Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/1DD90238E49211ECA2A3F982F1222468.roa
File:                     1DD90238E49211ECA2A3F982F1222468.roa (raw, json)
Hash identifier:          su4ff2qSzpYK1KcToyzkj6eG4JKLZ4bohNc8SqEBl9w=
Subject key identifier:   FE:CC:40:F3:63:24:2D:BC:57:CA:CB:CB:EA:34:D5:7D:F1:FB:D1:3A
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0528
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/1DD90238E49211ECA2A3F982F1222468.roa
Signing time:             Sun 05 Jun 2022 05:41:16 +0000
ROA not before:           Sun 05 Jun 2022 05:41:11 +0000
ROA not after:            Mon 05 Jun 2023 05:41:11 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun  5 05:41:11 2022 GMT
            Not After : Jun  5 05:41:11 2023 GMT
        Subject: CN=629c41fc-51b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:1e:9e:db:4d:e3:3c:a2:7d:70:d3:96:76:
                    c3:7e:70:ee:7d:4a:82:00:d2:9e:bf:36:cd:3a:7a:
                    f2:7a:cd:8b:63:7a:a1:82:db:80:f2:c1:1b:93:ff:
                    a1:46:97:04:5d:22:19:55:6a:1f:05:65:f6:9f:e0:
                    08:55:57:ac:61:ab:d9:e2:06:cd:ff:f8:ff:70:75:
                    0c:5a:17:9a:ef:f5:ed:2e:58:8c:19:92:05:66:f8:
                    8a:9d:03:75:21:be:ab:2c:da:43:58:af:c7:10:a1:
                    0e:b2:24:50:bc:e1:78:80:41:ae:d8:6b:6e:ef:0a:
                    c7:17:5a:18:e5:98:15:34:20:e1:bb:77:05:5c:66:
                    da:04:a4:01:a3:16:25:bf:dc:05:50:68:02:b4:09:
                    b9:0a:6c:f3:53:05:2a:bb:f8:e5:54:4c:20:de:b8:
                    98:25:4b:5b:c2:bc:a0:30:53:e5:7f:27:cc:62:e9:
                    32:40:7e:9f:b0:72:f8:a5:8e:68:36:8c:9e:5a:bb:
                    a4:07:62:f0:de:f1:93:dd:3e:52:58:64:f6:69:4a:
                    47:c2:89:75:df:0e:bb:3e:45:46:8e:0b:e7:fe:9d:
                    69:68:ab:54:76:2f:ad:fe:0c:39:73:61:e2:a4:1d:
                    81:e5:86:41:83:16:d7:86:2c:a8:26:c8:9b:a6:d2:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CC:40:F3:63:24:2D:BC:57:CA:CB:CB:EA:34:D5:7D:F1:FB:D1:3A
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/1DD90238E49211ECA2A3F982F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:ef:98:e8:1b:0f:52:97:49:5b:c1:98:f3:c8:3d:20:34:c7:
         1b:2a:9c:62:7f:d7:5e:cf:8f:cc:f1:46:3a:01:54:41:5b:b4:
         95:c6:c6:03:06:dc:64:29:9d:55:6b:ce:e6:de:3d:76:7d:4d:
         c6:b4:1b:17:1d:70:6a:a0:5c:5e:0e:5e:93:22:5b:49:c5:e6:
         67:aa:5e:53:a6:33:56:ad:d9:b4:75:57:a9:d6:8d:0b:83:32:
         94:cc:c2:19:e4:5b:e8:28:56:ff:76:21:79:43:d3:51:5a:d7:
         7a:a9:1f:19:1c:a3:1b:e9:ca:d9:07:9a:0e:1d:74:f8:9b:14:
         ef:24:c0:75:1a:25:4f:eb:61:a1:bd:b6:58:9c:df:7f:c7:c7:
         9f:5d:b7:45:0d:9b:4c:52:d1:cc:3d:b3:21:48:fa:5f:55:b7:
         21:9c:53:f4:57:d0:b5:6a:f1:20:46:32:50:69:03:9f:e8:f2:
         1c:f8:a3:42:55:a1:9b:99:26:14:fb:25:0e:60:37:71:17:15:
         5c:3c:33:51:d8:91:81:97:1a:34:34:b7:f9:d7:a1:4a:65:3a:
         f4:ef:22:60:83:fd:25:03:9c:b6:b9:3f:ba:51:cf:7c:ee:d3:
         74:bd:ca:2b:17:ac:b9:f2:07:6d:a8:a0:f4:14:3a:33:13:e4:
         a5:98:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org