Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5EE036F4823911ECAA69C9D15A40D577.roa
File:                     5EE036F4823911ECAA69C9D15A40D577.roa (raw, json)
Hash identifier:          sORGgLeYbyue4TFHGPd30oMf68KIxsNDJwDzvc8IDJw=
Subject key identifier:   09:B9:D1:DD:AC:9E:F0:BC:0D:02:91:C9:04:72:78:30:29:C0:16:E9
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       022A
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5EE036F4823911ECAA69C9D15A40D577.roa
Signing time:             Mon 31 Jan 2022 01:59:06 +0000
ROA not before:           Mon 31 Jan 2022 01:59:01 +0000
ROA not after:            Tue 31 Jan 2023 01:59:01 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jan 31 01:59:01 2022 GMT
            Not After : Jan 31 01:59:01 2023 GMT
        Subject: CN=61f7426a-f79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:6e:ad:6e:b0:db:f0:2f:12:98:d9:ab:f4:
                    db:e9:de:72:2d:b0:c5:63:5b:03:be:1f:60:22:e6:
                    96:92:da:25:45:9e:00:82:23:cd:4d:2b:f2:07:16:
                    a9:f9:a0:44:f1:f3:8a:d5:5b:76:dc:fa:2a:3c:78:
                    2e:21:e6:cf:50:af:b7:36:17:b8:6f:45:cf:42:19:
                    04:56:e7:26:ea:dd:2c:a7:30:71:d2:39:77:b8:38:
                    7f:20:31:df:f5:38:f5:a6:93:c6:57:72:a1:27:45:
                    41:51:44:56:50:a6:92:17:21:db:44:cd:7e:11:94:
                    95:45:58:e4:bd:4c:8f:52:06:40:be:a4:e6:0e:b8:
                    35:a8:4a:24:73:ba:74:25:ae:1f:84:c1:3d:f3:1a:
                    18:aa:fc:2c:4c:78:ba:21:cc:72:e3:73:d1:67:4e:
                    6f:94:8a:83:61:b1:99:55:d2:60:e9:3c:b1:9b:48:
                    f9:cb:b7:c0:22:13:b4:fe:f5:a2:b2:18:c5:1f:ae:
                    c8:6d:25:bc:b1:fb:15:6f:81:19:83:a1:5c:87:c9:
                    ec:8d:c8:85:62:ef:ae:ca:6d:93:7c:67:55:c2:a9:
                    23:6a:5e:84:c5:16:f5:2a:14:5a:7b:7f:0f:26:86:
                    21:e2:f9:8c:42:26:7c:82:7e:20:6f:75:90:74:a8:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B9:D1:DD:AC:9E:F0:BC:0D:02:91:C9:04:72:78:30:29:C0:16:E9
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5EE036F4823911ECAA69C9D15A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:7a:65:1e:6b:c9:cd:3a:58:2f:67:54:f2:74:40:59:0b:
         20:22:a1:c1:b5:27:ae:6c:f0:74:7a:8f:62:5d:af:9a:88:e3:
         37:a8:f4:13:47:04:11:7a:b7:1a:da:e0:e1:43:bc:df:11:32:
         a2:94:21:aa:c9:f4:af:6c:2a:10:69:eb:7e:99:a0:da:00:cc:
         9b:69:d5:71:92:0f:6f:35:d9:b3:9f:58:e6:a0:62:ad:be:69:
         0e:8a:62:fb:07:7d:44:88:7d:29:45:09:68:38:bb:bb:a8:eb:
         2e:fa:fc:bd:c6:21:9f:81:4a:49:45:93:3b:d0:40:ae:26:25:
         db:16:a1:67:2a:c4:4b:0c:45:51:81:8a:35:57:b3:15:e4:6e:
         b8:75:4d:d0:ea:a3:05:fd:50:18:f5:06:41:61:83:fb:58:ae:
         67:e5:ad:b0:4b:30:ad:e2:22:fb:57:c2:65:d0:6d:65:fc:4e:
         9a:66:c3:69:c7:76:2d:55:ae:5d:9f:3b:e4:09:c6:e1:f5:52:
         6e:66:09:80:56:57:e4:03:62:09:b5:d4:85:91:3d:6b:19:d6:
         24:f7:56:79:37:b2:7d:b2:35:e7:e3:c1:4c:85:97:53:c1:e9:
         11:61:f7:e1:96:4b:5a:aa:0d:2e:4e:d3:f4:ec:7a:16:92:17:
         00:be:11:33
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAiowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAxMzEwMTU5MDFaFw0yMzAxMzEwMTU5MDFaMBgxFjAU
BgNVBAMMDTYxZjc0MjZhLWY3OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8O26tbrDb8C8SmNmr9Nvp3nItsMVjWwO+H2Ai5paS2iVFngCCI81NK/IH
Fqn5oETx84rVW3bc+io8eC4h5s9Qr7c2F7hvRc9CGQRW5ybq3SynMHHSOXe4OH8g
Md/1OPWmk8ZXcqEnRUFRRFZQppIXIdtEzX4RlJVFWOS9TI9SBkC+pOYOuDWoSiRz
unQlrh+EwT3zGhiq/CxMeLohzHLjc9FnTm+UioNhsZlV0mDpPLGbSPnLt8AiE7T+
9aKyGMUfrshtJbyx+xVvgRmDoVyHyeyNyIVi767KbZN8Z1XCqSNqXoTFFvUqFFp7
fw8mhiHi+YxCJnyCfiBvdZB0qOYBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUCbnR
3aye8LwNApHJBHJ4MCnAFukwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzVFRTAzNkY0ODIzOTExRUNBQTY5QzlEMTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAIqEemUea8nNOlgvZ1TydEBZCyAiocG1J65s8HR6j2Jdr5qI4zeo9BNH
BBF6txra4OFDvN8RMqKUIarJ9K9sKhBp636ZoNoAzJtp1XGSD2812bOfWOagYq2+
aQ6KYvsHfUSIfSlFCWg4u7uo6y76/L3GIZ+BSklFkzvQQK4mJdsWoWcqxEsMRVGB
ijVXsxXkbrh1TdDqowX9UBj1BkFhg/tYrmflrbBLMK3iIvtXwmXQbWX8Tppmw2nH
di1Vrl2fO+QJxuH1Um5mCYBWV+QDYgm11IWRPWsZ1iT3Vnk3sn2yNefjwUyFl1PB
6RFh9+GWS1qqDS5O0/TsehaSFwC+ETM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org