Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/75BD997CD59D11EC994585EBF1222468.roa
File:                     75BD997CD59D11EC994585EBF1222468.roa (raw, json)
Hash identifier:          fYLzyr7Yy5JBSb0cWsXuD5F6WPXg7LG8nsQD2Nj8Ho4=
Subject key identifier:   F2:7F:A7:EC:17:A0:4E:7F:AC:28:F8:04:38:D3:FE:E9:49:10:9D:52
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       04A5
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/75BD997CD59D11EC994585EBF1222468.roa
Signing time:             Tue 17 May 2022 04:54:40 +0000
ROA not before:           Tue 17 May 2022 04:54:35 +0000
ROA not after:            Wed 17 May 2023 04:54:35 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 17 04:54:35 2022 GMT
            Not After : May 17 04:54:35 2023 GMT
        Subject: CN=62832a90-37ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:f3:8c:69:7c:73:87:b6:f4:36:67:37:ed:
                    54:91:4f:5a:18:47:f9:eb:90:7e:76:fa:86:db:db:
                    b3:04:0b:07:53:3c:ca:92:29:a3:d6:63:7a:4c:b0:
                    dc:00:6f:5c:1f:50:f1:d8:f6:f2:e7:f5:ad:e2:be:
                    f1:d1:34:c3:36:1d:78:1e:29:50:61:be:af:4b:a2:
                    60:d5:d9:d2:c4:22:14:53:01:48:72:98:f7:6b:61:
                    b4:86:f9:d0:10:85:6c:a7:a1:0a:09:cd:ce:86:48:
                    5e:d3:51:d9:4d:3f:05:7d:a7:57:08:ce:ce:af:f5:
                    07:fb:b3:8d:e2:92:e1:f0:ab:ce:16:f5:26:84:63:
                    33:d4:74:62:bd:3d:e1:d6:d6:0d:d2:e1:32:7e:6c:
                    1a:0b:8d:32:0c:6f:6a:88:b7:21:0d:b4:91:7f:48:
                    dc:cb:a6:05:88:7d:b8:77:c1:4d:a5:42:6a:f5:ac:
                    16:23:8c:b9:35:9a:6d:66:d2:fc:47:0b:6c:6e:26:
                    fc:59:38:a9:2d:84:4a:bd:93:40:4c:ea:2d:f5:5d:
                    4a:b8:1a:1a:03:47:b7:ef:1e:46:66:e9:4f:b0:d9:
                    32:15:9d:46:dc:fd:2c:d2:80:7b:e0:0f:5f:ca:70:
                    83:09:17:03:0d:8c:f3:7c:0f:c5:22:fb:59:ea:53:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:A7:EC:17:A0:4E:7F:AC:28:F8:04:38:D3:FE:E9:49:10:9D:52
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/75BD997CD59D11EC994585EBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:91:7e:ed:bb:b9:e5:12:3f:e0:9a:cf:c1:06:5e:dd:58:
         30:4f:0a:9a:5e:24:c0:99:39:26:74:f2:82:4b:ca:53:0b:12:
         d8:33:62:06:97:4b:17:66:f0:81:5e:cb:79:48:be:75:e2:99:
         92:3a:0b:a8:1b:d5:a1:b0:cf:fe:8f:af:4d:51:5b:a3:81:34:
         ad:e9:b2:f1:6b:a4:43:05:c4:b7:1c:88:2f:25:46:31:70:af:
         0b:5d:45:74:cb:4e:50:e6:23:e2:8f:cc:a6:2f:6f:92:6f:11:
         13:d6:fd:5c:04:2b:94:45:f0:55:1e:37:26:e0:a9:95:83:e9:
         60:96:2c:3e:98:14:de:51:07:b8:f2:31:12:6b:50:a4:53:1d:
         4a:ed:ec:8f:62:76:0c:61:c4:dd:f4:7b:e5:ea:40:11:af:ba:
         1f:be:52:45:ce:7a:d6:4e:77:6e:21:70:ce:dc:e2:b3:4b:65:
         bf:c5:2a:09:34:ad:61:af:02:cf:91:af:6e:63:e8:d4:be:d6:
         15:6a:bc:73:0e:39:fd:46:4f:e7:62:42:85:bf:79:e5:bf:b2:
         59:1c:c3:b9:17:a5:dc:51:db:02:b8:31:f7:d9:17:89:a2:30:
         4e:8f:3a:1d:4d:05:b4:97:b7:35:2f:cf:2f:18:2d:f9:3c:43:
         c7:66:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org