Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9B01541CC51711ECB14605F5F1222468.roa
File:                     9B01541CC51711ECB14605F5F1222468.roa (raw, json)
Hash identifier:          1tqZFznFBYm7Un7dGPjuth3MpV+3rBXiEI2oHsL/Vx0=
Subject key identifier:   75:5D:B6:C8:6A:D5:94:76:F2:D0:B6:F7:B1:D4:7E:EB:CC:FE:AB:5B
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       041B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9B01541CC51711ECB14605F5F1222468.roa
Signing time:             Tue 26 Apr 2022 04:16:12 +0000
ROA not before:           Tue 26 Apr 2022 04:16:07 +0000
ROA not after:            Wed 26 Apr 2023 04:16:07 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr 26 04:16:07 2022 GMT
            Not After : Apr 26 04:16:07 2023 GMT
        Subject: CN=6267720c-f45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:25:1b:e5:69:ff:08:8b:ac:e9:7f:6d:a4:
                    c7:14:15:93:fc:1c:28:c8:82:7a:90:f8:e1:13:48:
                    2e:c0:b6:96:5c:45:f8:d9:ad:64:75:6b:e6:94:d3:
                    be:71:a8:9b:94:8e:7a:65:51:52:45:9d:1d:71:34:
                    12:59:38:05:fa:42:22:20:19:e1:7a:6c:f4:ca:e0:
                    12:70:7d:9d:69:34:be:71:e4:15:1a:ff:bc:8b:93:
                    a3:07:8d:3e:39:06:0c:98:4c:95:4d:4a:67:4d:fd:
                    2e:33:44:97:d7:db:84:d9:56:98:33:55:4f:fd:4b:
                    39:7c:62:31:4b:b9:b0:f7:56:db:ee:7d:d4:17:30:
                    9b:bf:e3:05:d4:83:93:90:bc:92:58:79:8c:94:6f:
                    8d:aa:2c:b6:87:7d:de:54:18:4d:88:48:00:6a:5a:
                    71:f5:4b:68:2a:f5:3a:1b:51:fa:b7:a4:e4:5b:16:
                    38:db:65:04:c5:dc:a4:0f:86:20:a9:74:4a:d1:71:
                    79:f8:7c:58:80:ce:cc:22:79:54:31:ee:43:46:70:
                    1c:9b:fe:54:8a:6d:75:1a:d6:e4:9b:0f:64:46:fd:
                    e2:74:c7:e7:4a:b9:6e:fc:da:43:4d:2e:dc:56:42:
                    fb:ea:20:df:da:cf:04:86:6e:4d:f9:89:87:cb:44:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:B6:C8:6A:D5:94:76:F2:D0:B6:F7:B1:D4:7E:EB:CC:FE:AB:5B
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/9B01541CC51711ECB14605F5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:c6:d1:fe:fb:ac:cc:02:e7:bc:eb:a0:d9:d7:8d:ee:87:
         28:be:74:25:71:6f:98:ef:8d:6c:a6:56:cb:43:a5:80:0b:74:
         62:7b:16:5d:f6:86:6a:ed:be:a0:e0:59:ed:9e:ff:89:76:1d:
         88:fa:9d:ec:cb:af:1f:55:f3:b6:53:07:99:bf:c5:29:5e:f9:
         e2:46:48:44:bc:32:d1:59:08:00:dc:12:e9:87:e4:61:04:0a:
         65:89:6a:bf:3a:ff:20:84:48:c4:ac:7f:fa:ee:e6:cb:07:fb:
         df:88:4a:b7:32:5f:3c:b0:f0:ef:e3:9d:2e:de:34:c5:61:67:
         3f:7e:cd:16:b6:a1:23:14:90:8a:ed:c0:37:1f:62:e6:1e:d8:
         74:3c:94:69:09:48:bb:48:86:4f:68:55:e1:cf:7c:2c:03:00:
         f4:f0:6e:17:c1:46:19:1b:f7:61:1b:1a:78:69:71:87:0a:d1:
         d7:97:93:9d:e9:ef:2e:30:97:6c:e3:8c:78:ae:f4:ce:c6:92:
         16:d4:c7:e4:f5:58:90:55:5b:72:13:98:a1:14:ce:2b:48:ff:
         1b:8f:d5:8d:eb:76:73:34:b4:0e:f9:c7:22:7a:f1:fd:2e:84:
         ee:df:62:db:51:d5:cb:79:f0:f7:11:f7:a4:f5:0b:aa:fd:a1:
         0a:73:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org