Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6EF3494E37BC11ED865F03CEF1222468.roa
File:                     6EF3494E37BC11ED865F03CEF1222468.roa (raw, json)
Hash identifier:          BEOHQX7AMvAjEsQNfTC1Cd/Eyity0mQUgRbVcvGYK7k=
Subject key identifier:   B8:9E:4E:0B:96:CF:BE:48:00:3F:47:1F:D6:C6:6D:8E:52:6F:B9:05
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0703
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6EF3494E37BC11ED865F03CEF1222468.roa
Signing time:             Mon 19 Sep 2022 01:43:17 +0000
ROA not before:           Mon 19 Sep 2022 01:43:12 +0000
ROA not after:            Tue 19 Sep 2023 01:43:12 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep 19 01:43:12 2022 GMT
            Not After : Sep 19 01:43:12 2023 GMT
        Subject: CN=6327c935-425e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:c5:26:ee:e7:b2:54:66:be:52:ca:34:9b:
                    36:85:c4:ab:b5:f4:e1:e0:ab:9a:81:99:66:5b:2e:
                    45:1c:9a:f9:6a:58:7b:a7:d3:76:7d:ee:15:36:80:
                    49:f6:d2:16:60:e6:b2:f3:03:cf:b2:fa:9f:44:f7:
                    ca:58:e6:e4:f7:0f:15:bd:6c:b0:98:ba:a1:fd:06:
                    80:79:a3:59:be:1f:1c:fe:c3:e6:b2:64:c9:94:62:
                    db:1e:77:15:71:d8:c5:28:a8:10:4d:84:7b:c7:20:
                    ae:00:b2:6a:86:40:85:e9:39:a7:fc:ea:a6:35:0e:
                    08:1f:cc:1e:b0:40:f1:08:86:a5:89:d4:65:e1:60:
                    d0:cc:6e:ee:14:81:f5:f8:ea:e0:6e:8d:e8:7e:2d:
                    27:93:3f:25:af:64:b1:52:af:7d:6d:d3:a4:46:3c:
                    5e:52:51:8b:c8:54:6b:aa:9f:90:7c:22:fe:b1:76:
                    d4:c1:89:1f:e9:95:12:2b:cd:d7:3e:4b:c8:fa:cd:
                    2c:f1:c5:97:d4:27:2f:38:dc:94:64:8a:2e:f8:6f:
                    f9:e1:b6:d0:c5:59:d1:ec:0e:b4:11:ed:3d:22:53:
                    e1:d9:1e:ce:93:9a:b1:3d:67:88:47:31:68:17:4d:
                    2f:59:96:5a:64:dc:d0:a2:7e:f2:76:de:f4:f2:2a:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:4E:0B:96:CF:BE:48:00:3F:47:1F:D6:C6:6D:8E:52:6F:B9:05
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6EF3494E37BC11ED865F03CEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:eb:1a:47:aa:e2:6c:03:f9:66:e4:ed:4a:40:ac:ba:b7:
         93:df:ab:13:ee:c8:a3:a7:80:e6:be:93:12:2b:e9:98:5e:4f:
         11:d5:f7:c2:14:02:e6:de:2e:5a:99:af:40:2b:81:15:f6:10:
         34:22:c1:de:a5:6e:83:86:c9:cc:09:ef:1f:a1:2c:c3:25:e1:
         12:66:7c:dc:c5:05:96:b8:10:34:20:2a:b3:10:98:03:1e:0b:
         2c:71:ff:b3:e0:1c:67:c8:ec:96:ed:a7:75:a2:41:17:8d:82:
         4d:67:79:d0:bc:5c:9d:ca:38:32:5b:4f:c0:81:f6:c4:69:d8:
         17:60:e7:c1:96:07:cb:64:80:2c:27:c2:b0:4d:99:3e:51:5d:
         b0:4d:15:d3:02:6f:72:60:d5:e8:b1:a9:e1:2c:ca:87:02:86:
         c8:08:75:41:3c:08:cc:26:c1:9b:cb:f6:5e:ef:bf:7b:87:1f:
         e9:9a:60:4c:3a:6f:2a:c5:e9:f8:fd:3a:cf:78:1d:95:4e:fd:
         85:c6:bd:39:5b:db:6c:99:d4:8f:af:36:c7:ad:40:db:89:e2:
         87:68:c0:4b:f5:4d:32:f2:1c:e4:22:bb:35:04:83:46:52:a5:
         77:58:a0:49:35:67:10:62:ef:3a:7f:37:1f:91:50:06:60:e7:
         95:70:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org