Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6D52EAE6D96F11EC897C0BEDF1222468.roa
File:                     6D52EAE6D96F11EC897C0BEDF1222468.roa (raw, json)
Hash identifier:          CdnIlhO1G6WGbMK50wOrqkZhpc3Rxyo37sp1N+fikYc=
Subject key identifier:   D6:F7:81:21:EB:9A:DB:6B:C3:81:2E:54:51:7E:E6:CE:D9:FE:96:E0
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       04CA
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6D52EAE6D96F11EC897C0BEDF1222468.roa
Signing time:             Sun 22 May 2022 01:35:14 +0000
ROA not before:           Sun 22 May 2022 01:35:10 +0000
ROA not after:            Mon 22 May 2023 01:35:10 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 22 01:35:10 2022 GMT
            Not After : May 22 01:35:10 2023 GMT
        Subject: CN=62899352-0a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:9c:3b:8d:c3:8c:9e:29:99:7c:45:41:e5:
                    1b:78:f9:fc:7d:e3:c5:2c:89:d8:bf:50:23:74:ec:
                    84:11:76:66:f3:ac:2d:ea:7f:f9:6b:7e:85:de:08:
                    77:42:2b:f7:aa:1d:12:3d:3f:18:f0:d6:ca:e3:53:
                    b9:76:b7:3a:16:1f:03:53:c1:59:0a:3c:a3:ef:30:
                    44:82:66:6b:7c:40:68:88:2b:2e:67:00:d9:46:cb:
                    78:82:70:a8:b9:f2:a1:b2:39:10:90:e2:e5:a5:15:
                    5a:93:31:b8:32:8b:a1:e7:88:82:4d:b7:b6:d4:07:
                    5c:a5:71:1d:03:df:7c:1f:fc:1d:a7:4b:d9:39:85:
                    29:61:be:ff:55:ce:61:8a:b0:93:73:a5:cf:97:80:
                    43:88:c8:cf:a1:80:9d:cf:3f:9f:d3:ff:da:01:7c:
                    ad:7c:b6:2b:03:0f:89:b9:69:21:89:3e:7e:bb:a7:
                    b1:26:88:91:cb:1d:e0:28:20:55:b0:8b:9c:03:32:
                    81:44:4a:3e:e6:00:bc:ae:1b:e5:af:92:93:66:df:
                    c0:cd:4e:36:d7:3a:aa:5e:ae:6d:e9:66:22:62:5f:
                    ae:71:08:c8:46:f9:45:9e:2a:5f:23:1a:b6:34:e2:
                    39:c9:9c:be:a5:c2:8b:d2:ed:f9:7c:7a:63:80:4a:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:81:21:EB:9A:DB:6B:C3:81:2E:54:51:7E:E6:CE:D9:FE:96:E0
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6D52EAE6D96F11EC897C0BEDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:cc:f6:04:5d:51:ac:b3:50:07:34:2c:5b:24:63:d2:b8:
         49:f7:da:0f:d1:2b:85:b2:63:50:c9:ad:f6:a9:b5:30:27:0d:
         b7:ef:26:6a:7a:45:77:34:9f:dd:21:9d:10:b3:0a:37:bb:41:
         bf:cc:fc:fa:5a:08:81:ab:39:e1:2f:31:a0:0d:2c:93:69:8c:
         11:4d:69:13:c8:14:1a:e7:50:be:04:48:7a:1e:38:00:b1:19:
         ab:5e:94:f6:33:41:20:7e:ed:5e:e0:ed:bf:5b:06:6f:1d:0e:
         ab:c2:c9:36:6b:81:6d:a0:97:ca:79:d6:99:63:04:6c:8e:ad:
         e8:dd:d4:b3:61:99:d7:4e:c8:e9:08:21:0b:87:7b:4f:0e:9b:
         77:57:80:09:45:71:cd:fc:bb:e9:b8:89:b7:c1:f1:6d:1d:4b:
         0d:c9:ed:52:95:f2:f7:65:26:a4:c1:55:17:72:14:c5:ed:31:
         8a:7a:a8:28:c6:eb:0f:cd:cb:c4:e1:73:6a:4e:06:5f:83:d9:
         45:f4:3a:b0:14:30:81:64:f4:bb:f7:cb:d5:15:d0:8a:c5:e0:
         83:1a:46:91:84:b8:c5:bb:ce:1a:a1:6f:bf:e9:9b:2b:df:8d:
         ae:1c:17:27:54:ac:de:2a:e1:c7:38:5e:26:f4:7c:1a:e9:23:
         b7:ff:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org