Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2E7B9ED633E111EDBD8A34A3F1222468.roa
File:                     2E7B9ED633E111EDBD8A34A3F1222468.roa (raw, json)
Hash identifier:          jGBpFlCdu6r8pu6P6gy9sKvF8iBohxkdZsOGfQEosEI=
Subject key identifier:   BD:0E:87:80:0D:6D:E3:32:91:5E:A8:00:7E:A4:7F:3C:AC:CE:4F:B3
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       06E0
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2E7B9ED633E111EDBD8A34A3F1222468.roa
Signing time:             Wed 14 Sep 2022 03:56:16 +0000
ROA not before:           Wed 14 Sep 2022 03:56:10 +0000
ROA not after:            Thu 14 Sep 2023 03:56:10 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep 14 03:56:10 2022 GMT
            Not After : Sep 14 03:56:10 2023 GMT
        Subject: CN=632150e0-af57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:4a:a5:3b:44:43:85:93:7a:d3:c7:1a:be:
                    a4:ea:78:2d:5e:dc:dd:8f:04:8d:1a:b7:43:00:4d:
                    ef:cd:fe:3b:be:01:a3:25:9c:4f:ad:94:36:e7:5d:
                    d6:a3:f8:33:b3:88:3a:03:21:1a:ca:06:af:b7:5e:
                    95:98:9c:db:d1:e1:52:17:f0:2d:89:ce:4f:56:84:
                    00:8b:2d:d9:16:ec:10:ae:47:cf:96:b2:c0:12:3c:
                    50:f7:f0:df:87:37:5b:4e:4d:00:f2:d7:5a:8c:c4:
                    64:37:98:e2:dd:86:95:8d:63:06:46:b4:cd:28:70:
                    91:3e:59:32:ca:fc:4e:b3:65:75:b9:08:70:41:b3:
                    cf:80:92:e7:bb:9c:64:34:79:8b:63:4a:f7:1d:3b:
                    76:2a:d6:8f:7d:a8:5f:c9:58:ed:bd:f2:c7:7d:54:
                    d0:f4:7a:23:20:62:13:d4:8b:3e:79:81:a4:1c:0a:
                    f6:60:44:c2:91:80:e6:26:1c:15:eb:48:50:fe:03:
                    23:b6:6e:35:b2:b8:03:1d:3c:c3:6f:9e:4b:ed:0c:
                    a7:b9:58:3e:d5:5c:90:70:4f:a8:ae:cb:98:e0:a7:
                    20:95:b7:01:2f:46:77:82:f9:ce:12:ad:d9:09:12:
                    1b:44:4d:a8:16:9e:f1:d5:a6:2c:8e:8f:c9:7c:36:
                    ea:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:87:80:0D:6D:E3:32:91:5E:A8:00:7E:A4:7F:3C:AC:CE:4F:B3
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/2E7B9ED633E111EDBD8A34A3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:09:09:67:85:c0:93:ef:ac:58:45:24:e4:dd:01:8e:76:8c:
         35:4f:ce:ef:ea:f4:23:63:c5:2c:40:28:9e:63:f2:5a:3e:f9:
         51:88:b1:c3:87:55:bd:e5:05:6e:fe:5f:01:12:85:03:ff:68:
         c8:4d:33:06:7a:df:48:07:e1:cc:e0:0e:89:69:29:28:20:97:
         ba:12:05:26:be:c4:83:98:41:7c:29:b0:b7:8e:58:12:a0:6d:
         aa:75:c5:13:61:b2:08:4e:47:98:5a:d5:32:6b:7c:a8:b8:0a:
         12:3e:42:48:b3:fe:bf:9f:1a:1d:db:19:ef:a6:14:d0:fc:81:
         ff:18:83:9e:e4:38:ec:90:14:1d:c7:ba:76:9a:9c:c2:ab:bc:
         fb:b1:80:f3:eb:a2:35:74:ac:57:4a:60:e4:75:c0:c5:cd:54:
         84:6f:29:e4:2c:4f:6c:f2:22:44:98:57:9f:f9:53:e9:fe:f2:
         78:5b:ea:b8:d6:5d:9b:3e:11:a7:d6:de:18:24:a3:8b:28:09:
         1b:3d:f0:41:9c:de:f1:d6:4c:4e:96:e6:54:9d:41:9d:6f:0a:
         65:13:13:e8:fe:7b:e7:74:b4:2e:e8:01:25:88:46:1a:39:38:
         0b:39:d8:cd:e2:99:80:f2:83:a7:99:5d:7a:7b:87:68:66:1d:
         67:e7:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org