Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4CD87966B62411ECBBCFEFCD5A40D577.roa
File:                     4CD87966B62411ECBBCFEFCD5A40D577.roa (raw, json)
Hash identifier:          8sZ5z1PRXCU4Ddm90pTOZmAnIpy19PD32iRf0t1p7Vw=
Subject key identifier:   41:1F:5C:C6:10:E0:62:AB:81:01:53:42:D4:DC:5B:C6:56:43:BE:D3
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       039C
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4CD87966B62411ECBBCFEFCD5A40D577.roa
Signing time:             Thu 07 Apr 2022 03:39:17 +0000
ROA not before:           Thu 07 Apr 2022 03:39:13 +0000
ROA not after:            Fri 07 Apr 2023 03:39:13 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr  7 03:39:13 2022 GMT
            Not After : Apr  7 03:39:13 2023 GMT
        Subject: CN=624e5ce5-70ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:00:1a:0f:1f:a9:19:2c:41:d5:dc:e5:e4:
                    3b:95:b0:23:27:f2:69:5b:9f:f6:f0:76:6c:47:4e:
                    c4:87:9a:02:37:70:2c:93:89:e1:40:cf:f9:63:18:
                    d2:ee:c3:eb:87:76:14:81:20:6d:2d:f9:2c:7e:4e:
                    31:94:8b:20:72:a9:03:7f:ef:0a:da:e5:3d:34:d9:
                    4c:d2:2a:1f:28:23:74:12:db:ee:44:bb:7f:3c:ed:
                    67:e8:ce:90:3b:32:05:ae:7e:0b:58:ff:f1:1e:38:
                    3c:5c:44:5d:7c:6f:98:4d:13:6f:11:7e:73:a3:22:
                    2f:33:aa:4d:ee:14:a3:4a:d8:63:15:82:fc:14:13:
                    97:30:ac:90:62:5c:09:b3:3c:64:83:d1:da:65:13:
                    c7:3e:74:6d:a0:0f:79:c2:9c:ac:13:9f:d1:a1:99:
                    2d:ff:41:67:c1:83:dc:31:98:79:9f:4b:fe:ff:b7:
                    9d:d1:4f:66:49:a9:70:6f:45:9a:3d:a4:9e:a2:31:
                    91:7a:b5:2f:2b:60:5c:49:c6:c5:b8:fb:b0:e0:91:
                    ea:95:ce:6a:8e:3c:1b:34:f4:fe:3c:11:3b:dd:a5:
                    f6:46:0f:94:9d:b4:85:48:9e:59:e1:0e:40:d4:75:
                    51:49:13:ea:a3:9a:0b:28:5f:d0:25:32:83:28:81:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:5C:C6:10:E0:62:AB:81:01:53:42:D4:DC:5B:C6:56:43:BE:D3
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4CD87966B62411ECBBCFEFCD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:e8:42:b3:f0:91:13:d1:b8:28:78:0b:91:22:31:2d:9b:
         91:13:b8:4e:aa:f6:bd:12:04:8f:b9:8f:8d:56:cc:63:9c:a9:
         ad:33:11:79:21:59:d7:37:4a:87:7c:7f:f2:51:47:d8:1a:f2:
         73:16:df:19:27:a9:26:3f:00:3f:5f:5a:48:93:39:a9:fe:af:
         74:92:fc:bf:1a:c2:70:f6:b6:7e:39:9e:d2:a4:d6:c1:dc:f2:
         72:fc:f4:a6:98:51:ba:1c:f5:a1:8c:af:91:c9:5e:ed:1e:7c:
         ee:d8:31:fe:d8:50:0e:c6:36:5f:e2:71:23:d4:b9:b2:23:7e:
         cd:67:4a:15:2f:8e:52:f3:5c:c5:05:a2:37:8b:a7:8c:07:40:
         c8:be:6d:77:e3:a6:ff:64:87:7d:e7:11:10:c0:f2:01:4c:0f:
         07:da:78:9e:36:7d:f8:64:ac:72:cf:ab:3e:4c:ac:95:07:55:
         05:ef:38:5c:22:db:c2:85:00:da:da:41:8d:13:4c:46:85:c9:
         34:da:09:9e:7f:5c:47:25:ec:ce:7e:a1:4b:f0:83:61:04:93:
         10:bf:65:0c:2a:bd:29:3b:ec:12:6b:a7:ce:4a:0c:55:4a:81:
         a8:38:c4:6d:e0:16:e3:a4:15:1b:0b:e5:ce:9f:18:d0:f5:74:
         92:10:19:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org