmHwKix1CnjuYNvqnTdDB1Yn+ASRNaT+gLo=
Subject key identifier:   DC:CA:03:9C:A2:DE:38:A4:3A:39:D6:F0:2A:97:51:51:A2:EE:88:F3
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0406
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/19C761BAC2D411EC85721FD1F1222468.roa
Signing time:             Sat 23 Apr 2022 07:07:56 +0000
ROA not before:           Sat 23 Apr 2022 07:07:52 +0000
ROA not after:            Sun 23 Apr 2023 07:07:52 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr 23 07:07:52 2022 GMT
            Not After : Apr 23 07:07:52 2023 GMT
        Subject: CN=6263a5cc-287a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:0d:a7:79:13:a6:f0:81:97:d2:f9:da:4d:
                    ef:b9:e6:93:8d:eb:0b:27:15:fa:7c:a6:ef:55:da:
                    03:e3:bb:9e:c7:d9:4a:65:40:3b:bb:9a:7d:6a:0d:
                    16:19:ef:b4:98:f7:dc:32:9d:d3:f2:23:c2:86:53:
                    74:12:8d:d0:23:a3:0f:6a:0b:53:d8:7d:d4:42:25:
                    5e:78:8f:9c:f8:24:bb:3b:0e:b8:af:b2:8c:f6:bf:
                    f9:a9:c8:69:40:c1:2c:41:99:90:8e:ca:c1:3f:55:
                    81:01:5f:70:19:e2:eb:c2:44:ac:ab:51:df:67:42:
                    91:10:88:c2:79:1a:a0:cb:5f:49:cd:ce:aa:11:d1:
                    87:4c:41:8b:83:15:6b:78:29:f3:cd:31:20:f2:cd:
                    ab:1b:f6:3b:87:d4:bf:b9:41:48:9c:3c:c6:dd:45:
                    49:c3:8e:b3:72:62:69:92:a2:96:bb:80:ec:d2:20:
                    3d:1a:18:75:02:ed:2a:2b:8c:cd:27:c1:9e:02:cb:
                    74:51:f9:ad:46:c8:cd:74:95:70:1b:ff:4a:0a:fa:
                    3c:c7:11:6a:66:19:8e:3a:8f:32:c7:66:95:99:69:
                    0d:78:fe:71:63:88:23:75:bf:49:51:a0:37:33:e6:
                    89:95:75:4d:1a:8b:fb:4c:b1:9a:80:d5:04:02:6d:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CA:03:9C:A2:DE:38:A4:3A:39:D6:F0:2A:97:51:51:A2:EE:88:F3
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/19C761BAC2D411EC85721FD1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:6b:90:f7:5f:7a:40:72:4c:ca:82:25:e1:6e:42:c2:c5:
         9f:99:a3:35:b8:11:c8:ee:21:c7:a4:50:2b:be:7b:0f:72:3a:
         17:16:6d:82:a4:d9:f8:71:0a:3a:bc:c6:1a:6d:db:cb:bb:e7:
         11:f7:e0:c8:e3:2f:66:8c:4f:67:ec:f3:de:77:b0:f5:17:e8:
         6f:7b:3f:ad:72:ce:fe:bd:d4:62:d3:3c:1a:ca:3e:d8:f6:df:
         d7:9e:c5:2c:0f:8e:fb:df:17:34:de:03:6a:67:b5:f2:29:a8:
         7b:a9:50:41:23:fa:3d:c3:c3:3f:f5:fa:38:e4:46:31:39:2f:
         8b:26:49:4a:f8:7c:63:2a:cd:05:0e:8b:6b:2b:fe:de:91:d5:
         a5:22:83:04:2e:17:86:ae:89:b2:9a:43:82:06:f2:5e:ec:6a:
         4e:30:67:14:20:80:ca:c7:56:c2:a2:17:8e:32:6e:fa:a2:e6:
         fe:74:36:5e:e3:b3:64:02:3c:00:9f:b7:37:5f:72:a1:d7:03:
         7e:aa:4a:de:9c:74:5d:9d:06:53:e0:a7:ef:a7:a7:0b:50:16:
         69:77:5d:3e:5a:76:a8:8a:e5:12:42:0c:15:b2:64:67:29:fb:
         c6:ca:0b:43:1f:e4:2a:09:d2:02:fa:df:39:59:df:83:03:8a:
         b1:b6:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org