Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4C897D6C8C8411ECBCE07D8E5A40D577.roa
File:                     4C897D6C8C8411ECBCE07D8E5A40D577.roa (raw, json)
Hash identifier:          EO8o6rYb0a9+stFNc3vXFlt1vWne7BjOwnkU2z9nzEw=
Subject key identifier:   EC:E9:73:0B:98:CC:02:E6:43:46:04:41:AD:F3:14:0E:66:63:BC:8E
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0283
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4C897D6C8C8411ECBCE07D8E5A40D577.roa
Signing time:             Sun 13 Feb 2022 04:20:39 +0000
ROA not before:           Sun 13 Feb 2022 04:20:35 +0000
ROA not after:            Mon 13 Feb 2023 04:20:35 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 13 04:20:35 2022 GMT
            Not After : Feb 13 04:20:35 2023 GMT
        Subject: CN=62088717-d724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:fa:ef:08:14:1e:5f:be:1a:4d:b4:7e:7d:
                    1b:0c:a4:d5:31:5a:23:49:57:dc:b2:e6:37:61:22:
                    83:2f:35:f8:f7:9e:79:ba:70:6b:05:7b:89:89:db:
                    e6:94:ab:23:b7:29:4d:34:6a:80:e6:de:8d:e3:fa:
                    16:65:27:0e:11:53:f9:ce:63:c7:69:df:f8:66:ce:
                    6c:39:f6:97:4e:53:31:91:c0:8a:75:c5:91:21:e9:
                    79:85:69:cc:7b:70:f0:c6:04:e3:91:a6:cb:73:3d:
                    95:1d:64:01:58:10:3e:10:42:90:a8:65:c3:8d:74:
                    62:08:e9:95:ba:c2:d5:e2:a1:4c:72:80:40:0b:f7:
                    b4:39:0b:98:9d:9c:60:d0:1e:b4:a1:ec:d9:2f:66:
                    15:bc:bb:74:4b:29:21:4a:c8:d3:6d:b8:5a:07:88:
                    f8:f1:ec:bc:8e:22:96:c2:e0:70:3d:e7:f4:14:0b:
                    92:dd:68:b6:12:2a:fe:ff:81:f0:c4:55:0a:13:46:
                    65:e5:0c:30:10:68:a5:61:36:de:a2:65:e2:25:d1:
                    66:98:fc:1a:34:37:dd:ae:73:95:17:16:1d:10:40:
                    13:79:6c:3b:a0:f5:2d:29:44:c1:7a:24:16:1d:87:
                    58:f9:dc:2e:6f:77:d4:04:de:ce:22:c2:d6:cd:d7:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:73:0B:98:CC:02:E6:43:46:04:41:AD:F3:14:0E:66:63:BC:8E
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4C897D6C8C8411ECBCE07D8E5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:f6:21:9b:9c:37:53:a0:be:ed:3f:10:82:7f:fd:78:37:f1:
         05:a9:a7:9a:66:0e:81:27:19:04:35:6c:99:5a:61:d8:e8:39:
         2c:9b:d6:7c:cd:9c:18:c7:c3:9e:d0:2a:5e:f2:61:ae:0c:71:
         92:1d:c1:1f:e7:9c:86:c9:9e:28:dd:27:f7:2d:3f:f7:9b:83:
         5e:ab:4f:28:42:8e:64:c4:64:50:85:c8:b6:0e:a9:e4:66:df:
         bb:8a:78:dd:d8:c2:5c:35:ef:c9:7b:9b:3d:08:53:e9:b1:06:
         32:47:98:9e:e7:50:8b:df:08:3d:2e:d6:fc:bf:61:72:09:df:
         b6:a3:4a:37:bb:49:8a:af:e5:49:12:df:1a:99:89:33:7b:fa:
         d2:37:c3:bb:44:81:02:a1:0e:ac:e0:12:28:75:38:01:51:0e:
         a0:c8:04:e0:d7:72:8b:c1:f3:37:ad:43:79:10:82:4c:01:5b:
         70:d5:04:89:f7:17:fb:50:50:5b:ca:14:48:ea:d0:31:0a:ee:
         d2:06:92:ee:16:ee:eb:90:15:a5:26:77:e0:b4:52:4d:19:79:
         b0:cc:48:a8:3f:68:ba:f9:56:3e:77:d4:48:2a:5c:b3:b3:79:
         66:19:49:1d:4a:63:e0:df:26:2f:9f:54:c9:47:12:4c:4d:cf:
         8e:5e:7d:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMTMwNDIwMzVaFw0yMzAyMTMwNDIwMzVaMBgxFjAU
BgNVBAMMDTYyMDg4NzE3LWQ3MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Y/rvCBQeX74aTbR+fRsMpNUxWiNJV9yy5jdhIoMvNfj3nnm6cGsFe4mJ
2+aUqyO3KU00aoDm3o3j+hZlJw4RU/nOY8dp3/hmzmw59pdOUzGRwIp1xZEh6XmF
acx7cPDGBOORpstzPZUdZAFYED4QQpCoZcONdGII6ZW6wtXioUxygEAL97Q5C5id
nGDQHrSh7NkvZhW8u3RLKSFKyNNtuFoHiPjx7LyOIpbC4HA95/QUC5LdaLYSKv7/
gfDEVQoTRmXlDDAQaKVhNt6iZeIl0WaY/Bo0N92uc5UXFh0QQBN5bDug9S0pRMF6
JBYdh1j53C5vd9QE3s4iwtbN11ELAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7Olz
C5jMAuZDRgRBrfMUDmZjvI4wHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzRDODk3RDZDOEM4NDExRUNCQ0UwN0Q4RTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAFj2IZucN1Ogvu0/EIJ//Xg38QWpp5pmDoEnGQQ1bJlaYdjoOSyb1nzN
nBjHw57QKl7yYa4McZIdwR/nnIbJnijdJ/ctP/ebg16rTyhCjmTEZFCFyLYOqeRm
37uKeN3Ywlw178l7mz0IU+mxBjJHmJ7nUIvfCD0u1vy/YXIJ37ajSje7SYqv5UkS
3xqZiTN7+tI3w7tEgQKhDqzgEih1OAFRDqDIBODXcovB8zetQ3kQgkwBW3DVBIn3
F/tQUFvKFEjq0DEK7tIGku4W7uuQFaUmd+C0Uk0ZebDMSKg/aLr5Vj531EgqXLOz
eWYZSR1KY+DfJi+fVMlHEkxNz45efQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org