Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8C75517EEA0511EC9E86B8D8F1222468.roa
File:                     8C75517EEA0511EC9E86B8D8F1222468.roa (raw, json)
Hash identifier:          593PNPLXOuKpk54/o4dZnna8FVXrxdUmk4KED7m9gb0=
Subject key identifier:   17:EE:12:5A:69:07:E2:69:5E:02:6A:41:40:88:2D:1A:2B:26:78:B2
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0559
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8C75517EEA0511EC9E86B8D8F1222468.roa
Signing time:             Sun 12 Jun 2022 04:10:09 +0000
ROA not before:           Sun 12 Jun 2022 04:10:04 +0000
ROA not after:            Mon 12 Jun 2023 04:10:04 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 12 04:10:04 2022 GMT
            Not After : Jun 12 04:10:04 2023 GMT
        Subject: CN=62a56721-256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:39:ec:24:eb:31:27:67:b2:9b:25:81:f7:
                    82:2e:95:d7:d5:0e:e7:a8:ad:91:b8:ae:65:d7:82:
                    35:ec:cc:b8:c1:4e:89:d9:90:08:cc:6e:bc:25:5b:
                    1a:c2:9f:17:24:71:7f:9d:df:d5:bf:94:7e:9a:70:
                    7e:08:03:62:08:1e:59:77:ad:00:f6:ab:b9:21:3b:
                    00:e5:7f:ac:44:87:86:2d:23:d9:b8:13:95:9c:8c:
                    32:41:02:78:35:12:0a:a5:a5:ff:6e:16:36:fe:1c:
                    8c:82:7e:d4:a7:cb:e2:5f:a2:5a:0d:57:61:19:90:
                    3e:34:e0:94:6e:ab:04:ef:5d:62:29:46:0c:91:88:
                    98:e3:02:ef:ec:19:66:14:c4:0b:2f:d9:95:1e:e1:
                    65:00:15:33:2e:83:80:50:bc:58:84:f3:76:03:38:
                    c7:35:b4:0e:f7:0a:b0:96:4a:91:74:fd:9f:28:bf:
                    5d:9f:46:bf:61:19:ee:08:71:9d:fc:69:86:3e:c8:
                    54:dd:51:2c:70:13:76:85:9f:8e:49:c7:3f:e7:b9:
                    ca:e2:1e:36:bd:d5:55:30:d7:5f:60:11:52:24:ef:
                    1e:6b:09:f7:b8:bc:f1:3f:b8:ba:e5:ff:1d:5a:f9:
                    2a:b4:5e:d4:af:76:d7:27:3f:4d:dd:f1:b2:d1:8b:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EE:12:5A:69:07:E2:69:5E:02:6A:41:40:88:2D:1A:2B:26:78:B2
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8C75517EEA0511EC9E86B8D8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ab:03:f2:44:65:56:e5:35:42:58:b3:fc:df:eb:76:89:8a:
         e9:88:eb:2a:5b:fc:52:58:51:dc:f8:39:30:03:0b:ac:ed:04:
         03:ed:93:fe:85:db:3f:62:7f:9d:8b:dd:c2:03:98:4e:fa:e8:
         4f:0b:68:64:1b:b2:6b:75:2c:7e:f0:37:32:bb:4c:46:d7:47:
         7d:a8:7d:ff:d4:62:8e:85:f9:86:c4:b2:93:b1:d0:29:0b:03:
         c9:95:df:9f:3f:b0:75:43:dd:2b:00:bb:78:be:da:90:6f:3e:
         6c:dd:47:db:92:fb:8e:5d:7d:ea:50:24:b6:91:c8:28:7c:a0:
         e4:a4:9a:b6:5c:47:d5:e1:33:55:42:65:76:30:3f:fc:ad:73:
         c7:f3:5b:da:35:64:e3:82:38:04:31:14:50:f3:59:1c:08:9f:
         d2:97:d4:85:85:de:4d:b7:58:6c:9c:9b:9a:10:39:20:1c:91:
         d9:8a:df:30:e9:1b:9f:e3:58:44:a2:c8:b0:98:0e:7c:18:d5:
         ee:a6:30:9e:19:4f:93:5a:0c:4f:26:0b:80:cb:10:90:d1:8f:
         3e:3a:66:19:09:fc:c9:05:9c:bb:e3:a9:2b:55:8e:55:6f:e8:
         4e:3c:67:43:ab:20:84:fd:83:b1:ae:06:cf:8a:a3:50:8d:3a:
         94:29:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org