Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/99475C68F80F11EC8E4137EAF1222468.roa
File:                     99475C68F80F11EC8E4137EAF1222468.roa (raw, json)
Hash identifier:          ppB1tMKhgacAJlJp3qYNidsbp8UE6I7afHFfXKXrOOk=
Subject key identifier:   21:93:47:F9:D3:E4:02:75:CE:FA:48:1C:56:A3:8B:BC:2F:ED:1D:4B
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       05D4
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/99475C68F80F11EC8E4137EAF1222468.roa
Signing time:             Thu 30 Jun 2022 00:57:22 +0000
ROA not before:           Thu 30 Jun 2022 00:00:17 +0000
ROA not after:            Fri 30 Jun 2023 00:00:17 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 30 00:00:17 2022 GMT
            Not After : Jun 30 00:00:17 2023 GMT
        Subject: CN=62bcf4f2-30bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:c2:89:89:c4:c1:56:ec:e9:f3:e0:18:52:
                    a0:c2:e5:69:8b:a4:04:f7:29:f1:1e:e8:e7:99:a8:
                    e7:82:cc:f1:56:d4:50:7e:d4:ec:9c:a6:c3:df:d6:
                    c0:1c:42:bb:57:e7:d0:92:9f:42:cf:39:96:57:e4:
                    39:17:fb:bc:e9:9e:79:90:04:6f:7d:69:d5:4c:40:
                    7f:3a:75:e1:9c:1a:15:89:1c:a8:5a:4d:e1:a3:ad:
                    1d:c8:a1:74:21:21:f6:00:fc:33:f9:7a:7b:a4:08:
                    2f:7f:07:d1:a0:5a:67:0d:25:4a:bb:a7:84:85:c9:
                    4d:5b:e5:72:2a:f4:6a:78:2f:1b:dc:62:f1:f6:5d:
                    70:c1:3e:8b:97:28:f5:f1:af:a0:1b:34:09:9e:ae:
                    b8:a6:0a:87:0a:76:f2:ea:3e:39:fb:12:f4:77:db:
                    99:36:da:ac:38:0c:4b:d8:20:d8:f0:61:9c:8a:bf:
                    22:fb:82:20:bd:cd:da:a1:b1:4e:a7:eb:b8:75:d4:
                    72:86:1d:3a:aa:dd:de:32:70:2c:5b:c6:39:e7:6e:
                    ce:fe:18:cd:2f:0e:73:39:fe:7c:33:0a:d8:22:1d:
                    87:e4:b7:f4:11:6a:79:dd:b9:6d:fb:91:af:3f:22:
                    44:de:a9:e1:84:d1:b9:1b:50:11:ea:be:ec:19:71:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:93:47:F9:D3:E4:02:75:CE:FA:48:1C:56:A3:8B:BC:2F:ED:1D:4B
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/99475C68F80F11EC8E4137EAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:88:a4:19:77:e4:53:33:d3:31:ec:10:47:90:ec:3b:bd:
         85:4d:a7:f6:4c:16:f8:48:e4:e6:4a:3d:4e:c2:51:95:32:b7:
         05:c0:5a:e1:87:de:47:e8:17:b1:4a:33:1d:7d:95:ec:bf:50:
         15:f8:65:b9:c3:41:a8:ff:77:65:9f:bb:7b:8a:98:c2:19:07:
         ce:5d:55:28:fa:c7:8a:e7:17:e0:11:ee:12:12:90:c4:a8:01:
         2c:55:d0:48:67:cb:02:d1:32:71:e6:06:5a:a0:2e:a6:0e:ba:
         86:da:3a:89:46:4b:27:6f:90:de:ec:fa:0f:1f:a8:01:89:8a:
         3e:17:9b:86:e5:23:ac:6a:d3:6b:76:27:3a:36:5a:ba:9e:21:
         07:b9:b3:ef:0b:19:3d:d5:7d:91:4a:50:e7:95:3d:b1:25:89:
         aa:5b:9e:fa:4f:72:41:13:e1:42:dd:52:93:9c:28:5b:82:f2:
         01:5c:f5:db:71:a6:2d:dc:b7:73:7a:6a:9f:8a:92:6f:a6:6e:
         81:9c:4e:45:22:30:47:14:d3:2e:0d:8a:ee:52:6e:25:5f:43:
         42:9d:25:ef:51:e1:7f:5f:d8:19:5f:81:21:85:8b:8b:eb:b6:
         88:11:48:70:d4:19:83:69:5c:e2:37:2d:0f:90:4d:4c:b9:1b:
         34:84:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org