Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D22420A848711ECBFB37A8D5A40D577.roa
File:                     3D22420A848711ECBFB37A8D5A40D577.roa (raw, json)
Hash identifier:          NWZi59vmY2zXBvCYCpZp8qjVbX1QS4FGnO+UP7nueTU=
Subject key identifier:   09:97:28:FA:9A:80:73:26:82:BD:02:C8:50:B4:A0:E0:F5:7B:BB:22
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       023D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D22420A848711ECBFB37A8D5A40D577.roa
Signing time:             Thu 03 Feb 2022 00:21:32 +0000
ROA not before:           Thu 03 Feb 2022 00:00:28 +0000
ROA not after:            Fri 03 Feb 2023 00:00:28 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb  3 00:00:28 2022 GMT
            Not After : Feb  3 00:00:28 2023 GMT
        Subject: CN=61fb200c-4dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:dc:b2:22:ed:42:78:37:c9:75:19:93:a9:
                    60:d3:3c:30:b2:16:ae:c3:47:27:e5:cd:5d:14:73:
                    f4:76:77:d1:85:58:28:ed:a9:18:a1:a4:9b:ff:57:
                    bb:28:0e:ef:81:00:7d:74:bd:a4:8a:72:06:27:5f:
                    49:d4:0d:ed:f0:ed:6b:9e:21:02:07:cc:a9:71:b9:
                    81:92:a2:3f:9d:88:9a:8e:e6:e5:c0:68:1d:1f:f9:
                    83:66:05:e8:6f:9c:c6:2b:bf:09:26:20:48:2a:a8:
                    22:28:53:0c:0f:84:75:47:92:d3:cc:da:6c:af:cb:
                    d3:62:04:73:a1:94:ec:8e:9f:73:bc:39:8f:25:c0:
                    e6:a4:28:8e:cb:e0:4a:57:b5:96:ba:b4:17:7f:3f:
                    c2:c9:ad:4f:3b:e1:ac:ed:22:90:7e:cc:fa:42:13:
                    19:90:1c:2a:b0:5a:c2:49:a5:7d:35:7d:c5:d0:1a:
                    b2:0b:a0:f4:78:68:20:08:40:46:90:4f:f7:ae:bb:
                    75:44:8d:31:0f:0c:db:2c:ad:7f:fa:0a:f8:94:ea:
                    c6:3d:08:f6:26:47:f4:f1:b7:69:9c:04:c8:87:a5:
                    20:65:da:bd:b0:e6:66:f8:3a:70:66:03:26:8f:aa:
                    34:3c:0e:08:a4:04:97:b2:50:51:cb:f4:50:5e:e8:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:97:28:FA:9A:80:73:26:82:BD:02:C8:50:B4:A0:E0:F5:7B:BB:22
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D22420A848711ECBFB37A8D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:88:dc:81:36:63:8d:a9:d2:ad:ae:af:dc:49:1c:e6:99:df:
         2a:d1:97:f1:73:76:08:ba:84:0a:a3:64:63:f2:91:74:63:bc:
         d7:ba:42:12:3d:49:a0:f8:5d:a5:3c:0b:33:d3:60:1a:86:33:
         86:b0:95:51:9f:6b:70:38:43:70:db:da:6b:4d:75:7f:ff:e7:
         9c:3e:0a:65:26:f1:28:be:84:30:27:de:8e:b2:91:06:1a:09:
         0a:04:76:80:99:1e:8d:74:41:26:1f:7f:59:0d:62:b4:44:fd:
         cd:38:b8:99:86:b6:09:46:60:49:b4:11:95:31:3d:83:8b:d0:
         ae:24:fe:07:59:b6:e9:9c:96:af:6c:43:b0:f9:e9:d1:4e:21:
         ed:87:60:d0:68:6c:ad:74:a9:bb:80:79:12:fb:ae:39:dc:27:
         6e:af:02:ad:cd:25:cf:8a:e2:59:49:92:53:f7:1c:06:38:c1:
         8e:e9:f6:e0:cd:0c:81:90:f3:7b:e9:b9:08:ed:c4:bc:ea:bb:
         4b:8a:e0:3f:69:7d:fc:35:0f:f9:07:17:e5:86:0b:56:2a:fb:
         cb:00:3e:ac:b9:26:b7:ad:d4:f4:f8:be:4c:a6:5b:2c:99:f8:
         af:0c:a0:cc:a3:8d:33:23:63:47:81:03:54:8f:dd:62:6b:3c:
         1b:38:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org