Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/922FE7E88BA311EC9568F4785A40D577.roa
File:                     922FE7E88BA311EC9568F4785A40D577.roa (raw, json)
Hash identifier:          GUOg6aL0chZHlI7cxFybUmC8rpz2jvqAoucZF0ytnic=
Subject key identifier:   A0:F4:86:E7:AF:A7:4A:1F:C5:B9:00:A9:6D:D6:9C:13:A9:05:92:14
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       027C
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/922FE7E88BA311EC9568F4785A40D577.roa
Signing time:             Sat 12 Feb 2022 01:31:59 +0000
ROA not before:           Sat 12 Feb 2022 01:31:55 +0000
ROA not after:            Sun 12 Feb 2023 01:31:55 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 12 01:31:55 2022 GMT
            Not After : Feb 12 01:31:55 2023 GMT
        Subject: CN=62070e0f-76ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:91:a5:fe:4d:95:af:f9:ea:b7:48:5b:e8:
                    6f:28:3c:c7:d6:9f:1a:af:d3:4c:8b:cf:ad:95:3c:
                    5d:cf:2d:c0:7b:c3:11:eb:f8:ec:67:60:f1:05:5a:
                    2c:60:c6:c0:f3:c2:fe:96:8c:e7:74:d5:3c:54:4c:
                    a0:15:2c:53:00:54:7b:a3:f8:7c:df:4a:3b:bd:ad:
                    9e:52:9f:63:b0:06:f4:83:d0:4e:00:b6:80:8a:cc:
                    c0:c2:58:cc:d0:aa:70:e2:e3:3c:9a:45:a1:2c:fc:
                    4a:1c:d4:e4:fe:b3:77:59:65:2c:a1:13:4d:cf:6f:
                    ef:5d:32:dc:21:e2:73:18:b0:37:4e:84:5f:24:fe:
                    1b:13:38:d9:90:4f:92:01:d5:bd:59:b8:62:11:a3:
                    81:96:54:51:0e:f2:6d:c7:cd:c3:4f:e0:6e:24:62:
                    35:b3:95:91:4c:17:14:1f:2c:e7:73:f0:46:c7:8c:
                    59:7d:51:0d:8f:f5:72:fb:03:47:16:2a:5a:10:2e:
                    af:ec:52:b9:8a:21:83:36:39:ce:3f:0a:b6:d8:e4:
                    e5:55:2b:73:67:ad:a4:09:3f:39:c2:13:92:b5:5b:
                    7f:4f:41:28:1d:a6:00:3c:0b:97:ab:79:a6:5f:ba:
                    29:e7:38:3f:73:20:b5:fc:f0:1b:b4:e8:02:c0:96:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F4:86:E7:AF:A7:4A:1F:C5:B9:00:A9:6D:D6:9C:13:A9:05:92:14
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/922FE7E88BA311EC9568F4785A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:2b:a0:f2:46:94:79:2b:3b:ee:cb:49:23:cd:35:b2:35:
         8e:08:63:e0:6f:79:ac:d8:66:69:f9:50:7a:bb:96:e4:5b:9e:
         ef:4a:d8:c3:20:c6:4d:d1:2c:6e:21:bf:f1:5a:23:54:14:7d:
         0f:c9:e5:ed:1f:14:b2:a1:af:72:ec:56:d8:da:d5:b3:b6:38:
         35:58:c5:f4:6b:9a:04:7f:05:a4:5a:6d:45:d3:e2:54:d6:02:
         79:ac:d1:30:a4:64:3b:cf:75:d5:c4:e3:f9:48:63:43:79:ec:
         dd:34:ac:49:8d:9f:7f:b6:ac:fb:b2:39:41:d0:45:77:b5:73:
         12:75:56:e6:b7:68:24:ea:49:71:17:4a:af:89:5b:3c:8a:e7:
         ae:13:bd:cc:c7:d8:ef:79:50:97:46:87:d9:bb:55:71:7b:da:
         d0:17:8d:87:6e:41:e4:a4:3c:39:19:30:e7:01:42:96:e7:84:
         1e:75:a2:e9:3c:11:78:b4:ee:15:b1:f4:a2:d4:ff:f8:b6:04:
         e8:3d:97:ec:98:a1:bf:d0:7f:8e:20:75:b4:32:2f:9b:33:29:
         a4:cf:f8:0c:30:f8:60:aa:43:8b:77:ec:c8:df:65:29:3c:c7:
         05:d0:23:08:8f:27:a0:9c:e5:05:18:94:5b:dc:4a:98:a0:e8:
         d6:66:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org