Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/80C0240828DA11ED8CC40B86F1222468.roa
File:                     80C0240828DA11ED8CC40B86F1222468.roa (raw, json)
Hash identifier:          LuENixoJtbp+Q7V4W3HWd6NwRtRinQ0XQ72eyP6eBKY=
Subject key identifier:   5D:58:6A:C3:64:25:33:2A:F7:A1:8E:E5:49:A6:6D:67:1F:69:DF:CF
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0680
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/80C0240828DA11ED8CC40B86F1222468.roa
Signing time:             Wed 31 Aug 2022 03:10:45 +0000
ROA not before:           Wed 31 Aug 2022 03:10:39 +0000
ROA not after:            Thu 31 Aug 2023 03:10:39 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Aug 31 03:10:39 2022 GMT
            Not After : Aug 31 03:10:39 2023 GMT
        Subject: CN=630ed135-f816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:cb:83:78:ae:30:ee:04:91:0d:51:b4:fc:
                    80:15:66:a1:39:6b:07:8e:4b:87:6a:46:bf:46:8a:
                    e1:bb:10:60:5c:81:e0:fa:00:ba:1f:77:00:8e:45:
                    56:fa:cb:62:7b:07:81:9f:d8:be:4a:76:50:b1:41:
                    2c:cd:66:37:33:ed:63:25:d6:d9:aa:37:67:b3:9b:
                    99:36:00:11:72:77:50:d2:e0:ad:df:1e:04:a7:95:
                    6b:21:2e:39:b1:0d:cb:8e:2b:3a:83:f1:dc:01:b2:
                    44:a0:71:88:f5:96:cf:07:5f:f3:9d:08:3e:aa:22:
                    b2:ec:79:06:d7:09:c8:c2:c8:06:fb:0d:b6:6d:4d:
                    4e:a1:07:45:08:86:68:c9:86:43:ed:56:0f:e1:61:
                    6e:c8:31:18:e0:ac:18:a6:a7:71:9b:b3:d4:49:a9:
                    e0:c6:9b:ab:59:9d:c6:f6:c2:ac:e8:b7:cf:83:b4:
                    6d:69:3b:95:5d:3a:70:ac:07:4b:78:a6:c6:af:2b:
                    2c:d5:fe:a7:c3:5e:c0:01:0f:bd:63:37:c3:de:a3:
                    99:7d:cc:c7:e4:19:5a:c0:1d:db:f1:f7:fa:46:9a:
                    6e:b7:b8:a3:d2:91:9c:3d:af:41:80:db:b7:75:f4:
                    f8:0a:c0:2d:80:51:35:c1:fd:4a:cd:24:9e:0e:88:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:6A:C3:64:25:33:2A:F7:A1:8E:E5:49:A6:6D:67:1F:69:DF:CF
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/80C0240828DA11ED8CC40B86F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:6d:4d:8b:52:e9:e8:31:77:38:52:c4:37:62:f9:c5:05:c7:
         4d:5c:bd:d1:17:f1:95:4d:5b:a3:51:b2:2d:d4:85:88:da:00:
         ee:32:74:fc:73:8f:5a:e2:f0:ac:8b:b3:7e:53:83:25:eb:c5:
         6d:e3:86:cc:02:b4:bd:3e:1c:ea:37:be:c8:db:ca:07:fa:49:
         4e:5e:c2:19:7d:b6:88:ca:28:18:a9:b3:b0:64:df:e0:44:57:
         ae:13:e5:88:17:d9:ec:e8:08:0e:34:c4:a5:9d:12:32:31:b7:
         5f:13:7f:ff:d6:70:f2:89:1e:96:7b:41:61:f8:0e:ec:f5:b2:
         9e:c9:08:c3:51:b7:97:bd:f1:31:33:64:f5:6f:18:6c:4f:15:
         f2:a7:a5:cf:f0:92:1f:3d:20:24:bc:5d:f6:81:c6:69:76:d3:
         d0:63:6c:f5:4d:52:d0:a8:0b:b1:f9:3f:e4:dd:c8:9c:09:06:
         67:75:96:c6:99:20:ce:d7:26:94:d8:dc:95:e4:e9:a1:28:fc:
         cf:42:13:9b:30:28:68:2f:04:5f:48:04:cf:49:f6:8b:d1:4f:
         b5:e9:d0:cf:2b:f5:52:a7:e3:c0:80:6b:aa:e0:8e:1b:77:1e:
         c3:1b:05:33:e8:43:75:82:f6:c2:76:b1:38:16:cb:a5:79:34:
         86:1a:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org