Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A80EF26A324311EDA614D3D0F1222468.roa
File:                     A80EF26A324311EDA614D3D0F1222468.roa (raw, json)
Hash identifier:          e4Ijad6WUQXofgDMyeCdUVIm1x8Z1uMeviYnnEJlhH8=
Subject key identifier:   A8:E6:D4:F6:F7:79:F2:6E:0A:99:E4:09:7D:98:38:16:13:4F:66:EA
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       06D4
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A80EF26A324311EDA614D3D0F1222468.roa
Signing time:             Mon 12 Sep 2022 02:36:08 +0000
ROA not before:           Mon 12 Sep 2022 02:36:02 +0000
ROA not after:            Tue 12 Sep 2023 02:36:02 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep 12 02:36:02 2022 GMT
            Not After : Sep 12 02:36:02 2023 GMT
        Subject: CN=631e9b18-f018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:00:22:da:db:cd:5e:ac:41:e1:80:f3:cf:
                    53:8f:5d:f6:a6:6f:d7:01:f0:d0:c5:56:33:13:5a:
                    6b:c5:df:a7:d6:99:ce:33:c6:ef:84:0d:e6:6b:a8:
                    c3:18:e8:ca:ed:11:c3:9b:67:32:d3:de:43:db:1d:
                    3e:ad:e1:3f:9c:b7:8e:13:18:81:7a:c3:51:31:df:
                    3d:78:ae:c6:ef:28:6a:dd:10:85:6c:02:e7:d0:60:
                    6b:03:71:51:be:3c:c4:48:0a:02:af:82:f1:73:d5:
                    53:5e:a0:41:0c:0a:e6:d9:f3:69:9f:4f:ec:2f:d6:
                    06:82:db:43:aa:62:77:2c:e5:09:74:bd:13:92:d8:
                    e7:da:99:e0:db:43:26:a9:06:70:7d:3a:7e:72:be:
                    e2:d3:79:b4:3c:8b:0a:d5:c1:57:2e:25:3e:4d:7a:
                    c7:40:64:48:f0:cb:4e:b4:3b:17:e4:0d:d3:74:2b:
                    d4:f1:45:b7:fa:f6:72:0e:68:8f:8f:93:34:7e:36:
                    9c:b1:dd:c6:e6:fb:2c:21:cd:d4:e0:ba:3e:a1:e4:
                    75:de:54:e0:71:b1:2b:fd:4c:f7:72:7d:d2:34:78:
                    16:54:35:2d:40:bc:50:78:99:da:5c:1b:36:64:5c:
                    f4:17:55:7e:09:07:ba:a0:48:99:69:70:ea:2e:5a:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E6:D4:F6:F7:79:F2:6E:0A:99:E4:09:7D:98:38:16:13:4F:66:EA
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A80EF26A324311EDA614D3D0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:51:bf:e5:72:bb:64:82:e8:92:41:85:18:d6:9b:5b:a6:49:
         13:ac:ac:c0:53:9d:e3:f3:35:59:a4:0c:7e:62:92:fe:f2:b1:
         88:f2:0d:2a:b7:c5:ef:12:2b:69:91:0a:1f:74:40:d8:e6:5b:
         2e:f4:80:d2:19:66:3a:c0:24:2a:6e:0b:0f:99:b0:ff:75:fe:
         ab:e6:9d:fc:96:8f:58:c5:00:4e:96:cd:a8:dc:7e:79:1e:76:
         73:8b:eb:3e:e4:bf:83:9a:9d:d7:91:39:02:51:c8:85:2e:7e:
         e5:86:a0:75:dd:d5:8a:76:4a:24:a2:46:bf:86:32:8c:df:2d:
         34:c9:8c:dc:6f:46:2d:1a:d1:a3:80:4c:ef:a2:73:8e:df:b7:
         fc:64:30:c2:ff:86:0f:91:29:e3:a4:08:b9:f8:86:a9:f0:d5:
         6a:d7:06:23:50:49:bf:07:b3:36:7b:e1:38:67:11:27:52:5d:
         1d:fd:46:e6:94:88:8a:21:c3:ee:14:51:0e:cb:4b:40:4d:b2:
         20:4a:97:68:4a:e9:02:8d:34:1d:f0:67:fd:85:67:78:cd:0e:
         2d:3a:b8:4a:58:57:e3:33:a0:e7:ec:db:ad:43:31:f6:98:94:
         b6:90:a1:4e:44:9f:e5:7b:73:f0:78:84:94:89:1d:a9:ab:03:
         0c:66:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org