Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4D74F1283A1911EDBECD489BF1222468.roa
File:                     4D74F1283A1911EDBECD489BF1222468.roa (raw, json)
Hash identifier:          qK1Wq0zzuDgAVc5pfLC0xpw0yjjJEj/UPQuPkklVaZ0=
Subject key identifier:   44:06:7A:2D:2E:CF:85:86:F3:60:EB:22:A4:6C:90:AD:24:43:09:67
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0715
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4D74F1283A1911EDBECD489BF1222468.roa
Signing time:             Thu 22 Sep 2022 01:53:07 +0000
ROA not before:           Thu 22 Sep 2022 01:53:01 +0000
ROA not after:            Fri 22 Sep 2023 01:53:01 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep 22 01:53:01 2022 GMT
            Not After : Sep 22 01:53:01 2023 GMT
        Subject: CN=632bc003-b181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:69:27:01:99:50:4b:cc:22:72:86:07:e2:
                    11:d6:7f:f5:e0:d8:3c:6b:94:c0:92:2e:78:e0:e9:
                    6a:61:a3:1f:54:b2:c0:76:e0:64:07:7e:7a:84:36:
                    e0:1a:d4:b1:5b:43:2d:ff:ae:28:78:7d:2b:c6:27:
                    36:e7:75:65:5b:ab:b5:f4:90:38:10:c1:fa:eb:34:
                    17:c2:b0:ca:c5:a2:84:09:b0:ff:f4:36:2b:21:7d:
                    26:bc:a1:8e:e3:3b:a6:da:62:b2:60:1a:2c:21:00:
                    eb:fe:d4:09:83:99:c3:3e:4b:50:d7:18:ea:33:7c:
                    ac:4c:11:a6:fb:b1:c5:98:40:b0:44:f8:af:81:82:
                    4a:a5:7e:ab:a9:af:87:9d:62:88:d3:f8:a6:2c:45:
                    7e:7f:81:42:47:2f:ab:1f:8f:ec:7b:ce:f2:06:23:
                    3e:94:e1:da:1e:2c:82:17:84:69:3b:8b:5c:48:2d:
                    7a:2e:1b:a4:6f:20:3a:aa:45:6c:ef:e9:89:84:17:
                    46:a6:05:3a:23:21:d3:93:28:2d:3b:b1:51:21:4e:
                    5d:e6:ca:35:62:3f:7e:f0:4c:78:91:6f:07:c9:e6:
                    5f:89:4c:78:ce:80:8d:3f:c2:53:c6:15:8d:e0:48:
                    79:0e:8c:64:88:08:e7:cd:73:5c:a8:2e:a5:9e:27:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:06:7A:2D:2E:CF:85:86:F3:60:EB:22:A4:6C:90:AD:24:43:09:67
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4D74F1283A1911EDBECD489BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:57:53:60:70:be:b6:44:90:be:b3:7f:9a:43:26:09:89:
         5b:d8:1b:f4:e5:8d:fd:c0:fb:01:42:26:3e:d8:a8:2f:5b:19:
         46:a3:8d:d6:8f:88:1a:89:8c:56:91:2e:c4:d6:9a:1a:42:b5:
         70:ec:b7:69:d3:34:b9:f2:f9:26:e3:0c:b9:4d:78:59:de:35:
         77:2e:af:98:d0:92:0f:9c:d1:a0:9e:4c:be:0d:b2:13:25:29:
         3b:b3:52:fb:91:ae:8e:1e:a5:fd:3a:39:ac:13:7d:35:6f:bd:
         27:a2:36:7d:11:eb:87:70:7f:24:e3:e2:92:a3:cc:1b:1c:e2:
         00:75:eb:b0:0d:2a:4b:4c:ab:93:7b:a2:61:12:58:4e:ac:27:
         42:20:1d:7a:d6:94:7f:5c:bb:13:30:cc:7e:24:72:32:31:17:
         b2:1c:8f:fb:25:7d:aa:44:f2:e9:84:81:01:64:dc:e4:4b:1d:
         18:1d:b2:41:cd:9d:ca:17:8d:39:6e:f3:f9:17:90:75:7d:51:
         e9:3c:61:67:1d:19:c0:53:bb:d6:28:b7:40:fc:e8:7d:3c:fb:
         60:1a:37:ab:cb:2b:99:db:d1:34:3e:f1:47:fa:49:14:b3:d6:
         44:e4:19:13:89:86:65:5b:47:2f:da:24:27:c2:a9:6d:cd:29:
         fe:da:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org