Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7489A596F43811EC9A693BBEF1222468.roa
File:                     7489A596F43811EC9A693BBEF1222468.roa (raw, json)
Hash identifier:          aeM22Td7tC9F0dT1wjd6uCcpIgnptJ9UTL0iSugX9gY=
Subject key identifier:   15:A0:3F:FF:88:A2:10:9F:02:D7:74:94:74:6D:E2:11:D8:E2:C6:57
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       05B2
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7489A596F43811EC9A693BBEF1222468.roa
Signing time:             Sat 25 Jun 2022 03:39:45 +0000
ROA not before:           Sat 25 Jun 2022 03:39:40 +0000
ROA not after:            Sun 25 Jun 2023 03:39:40 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 25 03:39:40 2022 GMT
            Not After : Jun 25 03:39:40 2023 GMT
        Subject: CN=62b68381-8c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:a7:0a:c1:1b:df:d4:0e:dc:99:d8:0e:21:
                    13:25:f9:ea:b0:5f:1f:01:9a:d8:4f:b7:a3:17:50:
                    5a:06:55:52:40:d7:27:51:00:61:17:f0:bd:06:60:
                    6a:a5:70:22:b2:16:05:98:48:0f:40:ef:1a:62:d1:
                    85:4c:de:42:b9:d7:57:1f:60:51:51:a2:ae:11:7e:
                    89:0c:fc:e3:cc:46:7a:e9:e9:0d:8f:f5:ac:13:10:
                    91:df:47:93:40:a7:6d:78:41:7c:79:eb:88:a5:67:
                    8a:ea:02:57:11:e4:71:07:3c:ff:8f:aa:ac:71:b3:
                    8e:70:e5:12:52:3c:ec:79:fa:bd:37:17:82:4b:8e:
                    fa:db:3f:71:9f:b4:64:b0:13:4f:ac:d5:16:8c:6b:
                    37:eb:f2:f5:53:e0:f2:57:10:34:2a:61:d3:28:6a:
                    f4:c7:66:3f:c5:4a:e4:14:6a:46:c9:c9:d6:07:87:
                    62:0b:0a:51:15:7c:60:a1:36:e2:86:6b:f0:28:4a:
                    e1:df:38:8a:a1:21:40:5a:11:9e:fc:93:08:fa:7e:
                    16:4e:78:14:2b:4f:08:3c:97:d7:84:99:6f:b4:a2:
                    f3:4f:65:4c:33:f5:f0:4e:34:57:71:c7:b0:04:00:
                    c4:fb:9b:b4:e8:7f:68:74:6a:71:18:c3:cf:ca:a1:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A0:3F:FF:88:A2:10:9F:02:D7:74:94:74:6D:E2:11:D8:E2:C6:57
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7489A596F43811EC9A693BBEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:42:cf:52:63:ab:0f:73:6e:8f:b6:2f:e0:b1:27:8e:b5:44:
         42:30:60:20:a2:8a:2d:b4:44:e9:8e:22:97:02:d4:bf:f0:5e:
         4a:63:10:8a:6f:5e:51:bb:d5:a5:c8:cb:36:53:65:37:a9:25:
         3c:ee:a0:e9:3c:31:fd:3d:5e:b3:f6:70:21:3d:d6:b2:83:38:
         39:48:44:1f:7e:90:f9:c3:84:ef:22:10:10:50:cd:28:f0:46:
         5a:b6:d5:81:2a:c5:05:8b:06:e8:a3:8a:de:8f:dc:a3:ab:11:
         cd:a2:8c:5d:2a:01:4c:d6:15:b2:6a:da:ec:43:23:c8:df:77:
         2a:32:dd:9f:4d:ae:29:ba:df:6c:e7:f2:cb:9f:76:69:10:02:
         06:d8:c2:af:fa:4f:cd:94:d9:5c:03:1c:50:a9:1e:9a:d1:a1:
         35:e9:80:41:62:c6:4b:4c:71:cd:b0:cd:c7:b2:b9:ee:e2:9c:
         1c:86:c0:75:f3:fa:11:27:a9:46:2e:1f:9b:9d:f2:27:87:b6:
         b2:f0:ca:38:b5:65:0f:87:4d:f7:e0:67:e8:6f:19:dd:65:56:
         20:c2:18:3a:8c:80:2d:41:50:0f:d9:26:1a:88:b2:d4:e4:30:
         e5:8a:2b:fd:ed:92:bd:fd:35:9b:8d:e2:9c:b7:24:61:6b:03:
         e5:39:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org