Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/47F779DCA8C911ECAE7E2F965A40D577.roa
File:                     47F779DCA8C911ECAE7E2F965A40D577.roa (raw, json)
Hash identifier:          3UkrJbz0CVcCHjDUh9ejLvZbAwoNWmkr6yalNyjnams=
Subject key identifier:   C3:AA:E9:BD:82:9D:C5:9D:B3:5F:4F:1A:E4:E1:76:FD:9B:B1:6F:1B
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0329
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/47F779DCA8C911ECAE7E2F965A40D577.roa
Signing time:             Mon 21 Mar 2022 03:44:59 +0000
ROA not before:           Mon 21 Mar 2022 03:44:54 +0000
ROA not after:            Tue 21 Mar 2023 03:44:54 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 21 03:44:54 2022 GMT
            Not After : Mar 21 03:44:54 2023 GMT
        Subject: CN=6237f4bb-b20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:05:33:28:55:00:45:41:ee:49:78:d4:05:
                    36:5d:02:4e:24:15:4f:bc:e7:0c:3f:cb:c5:0d:5b:
                    6d:d6:95:9c:8e:a3:ab:57:ff:9b:92:19:0b:14:75:
                    78:97:ea:b1:bc:04:6a:23:e3:b6:cd:93:72:6d:bf:
                    7f:ac:3b:6e:e5:16:a5:10:bc:b2:23:d3:43:20:6b:
                    5c:22:67:77:e9:3f:a9:10:b6:7c:f0:0d:db:15:a4:
                    9d:44:4e:a3:f7:c3:ce:c7:b2:0c:0a:e9:b5:ee:9e:
                    4b:18:13:83:d4:0f:50:78:39:bd:7c:7e:b7:30:7d:
                    dc:dd:83:94:fb:e4:da:34:65:0f:c9:48:82:73:f8:
                    e1:21:69:9d:11:d9:7e:ef:24:bb:13:db:c2:00:8e:
                    fe:d4:cf:18:05:7e:02:16:a0:96:22:c8:0e:f6:8e:
                    e7:8c:c8:f9:9d:7a:e5:75:fb:ca:08:63:47:ba:af:
                    a8:73:cf:77:23:4a:dd:23:ec:d8:83:4b:8b:82:f2:
                    35:20:bb:26:a4:d9:cd:93:51:94:0c:7b:a5:e4:79:
                    f1:06:cf:21:e3:ea:7b:59:80:7d:1a:95:d4:27:44:
                    95:95:2a:18:86:f6:89:ba:f6:ff:6c:73:ee:85:1b:
                    6c:2c:84:fd:05:07:e4:a3:61:cf:b8:20:0c:9d:bb:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AA:E9:BD:82:9D:C5:9D:B3:5F:4F:1A:E4:E1:76:FD:9B:B1:6F:1B
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/47F779DCA8C911ECAE7E2F965A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:55:a1:b4:e7:49:58:42:bb:0a:84:bf:91:88:a5:21:71:
         4f:6f:0d:af:9f:2d:79:59:81:42:df:71:c7:11:0e:8c:ec:ea:
         65:2b:4a:76:d6:66:25:b3:83:92:cd:24:42:12:3f:9c:17:5d:
         5f:12:f6:be:dd:68:c3:73:a5:55:f4:97:17:30:1c:44:9c:1a:
         81:74:27:92:1d:6d:b7:ac:be:3f:8c:c0:69:bc:fd:c9:ac:df:
         d7:6e:04:d7:71:c8:7a:11:07:06:6b:3f:0a:21:4e:d9:05:2b:
         8f:84:d1:80:8f:2a:fb:93:9a:3a:9f:84:29:54:66:2c:d6:ae:
         1a:e2:08:f6:4a:77:96:bf:01:f3:88:bc:c4:db:27:e8:4e:cf:
         16:62:b2:0d:f0:7e:8e:fc:79:63:2d:5c:26:15:61:a4:5c:7f:
         47:7e:c2:a6:8e:bb:14:01:01:fc:bd:f2:69:f1:bc:41:4a:0e:
         96:ea:0d:b0:87:02:6d:9a:f5:57:64:26:11:06:5c:c4:24:33:
         b9:fd:fb:fc:ef:d1:97:86:84:c3:a1:68:a5:a2:8f:e7:6a:22:
         28:d5:3d:80:30:6f:d8:4a:8c:52:44:3a:0c:56:08:cb:3f:d9:
         46:64:c6:69:e2:cd:05:81:77:82:01:09:f9:e8:e7:82:91:1d:
         96:51:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org