Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/81C33A3CCB3F11EC9CBA9CC8F1222468.roa
File:                     81C33A3CCB3F11EC9CBA9CC8F1222468.roa (raw, json)
Hash identifier:          UW0koUHGGgijj12+kmCNUiiOr8iLqJ3Rmg+RpB7ASa8=
Subject key identifier:   1A:90:45:20:A4:75:7E:29:C3:8F:F0:20:04:F7:8A:FD:1A:2E:88:C1
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       044F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/81C33A3CCB3F11EC9CBA9CC8F1222468.roa
Signing time:             Wed 04 May 2022 00:16:56 +0000
ROA not before:           Wed 04 May 2022 00:00:52 +0000
ROA not after:            Thu 04 May 2023 00:00:52 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May  4 00:00:52 2022 GMT
            Not After : May  4 00:00:52 2023 GMT
        Subject: CN=6271c5f8-c8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:6c:8c:bd:31:ab:24:5a:8f:ac:cc:f0:b8:
                    70:b0:19:03:a2:3f:87:41:98:71:66:b3:8d:57:31:
                    b1:19:79:6f:64:8a:b9:35:9f:fb:63:1c:29:df:94:
                    67:1b:d7:40:86:f9:d4:8a:65:d5:5f:23:f6:a7:bd:
                    46:86:4d:8f:ad:28:91:e0:7f:07:1d:f0:be:31:e2:
                    d9:d4:f2:2a:8f:68:1e:e6:e1:01:a3:07:f1:e0:96:
                    a7:59:d5:c9:f3:eb:19:54:c2:16:74:50:25:10:9e:
                    e8:38:22:02:68:66:ba:d3:18:3b:7d:58:94:38:79:
                    2b:bb:da:44:1a:41:f4:e5:d0:f4:87:75:6b:11:a7:
                    3e:b8:eb:c4:fd:94:bb:f2:f8:66:47:c2:fc:ca:11:
                    2c:88:76:c7:d8:7c:a2:bd:1d:21:4c:32:51:48:3e:
                    ae:c3:56:cf:a3:ea:9b:b9:21:4c:b9:01:b1:d2:8e:
                    cd:9a:5d:db:61:cc:cc:d2:50:38:ae:01:4c:03:aa:
                    4b:12:6f:76:04:e7:11:34:3b:20:3f:29:4b:62:e8:
                    64:a3:56:ac:45:76:40:82:aa:b0:d0:c3:c3:c4:77:
                    ce:5b:b3:7d:87:8e:0b:f3:a2:3c:93:ce:1f:11:03:
                    47:2a:5e:73:6b:43:8b:8b:44:72:28:64:e3:d7:78:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:90:45:20:A4:75:7E:29:C3:8F:F0:20:04:F7:8A:FD:1A:2E:88:C1
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/81C33A3CCB3F11EC9CBA9CC8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:07:bd:78:74:9e:8d:0c:6c:f4:e2:a7:6e:9c:0a:24:b0:
         47:7b:98:ac:4c:f8:7e:e7:4b:8e:65:c8:e5:b0:a1:bc:98:e0:
         82:81:5f:ef:d8:b6:03:8c:60:72:58:71:54:ab:7e:de:0d:e0:
         eb:e3:ea:a1:04:49:98:0d:f0:41:49:c1:1f:8c:20:b8:fa:ba:
         72:94:a8:cb:e9:2c:39:77:6b:f7:9d:1d:74:95:af:9f:4b:0a:
         90:ea:a8:d5:4e:b8:5b:4a:1e:44:d0:cb:8b:8b:bf:91:c5:19:
         2c:2f:86:79:d5:33:44:71:55:47:a0:0c:86:cc:ee:d8:1f:c7:
         77:a1:bc:3b:ec:bf:ef:fb:17:28:aa:da:5e:cd:3f:27:7d:8f:
         ff:a9:8a:1c:b2:00:29:1a:b7:cf:95:72:de:4f:ae:16:c8:72:
         ae:c0:7f:b8:03:f3:a0:58:5f:eb:44:fc:57:0c:6c:71:75:09:
         1d:22:17:3c:72:fc:d2:8c:f8:cc:36:b1:90:66:6b:2c:1d:54:
         ef:45:11:0f:af:1c:82:63:23:2f:48:6d:ef:df:6d:6f:e0:9f:
         32:74:3f:ae:b2:61:0d:43:4c:d9:b5:ca:cf:46:93:37:e0:a3:
         02:cc:c9:1b:48:a9:65:67:78:c2:dc:02:22:cc:2c:42:c7:34:
         f4:7f:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org