Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6584745C95D511ECB0FB56E35A40D577.roa
File:                     6584745C95D511ECB0FB56E35A40D577.roa (raw, json)
Hash identifier:          n5SK5tzHvZNUoOgc8XbCj/Ao8foXoeysW3x4/fxfzVY=
Subject key identifier:   A8:9F:92:14:31:41:B6:4D:82:13:DE:C5:3B:F8:E7:B2:64:A3:A2:F0
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       02D4
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6584745C95D511ECB0FB56E35A40D577.roa
Signing time:             Fri 25 Feb 2022 00:53:51 +0000
ROA not before:           Fri 25 Feb 2022 00:00:46 +0000
ROA not after:            Sat 25 Feb 2023 00:00:46 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 25 00:00:46 2022 GMT
            Not After : Feb 25 00:00:46 2023 GMT
        Subject: CN=6218289e-c3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:75:43:93:f3:ba:e2:b1:21:ce:ef:1c:0d:
                    a4:84:04:c8:24:ab:6e:1b:20:e4:14:c2:92:31:fc:
                    c0:e6:b1:14:f9:72:5c:aa:c8:2a:29:ac:38:7c:8f:
                    14:48:5a:cb:bb:9e:ae:53:28:3e:83:f2:9e:20:db:
                    b2:92:6b:3f:2e:2c:ce:27:af:9e:ad:1c:5a:b7:28:
                    29:72:fa:5b:db:57:df:f7:80:20:dd:36:70:d8:11:
                    0a:8b:c2:c6:81:5c:0a:12:f2:60:c9:24:28:84:9c:
                    15:6f:93:e7:1e:41:3b:be:0e:18:60:6e:da:ed:54:
                    2f:b1:bb:e1:ff:ce:1e:c3:8f:fe:7c:5b:1c:b7:98:
                    d5:f2:af:96:ce:5f:f1:35:9f:76:14:6a:c0:6d:93:
                    59:9b:c3:90:7e:4e:09:aa:4b:c1:9c:da:9b:b2:31:
                    ab:b5:82:69:95:49:c8:58:12:e1:69:c3:ad:7b:3e:
                    65:4c:ae:24:96:5d:36:54:5f:89:a7:9d:ed:65:87:
                    d8:b4:81:01:17:06:ed:a8:73:ad:df:4b:c9:45:8f:
                    15:91:3c:9b:c2:c7:0c:a2:b6:1a:e4:2c:47:28:37:
                    0e:38:5d:39:0b:10:56:60:07:3b:dc:50:6e:31:98:
                    af:ca:37:63:56:10:c1:a7:a9:39:a8:fc:aa:19:91:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9F:92:14:31:41:B6:4D:82:13:DE:C5:3B:F8:E7:B2:64:A3:A2:F0
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6584745C95D511ECB0FB56E35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:3a:3e:b3:ab:97:75:27:43:42:8d:8a:55:06:4d:40:1a:
         de:f5:01:5a:68:35:04:98:1f:b7:97:eb:64:b9:41:3b:e8:dc:
         2b:7b:27:25:1d:6a:ac:c5:cc:20:1a:dc:f9:31:a1:9e:bb:d8:
         86:b2:42:eb:05:24:90:83:59:ec:72:db:5e:d3:f2:4d:65:a7:
         3b:35:43:c1:d3:c4:cd:67:6f:1b:cc:24:6a:5c:ec:c9:f4:5e:
         f5:86:02:3b:f1:99:f2:b7:d0:66:7a:a7:79:4c:db:d8:c7:7a:
         bf:92:8e:c8:e0:9b:c4:d9:95:86:b4:72:7b:e4:1f:b9:0b:7f:
         cf:a4:85:7b:bb:bc:d9:12:b2:55:0a:9f:20:09:1f:c8:fc:f0:
         b2:bd:00:7f:da:56:1d:ee:57:e7:c6:1c:44:13:4b:23:25:53:
         0f:4f:75:41:b6:05:4a:d9:13:ef:7b:7e:f4:ec:a4:b9:f5:c2:
         58:b7:aa:42:84:b1:1a:8b:b2:6c:db:3c:51:40:84:89:4b:be:
         e4:45:85:ee:d5:e0:9d:b8:c5:ef:c7:dc:44:32:51:a0:6b:98:
         be:c4:88:a7:69:a5:af:54:e1:7d:ec:53:b5:ba:63:b3:24:21:
         45:b3:cc:96:8a:db:f6:f8:c2:5b:ef:21:3f:dd:4c:97:4c:17:
         28:10:6b:b9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMjUwMDAwNDZaFw0yMzAyMjUwMDAwNDZaMBgxFjAU
BgNVBAMMDTYyMTgyODllLWMzZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0IHVDk/O64rEhzu8cDaSEBMgkq24bIOQUwpIx/MDmsRT5clyqyCoprDh8
jxRIWsu7nq5TKD6D8p4g27KSaz8uLM4nr56tHFq3KCly+lvbV9/3gCDdNnDYEQqL
wsaBXAoS8mDJJCiEnBVvk+ceQTu+DhhgbtrtVC+xu+H/zh7Dj/58Wxy3mNXyr5bO
X/E1n3YUasBtk1mbw5B+TgmqS8Gc2puyMau1gmmVSchYEuFpw617PmVMriSWXTZU
X4mnne1lh9i0gQEXBu2oc63fS8lFjxWRPJvCxwyithrkLEcoNw44XTkLEFZgBzvc
UG4xmK/KN2NWEMGnqTmo/KoZkbxLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUqJ+S
FDFBtk2CE97FO/jnsmSjovAwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzY1ODQ3NDVDOTVENTExRUNCMEZCNTZFMzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAG7/Oj6zq5d1J0NCjYpVBk1AGt71AVpoNQSYH7eX62S5QTvo3Ct7JyUd
aqzFzCAa3PkxoZ672IayQusFJJCDWexy217T8k1lpzs1Q8HTxM1nbxvMJGpc7Mn0
XvWGAjvxmfK30GZ6p3lM29jHer+Sjsjgm8TZlYa0cnvkH7kLf8+khXu7vNkSslUK
nyAJH8j88LK9AH/aVh3uV+fGHEQTSyMlUw9PdUG2BUrZE+97fvTspLn1wli3qkKE
sRqLsmzbPFFAhIlLvuRFhe7V4J24xe/H3EQyUaBrmL7EiKdppa9U4X3sU7W6Y7Mk
IUWzzJaK2/b4wlvvIT/dTJdMFygQa7k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org