Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/60B2751AE0A211EC9ED0F396F1222468.roa
File:                     60B2751AE0A211EC9ED0F396F1222468.roa (raw, json)
Hash identifier:          rlB0iDrFlr6+3d6D09eVhIi8bH5/j51ZnNaAFzOlcN8=
Subject key identifier:   4F:DF:30:17:FF:BD:20:FD:9D:CE:95:3B:DE:E2:4B:33:8C:8A:CC:FC
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0508
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/60B2751AE0A211EC9ED0F396F1222468.roa
Signing time:             Tue 31 May 2022 05:27:35 +0000
ROA not before:           Tue 31 May 2022 05:27:31 +0000
ROA not after:            Wed 31 May 2023 05:27:31 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 31 05:27:31 2022 GMT
            Not After : May 31 05:27:31 2023 GMT
        Subject: CN=6295a747-6441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:da:ca:88:98:0e:58:f7:23:3d:e7:c5:c1:
                    bb:2e:3b:01:bc:69:8f:8f:b0:0f:ed:4f:54:53:92:
                    1f:52:25:e8:84:c6:b2:64:2f:75:63:08:b3:62:56:
                    35:ec:39:c8:3e:e7:5b:f4:78:ed:a7:3f:dc:1f:ba:
                    ff:c2:e4:cd:68:cf:5a:ce:ae:f8:03:f0:d6:7c:e9:
                    7f:a8:39:6d:ab:05:de:42:aa:21:bb:b5:27:5d:c5:
                    ee:cf:15:4a:29:ad:8d:f4:50:73:b2:7d:1b:e4:5f:
                    12:0f:f7:d7:fc:70:58:c1:c5:b0:87:f3:09:b9:30:
                    b0:18:ca:e6:5f:d6:48:a0:b4:dd:3d:64:59:a5:c3:
                    17:0a:73:c6:10:6f:1d:a8:71:5f:a7:fd:91:6d:62:
                    86:bb:7a:d4:eb:01:df:4c:87:be:5c:24:3b:2d:6d:
                    5d:01:8f:a3:c4:b5:2e:2a:ea:6c:0f:26:97:f3:e5:
                    4b:fe:a8:1f:c1:f6:94:af:6f:37:eb:17:0a:6d:de:
                    c4:54:af:22:d5:6a:56:e5:8c:2b:2b:4b:92:35:23:
                    82:1d:2c:cd:50:f0:25:cb:90:d3:6a:6c:74:13:c5:
                    ac:6d:47:12:fa:d9:09:ac:2e:d5:89:22:4a:c1:d5:
                    8d:61:e2:fc:9f:ae:47:0f:1d:12:1a:7c:df:66:ab:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DF:30:17:FF:BD:20:FD:9D:CE:95:3B:DE:E2:4B:33:8C:8A:CC:FC
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/60B2751AE0A211EC9ED0F396F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:8a:81:83:45:65:9a:1e:06:6b:cd:d1:e6:92:b0:f7:e3:
         d5:05:bb:47:0a:ce:12:ee:21:89:bd:63:d9:cc:bb:0b:62:b7:
         fe:5f:20:7e:a8:3f:51:27:a0:22:0b:06:ff:a9:32:c6:98:b7:
         18:1c:29:42:e5:0a:32:b1:18:e9:29:47:92:ff:de:f2:47:28:
         08:85:05:f8:31:a7:28:f3:e6:db:de:98:97:72:58:ae:e3:8f:
         fa:2c:b1:03:60:c8:87:aa:f5:de:81:3a:0a:a2:1e:13:63:7a:
         5e:b3:ce:32:70:0b:34:91:a5:59:00:e1:5b:4b:52:f3:75:f1:
         f9:9a:39:71:ca:35:95:84:48:04:ff:7e:4f:9a:f6:77:aa:65:
         d8:d6:88:ce:11:74:20:de:69:fb:b6:46:e6:37:a0:8b:dd:81:
         d1:ae:8b:fc:4b:c7:09:2a:6c:43:44:14:fa:9c:ee:f9:21:42:
         ec:30:fc:4f:fc:b9:0c:df:bd:ec:d2:67:88:81:df:ed:a0:23:
         39:9a:bc:2c:c1:61:97:ac:8f:10:74:ed:35:19:d4:ee:59:e5:
         85:eb:98:d7:35:48:e3:0d:7e:d6:33:33:91:b2:dc:ab:21:55:
         06:a2:c8:70:bc:f1:28:77:c0:0c:fb:e6:d9:32:b2:f8:ec:86:
         37:2a:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org