Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8B06D330AF0411ECB5A825E55A40D577.roa
File:                     8B06D330AF0411ECB5A825E55A40D577.roa (raw, json)
Hash identifier:          2kel6Nu74hXxDCiyg/NADaWfcSAKMJPm3JBj1to/R+c=
Subject key identifier:   75:41:60:C5:D6:F4:08:A8:F7:BE:23:1A:AA:8B:EC:83:15:22:93:2A
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0364
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8B06D330AF0411ECB5A825E55A40D577.roa
Signing time:             Tue 29 Mar 2022 02:04:19 +0000
ROA not before:           Tue 29 Mar 2022 02:04:15 +0000
ROA not after:            Wed 29 Mar 2023 02:04:15 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 29 02:04:15 2022 GMT
            Not After : Mar 29 02:04:15 2023 GMT
        Subject: CN=62426923-4266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:9b:25:17:3c:2c:c2:39:c0:ef:00:30:e2:
                    b3:57:98:39:d8:ee:55:bf:c2:76:66:74:c9:ce:88:
                    19:1e:cc:e6:6c:81:36:6c:ad:19:fd:2a:40:36:9b:
                    e3:d8:cb:ad:3c:d0:d1:55:50:b2:b2:51:10:53:1c:
                    b7:b6:b7:20:ba:47:8e:0c:62:77:4a:4a:0e:6a:6b:
                    68:49:ee:6f:5e:8a:11:31:9a:06:d8:03:60:24:cd:
                    76:08:a7:8a:39:0c:79:38:14:15:83:0b:04:07:0e:
                    8f:d4:db:f5:0c:72:85:d7:1a:84:06:1c:62:b3:64:
                    95:5b:3b:28:d5:56:ab:64:50:ab:89:2e:dd:5f:b6:
                    70:ae:5b:6e:f6:48:d9:a8:e2:80:ce:97:c4:2d:f0:
                    bb:2f:07:2b:37:41:86:e2:9e:e0:45:a3:1e:59:78:
                    14:69:b7:a8:55:a0:a2:1c:dc:22:71:01:28:dc:d9:
                    fb:cc:8e:77:68:97:94:95:93:c7:d1:6b:a5:30:b7:
                    9d:64:06:63:76:32:7b:e7:83:b7:3a:4e:fe:0a:e9:
                    c2:fe:76:01:dc:5f:ce:0d:d6:e9:bf:de:3a:05:be:
                    6a:9a:5c:a5:48:6b:07:a3:ae:a5:d6:f2:96:77:96:
                    52:1b:89:4a:25:56:77:17:51:66:cc:ae:f1:d8:43:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:60:C5:D6:F4:08:A8:F7:BE:23:1A:AA:8B:EC:83:15:22:93:2A
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8B06D330AF0411ECB5A825E55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:61:ee:4d:8f:f5:13:78:47:ab:2a:70:ec:c0:b5:b3:93:
         3b:51:59:79:aa:e3:89:35:e8:d8:df:36:de:dd:0d:9f:2e:23:
         02:d5:55:c5:34:ab:ce:e7:44:88:d1:3a:00:2b:13:80:c8:fa:
         1d:a3:60:2b:1b:8d:fb:5e:44:d3:04:ef:d0:d1:4e:3c:12:e7:
         64:d9:be:81:5c:70:7b:a6:b4:f9:3f:97:c8:89:ca:d4:5e:63:
         06:d3:7f:e3:1c:2a:4f:c3:24:39:74:48:d0:17:44:c4:c9:44:
         99:d2:1f:7a:d4:3f:82:e0:a2:1f:ef:5b:38:da:07:2c:92:42:
         55:01:b6:52:b2:34:37:e3:fb:21:60:40:03:e1:30:38:54:4a:
         08:93:e8:bb:86:c3:42:78:64:a1:27:b5:66:04:d6:f3:1e:44:
         b4:7d:45:4b:73:b1:cf:0f:b5:df:1d:d0:71:14:73:2c:25:c0:
         39:1d:cc:c8:3c:0d:9b:8a:fe:82:d8:8d:20:b2:07:6a:01:bc:
         84:af:4c:86:a4:45:bb:de:7f:42:9a:8d:3a:24:dd:b4:07:07:
         b5:2a:2d:19:8d:09:74:c5:04:45:2c:27:4c:53:50:c8:c8:37:
         57:84:66:07:7c:52:59:11:9c:0a:e1:17:b1:67:94:0d:9b:f8:
         7d:87:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org