Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3EB0BDDC8EE011ECBEE1D57A5A40D577.roa
File:                     3EB0BDDC8EE011ECBEE1D57A5A40D577.roa (raw, json)
Hash identifier:          MzfPHiVoMMBPcpkPusuWYKsTGKit4vyk5GEp6eOcRPM=
Subject key identifier:   CE:08:14:75:B2:8A:EF:02:3E:8E:98:72:C0:51:BB:FB:7E:A6:67:47
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0298
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3EB0BDDC8EE011ECBEE1D57A5A40D577.roa
Signing time:             Wed 16 Feb 2022 04:23:52 +0000
ROA not before:           Wed 16 Feb 2022 04:23:47 +0000
ROA not after:            Thu 16 Feb 2023 04:23:47 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 16 04:23:47 2022 GMT
            Not After : Feb 16 04:23:47 2023 GMT
        Subject: CN=620c7c58-198f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:eb:dc:59:de:5b:30:b1:7b:e3:ba:c3:46:
                    58:82:a2:a7:e8:a9:db:66:21:68:1b:9d:95:36:3d:
                    34:9b:01:2e:0c:98:da:d2:6b:14:68:8a:7a:2d:b6:
                    41:f9:d8:b4:27:ab:b7:6e:09:a4:ac:2b:e5:c3:8e:
                    cc:12:8c:2d:aa:3e:53:f6:95:c9:56:57:7e:58:f0:
                    d1:f8:9f:18:fe:db:bb:8a:c2:d0:6c:a9:b6:47:0d:
                    45:e8:36:da:16:a1:bd:12:f2:87:fd:02:39:c4:5c:
                    07:c9:ac:f3:f9:e8:e2:11:1f:88:b0:59:1d:7a:bd:
                    e0:3f:37:84:df:c2:cf:ac:d4:91:df:c6:0d:39:49:
                    70:b2:d7:77:34:12:e9:0c:82:03:e6:29:f1:32:6e:
                    95:be:a6:ac:c6:f4:79:c1:b5:ef:27:8b:18:61:03:
                    2a:65:72:b5:ca:1e:61:e5:6c:0f:03:a7:94:f9:e2:
                    72:7c:cd:a7:98:7d:c6:c7:5b:fa:96:a6:b5:01:a7:
                    54:bc:90:ae:9b:fd:0d:0a:97:42:cb:a0:ac:e6:77:
                    e2:06:20:29:fa:0b:dd:a1:b5:df:c6:ee:39:3d:55:
                    be:de:a2:d6:c3:06:a7:b4:36:ff:8c:b2:32:f2:39:
                    9d:0f:e6:ce:e0:8d:97:bd:7a:67:f8:de:e0:d8:1e:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:14:75:B2:8A:EF:02:3E:8E:98:72:C0:51:BB:FB:7E:A6:67:47
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3EB0BDDC8EE011ECBEE1D57A5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:c1:86:3e:f6:9e:98:79:09:43:c4:b0:c1:88:92:55:a4:
         17:f4:1b:0c:b8:b5:06:2b:7a:0c:82:a2:92:cb:9f:f6:a7:53:
         1c:88:22:fd:bb:53:e1:99:2d:10:f6:76:4c:36:b4:2d:b7:ae:
         d1:20:46:24:63:4f:4e:dd:04:d0:cc:44:4c:61:29:eb:d9:a7:
         f9:6f:52:84:66:81:25:eb:8f:e4:a4:08:82:cc:d2:ea:57:d6:
         78:c3:18:7b:89:de:df:1f:3d:7b:4b:aa:45:3f:f2:b0:5d:98:
         a3:e4:e9:79:bb:9f:2f:02:97:6c:9e:76:09:a5:cb:df:b1:40:
         df:fb:7d:7e:eb:41:1f:13:34:82:7c:dd:49:69:15:1e:6b:29:
         bf:c3:b1:75:8b:d0:71:17:f6:dd:5e:e7:a7:68:2a:1d:c5:df:
         3a:11:7b:d3:8d:cc:b3:8c:26:79:24:d2:9f:5f:62:b1:b1:d3:
         37:74:6f:d6:19:f0:52:d9:b6:4c:25:09:4d:5d:0f:7d:c6:0e:
         33:ea:77:f4:e6:ff:7f:44:84:16:11:05:be:6a:0d:78:7a:a3:
         f8:55:92:49:22:41:0d:76:5b:60:1b:c6:f4:36:ad:63:36:57:
         c5:ae:c9:26:6a:81:19:5b:1e:78:b3:71:d1:64:a2:d0:ed:c0:
         88:3b:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org