Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/33E0419EE2F911ECBA0C6FF1F1222468.roa
File:                     33E0419EE2F911ECBA0C6FF1F1222468.roa (raw, json)
Hash identifier:          2dtwlLsIAQGu6JWtRyITHiqQLWKC6FZeUS0ft2QUIOI=
Subject key identifier:   68:38:48:C8:DA:6B:26:93:48:C8:FD:1A:BF:BB:3E:70:D7:1A:CC:0E
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       051B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/33E0419EE2F911ECBA0C6FF1F1222468.roa
Signing time:             Fri 03 Jun 2022 04:54:09 +0000
ROA not before:           Fri 03 Jun 2022 04:54:04 +0000
ROA not after:            Sat 03 Jun 2023 04:54:04 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun  3 04:54:04 2022 GMT
            Not After : Jun  3 04:54:04 2023 GMT
        Subject: CN=629993f1-b5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:19:fe:6f:3d:e9:7b:f4:a3:59:07:f3:21:
                    d1:96:82:61:cd:14:08:da:59:0b:14:1c:ba:bf:d5:
                    6b:12:d1:a8:c5:66:89:ff:d8:f0:ab:43:cb:54:34:
                    dc:31:be:bc:d2:64:7c:5f:0c:f3:9d:ae:5b:74:f2:
                    cc:ac:2d:76:f2:8f:65:1e:ff:a9:4d:4f:9a:c9:e9:
                    7f:c8:31:00:32:bb:3f:27:a1:8b:ba:c4:b4:06:94:
                    d8:d0:97:04:f6:cb:4f:b3:ba:69:b5:41:4f:a3:a1:
                    6e:3d:69:bd:e7:ca:68:6f:12:9a:bb:a9:2e:69:70:
                    bb:e7:12:a8:44:11:ef:8e:f7:8e:50:72:e3:bc:dd:
                    0a:f9:eb:23:0e:cb:0f:27:86:6c:55:5c:21:47:0d:
                    1e:81:da:5a:73:cd:58:14:e5:19:1f:7a:b5:b6:79:
                    5e:b0:f9:d0:d9:b2:78:32:8e:c8:23:b9:d6:e2:06:
                    6f:c7:ab:48:ad:4b:01:a1:ae:c6:63:62:88:ef:b6:
                    6b:a7:ee:ad:dc:a6:3c:83:01:d8:75:b5:69:2f:55:
                    8c:1d:b0:9b:50:e0:fe:65:54:69:b4:f6:b9:36:e9:
                    9d:d3:36:08:d3:a3:33:90:44:4f:39:e8:d7:76:b3:
                    60:82:30:fa:05:0e:a5:58:0f:d6:9d:19:4d:62:a6:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:38:48:C8:DA:6B:26:93:48:C8:FD:1A:BF:BB:3E:70:D7:1A:CC:0E
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/33E0419EE2F911ECBA0C6FF1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:81:d9:cc:80:33:1b:ce:99:7c:9b:09:f2:ae:4f:bb:11:
         f2:6f:47:25:c8:0c:d0:0c:88:9b:1c:08:b7:22:fa:56:c5:10:
         81:0c:65:37:84:93:67:02:b0:73:e3:ac:bf:d0:41:b9:bb:f3:
         92:6b:59:66:ff:b3:27:c8:89:3a:ea:75:03:c8:c3:c1:b4:48:
         ea:80:77:6e:83:b7:20:b6:bf:38:b2:13:4f:d0:e0:f7:32:32:
         ca:7b:00:2e:24:83:36:18:9e:62:5b:29:21:f0:4c:35:91:95:
         a2:8c:b7:ce:1b:ed:5c:a6:c8:b3:35:c8:f4:b4:71:46:2e:f0:
         05:25:be:02:a8:4b:ff:00:be:a6:fd:03:07:29:09:ad:d1:3a:
         d1:41:51:33:87:ac:3a:bd:01:e7:d6:15:96:e6:2f:e9:e9:66:
         2b:19:be:d4:e6:71:fa:c0:16:cf:21:05:5f:22:77:85:bb:2a:
         b0:b6:9f:c8:d5:cc:ef:ae:66:59:a9:2d:61:3f:61:86:8c:a1:
         8c:88:9f:80:3d:d6:a4:fe:98:3f:c5:89:b7:78:b8:6e:5d:80:
         e1:a0:bc:29:29:c9:79:aa:ab:06:1e:b5:5d:5f:68:a3:f6:04:
         43:d0:03:ee:af:30:07:ae:a6:04:ca:bd:69:9e:30:02:ff:2c:
         ad:a7:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org