Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3702679AE92911EC9F7B719BF1222468.roa
File:                     3702679AE92911EC9F7B719BF1222468.roa (raw, json)
Hash identifier:          k2p4dFrhFQTqXQRCjllo92EqSYg6MO9BFwyuaz4BEn4=
Subject key identifier:   00:1E:F0:07:FD:00:DB:D7:CA:A7:7F:22:7A:88:42:CB:88:ED:D0:01
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0552
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3702679AE92911EC9F7B719BF1222468.roa
Signing time:             Sat 11 Jun 2022 01:52:57 +0000
ROA not before:           Sat 11 Jun 2022 01:52:52 +0000
ROA not after:            Sun 11 Jun 2023 01:52:52 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 11 01:52:52 2022 GMT
            Not After : Jun 11 01:52:52 2023 GMT
        Subject: CN=62a3f579-b54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:d2:44:60:17:4e:e1:93:eb:c3:af:95:ac:
                    07:29:7d:b4:cc:8a:f2:6b:83:c8:4f:3a:a1:80:c3:
                    bc:13:b7:c2:2e:fa:8e:da:7b:fb:d2:44:d5:30:e1:
                    1b:ef:9e:34:9d:d2:90:e1:98:b5:0d:11:f9:8f:8d:
                    7a:8a:3b:d7:7f:31:00:b9:5c:57:77:48:ef:98:6e:
                    17:a6:f5:61:6b:c3:cf:6e:dd:3d:37:66:7c:4c:aa:
                    3f:c3:30:1f:ea:38:1d:d6:ac:fd:8d:4b:13:7f:59:
                    90:ba:16:ed:e3:bb:1b:36:5b:25:0f:6f:21:39:ce:
                    6f:f2:a0:e4:25:22:10:b5:b3:d1:c1:b6:8b:ba:5e:
                    b6:3a:7f:ea:00:74:6d:e1:07:de:18:7e:65:68:3c:
                    69:96:92:14:fe:84:d7:9e:b0:3f:24:39:96:6c:05:
                    90:0f:81:ae:df:86:16:2d:39:65:90:db:30:43:f5:
                    09:8f:a4:09:7c:76:37:87:0c:55:06:9e:c8:9e:e6:
                    67:d0:f9:29:82:4b:70:c1:ed:87:4b:33:44:1c:2d:
                    e9:f4:34:6d:00:40:6d:71:b7:35:c6:51:36:36:dc:
                    58:08:9b:21:66:8f:d8:64:f6:d6:78:99:60:d7:ce:
                    9a:91:9f:7c:2a:8f:92:dc:16:fc:29:c2:85:de:c9:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1E:F0:07:FD:00:DB:D7:CA:A7:7F:22:7A:88:42:CB:88:ED:D0:01
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3702679AE92911EC9F7B719BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:49:d2:16:ec:b5:ea:70:5d:b4:38:a8:cf:9e:91:67:c0:
         de:6c:97:22:bb:e2:5c:dd:3f:2f:a9:57:d0:26:b5:2d:45:69:
         7a:80:44:14:24:4c:89:f4:5c:15:c3:98:60:3b:3b:68:73:4b:
         b6:5d:97:b9:09:d0:6f:6b:d0:af:b8:9f:2a:3a:c1:f6:c3:5f:
         73:67:b5:79:25:64:7d:b0:a8:45:9b:c6:0c:4f:34:84:0e:c5:
         c7:af:47:1b:2f:a9:3b:8e:da:f2:37:37:4d:1f:55:67:bf:bd:
         18:1f:de:28:6d:7d:1f:77:e0:9f:12:77:d7:08:ca:7b:1e:2d:
         02:1e:f9:c2:f8:8b:bc:ca:92:6f:55:bd:7e:da:af:6c:55:33:
         a2:43:8c:da:7e:28:7e:30:c7:c2:5e:11:03:97:d9:45:76:20:
         67:3b:1d:63:49:b8:9b:b9:e4:0d:f3:9e:e7:10:15:ac:cd:21:
         c5:98:ac:78:fd:51:cd:1c:b8:a0:a9:ce:8b:2e:e8:26:d8:4b:
         b0:6c:a7:ac:ef:61:81:23:de:8f:1a:d3:af:e5:6c:f6:68:a4:
         44:aa:16:93:4a:42:93:7f:51:14:ef:31:68:ea:ad:20:cc:81:
         90:6a:e5:2c:e0:de:0e:b2:1b:39:35:73:c1:41:15:90:23:36:
         e2:d5:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org