Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6C4220D6F68911ECB306269AF1222468.roa
File:                     6C4220D6F68911ECB306269AF1222468.roa (raw, json)
Hash identifier:          8RRRHvca8MbBt27cfUJeuLBC8qSrpUL3HpW2pLm2DIY=
Subject key identifier:   CE:0E:70:81:10:4C:CB:6F:E9:2C:10:57:55:65:1F:F8:76:CD:FB:FB
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       05C7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6C4220D6F68911ECB306269AF1222468.roa
Signing time:             Tue 28 Jun 2022 02:24:23 +0000
ROA not before:           Tue 28 Jun 2022 02:24:17 +0000
ROA not after:            Wed 28 Jun 2023 02:24:17 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 28 02:24:17 2022 GMT
            Not After : Jun 28 02:24:17 2023 GMT
        Subject: CN=62ba6657-c422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:e8:e1:aa:bc:46:c2:e1:0a:88:54:f5:57:
                    63:22:37:fd:ec:90:e0:67:51:53:08:08:c1:72:bd:
                    ed:01:71:68:3d:2b:c9:e4:37:f3:4a:f5:3f:27:e9:
                    c7:eb:ef:64:b5:cd:cd:8e:06:62:95:9a:46:83:8c:
                    18:69:17:ec:75:c7:62:2d:95:da:92:22:c0:e9:72:
                    1a:8d:33:98:76:a3:19:2e:7c:cf:93:02:d5:9a:df:
                    81:f8:4c:52:6a:78:6f:09:bf:17:1d:65:5d:b5:1a:
                    c3:af:21:50:d5:78:09:19:33:ab:fd:35:da:df:0b:
                    1c:92:d9:45:79:da:8a:7d:02:38:50:d5:af:86:f2:
                    5c:cc:ce:65:42:d6:3a:75:e1:38:27:42:5d:16:d2:
                    6a:2a:83:52:b8:4e:a0:79:72:65:b1:ef:96:76:78:
                    2d:73:f0:4a:df:4f:da:5d:ee:e8:4d:fe:da:fa:00:
                    fa:70:e2:35:dd:7a:12:03:3d:24:d7:90:c8:3c:d4:
                    31:6c:3c:ba:a4:12:76:ac:32:1b:bc:c7:64:a2:a8:
                    51:f7:c5:37:d9:91:a8:41:14:95:0c:73:bb:71:37:
                    fc:eb:10:5f:b5:b7:55:f1:cd:b0:4a:d7:32:90:ef:
                    19:ed:2d:73:59:02:d4:5a:13:6f:93:32:15:e6:e9:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:70:81:10:4C:CB:6F:E9:2C:10:57:55:65:1F:F8:76:CD:FB:FB
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6C4220D6F68911ECB306269AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:28:27:4a:ce:20:65:d2:8e:44:66:e4:db:0a:bd:08:6d:70:
         b4:23:90:6b:bb:e7:46:94:e7:66:6a:f0:53:73:40:12:a0:42:
         99:3f:42:7c:46:e4:ef:42:fe:72:c5:ea:aa:32:f3:33:67:db:
         06:90:0a:33:02:9c:01:4e:a9:04:23:e4:25:98:76:c4:92:5a:
         d0:f9:84:5b:1b:ce:2a:45:f4:ea:9e:57:0d:46:16:ce:53:bd:
         66:90:73:de:2a:f3:bb:5b:dc:80:b5:97:05:08:e7:c7:17:49:
         2a:07:1e:e0:44:7b:01:ec:34:3a:c9:52:e5:60:c1:1d:3a:ca:
         b4:77:bf:83:a3:18:91:9e:b9:c7:47:09:61:92:29:07:a0:79:
         09:a4:5f:60:73:8b:c2:4a:d4:5c:74:63:4f:4b:39:00:c4:02:
         64:e2:8b:c3:8f:d8:cb:4b:46:9f:d6:f8:b8:0c:da:97:1c:8e:
         d6:37:ed:13:09:c4:38:20:bc:9f:f1:cf:35:ac:d2:bd:7c:a7:
         6e:79:a6:40:c3:65:f6:3d:be:63:9b:19:7e:58:5b:af:14:3a:
         5d:c1:cd:a5:18:24:6f:dc:02:2d:1e:d7:0b:5d:88:3d:52:6b:
         7c:2a:ee:0c:b7:38:01:49:7e:e7:bd:45:58:67:93:31:8d:f6:
         9e:4d:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org