Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/78BA6304E55011EC8D0DABDEF1222468.roa
File:                     78BA6304E55011EC8D0DABDEF1222468.roa (raw, json)
Hash identifier:          LxaGSCyYMFSCo664zUTbCtWWelv7EenEhIpyq41CoQE=
Subject key identifier:   5F:00:B0:7E:05:E5:75:C3:09:5C:C3:68:92:73:C5:8E:77:3D:6C:04
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0531
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/78BA6304E55011EC8D0DABDEF1222468.roa
Signing time:             Mon 06 Jun 2022 04:23:53 +0000
ROA not before:           Mon 06 Jun 2022 04:23:47 +0000
ROA not after:            Tue 06 Jun 2023 04:23:47 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun  6 04:23:47 2022 GMT
            Not After : Jun  6 04:23:47 2023 GMT
        Subject: CN=629d8159-553d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:0d:55:c4:a2:02:f1:ad:d4:57:00:c2:de:
                    73:e1:6b:a0:4c:de:05:e5:d0:65:b7:df:d1:ed:10:
                    28:c5:01:0e:59:60:cf:d5:42:b7:15:de:1a:83:94:
                    63:3c:9b:e9:01:9f:56:ac:3f:83:47:d9:22:e4:66:
                    1f:f3:56:24:dc:f5:de:9a:79:7c:09:4b:41:67:e6:
                    90:f0:21:61:45:a3:fd:cb:1b:0a:31:1a:81:c6:1f:
                    62:12:ee:25:ea:46:48:29:d3:e6:49:51:3d:87:a1:
                    5b:ad:ce:f2:69:92:3b:32:44:62:af:45:a1:f2:0c:
                    dd:b0:87:81:6d:3d:79:cb:e3:c4:f5:ad:a1:b0:c4:
                    a0:a2:b7:70:c6:86:69:9b:cc:50:d5:53:5a:2c:26:
                    54:13:a5:6e:7e:8e:10:ae:9e:dc:68:5e:08:b7:a5:
                    a9:9a:f7:35:db:ae:95:99:0a:78:c3:ee:0d:dc:05:
                    14:29:01:70:47:ba:d5:6c:54:cf:2e:11:d5:61:8f:
                    98:bb:9e:64:83:09:0c:5e:ad:3a:bf:d9:5e:06:7f:
                    e6:d6:14:90:0f:2e:0b:62:88:02:b5:7a:4d:7f:6b:
                    eb:ce:98:90:2d:bf:c7:59:dc:c3:06:62:c2:5d:7d:
                    7c:f9:ee:6a:09:91:80:32:d5:69:49:84:47:b0:f9:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:B0:7E:05:E5:75:C3:09:5C:C3:68:92:73:C5:8E:77:3D:6C:04
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/78BA6304E55011EC8D0DABDEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:19:ce:97:3c:19:83:21:4c:ad:33:95:c4:c6:0e:3d:78:f0:
         00:51:d8:2d:29:d9:c6:8d:22:1e:40:17:8d:79:84:a7:46:1a:
         ee:f8:1a:58:19:12:79:50:ad:2c:09:ca:70:c7:19:c6:b5:26:
         e5:33:95:b3:72:b7:86:32:3c:4a:83:d6:37:4c:35:75:18:84:
         67:19:92:49:22:e4:31:fa:71:fa:d6:34:cb:6a:f7:58:88:94:
         2f:6a:8c:74:32:a3:b6:51:55:17:e5:c0:8d:91:8f:60:c2:a5:
         c2:57:ec:9c:36:5e:01:ee:ee:af:6a:4c:dc:aa:06:c6:3e:9c:
         54:35:b8:81:6b:f8:21:0c:73:12:8a:e0:02:57:4c:55:fe:c9:
         4a:b7:2a:96:8a:b6:89:3e:f8:0e:db:22:e4:42:39:fd:a1:49:
         ec:20:b5:c8:f4:2a:af:6e:2e:7f:59:9f:d2:14:44:27:73:59:
         2e:81:28:29:20:98:cb:fa:05:d8:23:94:75:b4:fa:1a:7d:bd:
         00:da:b8:be:b7:8c:60:16:2a:1c:e5:65:42:d2:d1:8a:a8:7e:
         0d:9f:a7:e6:24:d8:27:28:45:08:7a:6a:e1:61:ef:7e:41:4c:
         d6:3c:cc:49:4d:78:6f:23:3c:76:dd:9f:53:c0:a8:b4:4c:df:
         15:5c:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org