Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/75743B28E49411EC99180D8AF1222468.roa
File:                     75743B28E49411EC99180D8AF1222468.roa (raw, json)
Hash identifier:          x6PPgHLbpkSkqBdo8qnOAD4+N/6O4xE98MneTXkMaxo=
Subject key identifier:   5A:5F:60:31:01:FD:A0:F1:E4:D7:6B:03:19:34:F9:A2:FA:AE:9B:A7
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       052A
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/75743B28E49411EC99180D8AF1222468.roa
Signing time:             Sun 05 Jun 2022 05:58:02 +0000
ROA not before:           Sun 05 Jun 2022 05:57:58 +0000
ROA not after:            Mon 05 Jun 2023 05:57:58 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun  5 05:57:58 2022 GMT
            Not After : Jun  5 05:57:58 2023 GMT
        Subject: CN=629c45ea-9230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:f1:a4:cc:5d:f1:d6:34:7f:f3:de:d7:4a:
                    61:6d:9b:6d:7f:ff:6f:2e:04:40:0e:23:83:e0:e8:
                    1e:4c:ce:e8:0f:07:af:bc:01:86:09:62:6f:6a:e3:
                    75:7c:fb:b1:95:dd:ec:f9:f3:be:94:af:88:d3:ff:
                    fb:08:dd:0e:cd:24:65:2f:1f:65:4f:92:03:f6:b6:
                    af:e3:ca:40:d7:d1:3c:51:e7:9c:df:fa:22:5f:d5:
                    cc:f0:59:44:9a:ce:a6:f3:98:a2:56:40:df:6f:80:
                    df:08:05:7a:13:36:82:4d:60:da:10:de:e0:b0:5d:
                    ef:5c:7c:7a:ff:59:fe:94:78:b6:b0:e6:20:b7:ad:
                    86:a1:d5:07:c5:d5:ef:a0:39:4c:87:dc:72:b6:49:
                    a6:bf:2a:1e:68:32:3d:e1:6b:24:a1:75:a9:4d:d9:
                    55:9c:aa:ec:d8:fd:6c:f7:95:a7:5d:06:c9:cc:d1:
                    4e:af:12:22:ff:db:c0:e4:b3:c6:da:5f:02:1d:5d:
                    d1:5e:b4:75:2b:6b:b3:e1:25:97:08:06:c2:cf:ff:
                    56:69:5d:0d:89:7a:3f:89:65:bc:79:60:fb:60:70:
                    71:b0:8c:f1:6a:10:33:8d:41:1b:bf:c3:ab:2b:65:
                    1f:a8:ca:9c:b7:1d:44:d2:db:2d:79:86:f6:48:44:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:60:31:01:FD:A0:F1:E4:D7:6B:03:19:34:F9:A2:FA:AE:9B:A7
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/75743B28E49411EC99180D8AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:94:6d:c6:1d:55:09:4f:ca:d7:f2:d1:5b:3e:b0:f5:9b:33:
         75:e9:10:72:d5:29:d3:f9:de:8c:e0:69:59:ee:db:d2:34:f9:
         78:c0:52:65:67:9a:a9:7d:46:c9:9c:a8:16:89:ed:4e:8f:89:
         a8:e1:5a:28:81:cd:4b:6f:d7:25:14:f3:64:99:0c:bf:bf:02:
         8f:c4:11:0a:f2:26:c0:6d:d0:41:68:fb:f8:5b:7c:e4:d4:3e:
         94:b9:4d:e4:6b:83:2b:7d:c2:58:7f:7c:10:78:6a:de:ae:6c:
         f1:cc:3b:a8:61:ed:9b:7f:d4:6b:8b:03:84:79:3e:dc:24:fd:
         b8:9d:0b:0e:f9:5e:98:99:5c:f9:1e:b7:1b:19:1c:4d:00:f4:
         04:58:4b:47:8c:9b:7a:47:69:72:60:de:1f:5d:86:5b:ab:6c:
         52:d2:21:c3:71:00:28:58:9a:6d:a0:92:00:00:e8:cc:fd:2d:
         96:bf:4c:ea:96:93:56:34:e5:d6:ea:ff:75:91:f1:92:e1:8c:
         15:d0:ab:4b:64:33:74:ac:8b:26:8c:94:43:3d:22:6e:48:ee:
         ca:08:ee:c6:b1:7a:51:d8:2a:83:80:f8:d3:d5:71:92:2f:81:
         2f:0c:fe:e3:4a:88:78:a8:c6:84:9b:61:6e:1e:8d:b0:37:10:
         2c:34:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org