Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AADC3E08E09A11EC9587B87FF1222468.roa
File:                     AADC3E08E09A11EC9587B87FF1222468.roa (raw, json)
Hash identifier:          g8nA2/H1pAL+slI1IhnS9TP7l5MuIolWJB5s3TyKLjU=
Subject key identifier:   21:FF:B1:71:65:B2:3D:7B:88:5F:4C:13:DB:42:48:B6:12:6A:A6:88
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0506
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AADC3E08E09A11EC9587B87FF1222468.roa
Signing time:             Tue 31 May 2022 04:32:24 +0000
ROA not before:           Tue 31 May 2022 04:32:19 +0000
ROA not after:            Wed 31 May 2023 04:32:19 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 31 04:32:19 2022 GMT
            Not After : May 31 04:32:19 2023 GMT
        Subject: CN=62959a58-bad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:48:a6:6e:35:cf:22:0d:15:44:a0:e1:b4:
                    33:09:a4:08:c5:a4:15:e1:9d:2b:a0:8e:e1:c4:fa:
                    92:b3:a8:a0:2f:af:d6:f4:a4:16:14:86:24:e3:4b:
                    ec:fb:61:54:a9:9e:52:f2:41:69:60:d0:9a:55:37:
                    35:b6:5e:8d:ba:69:7b:86:47:ca:56:2c:14:cc:ea:
                    52:75:c8:55:47:2b:4a:df:2d:3f:b1:52:1a:bf:99:
                    e3:45:99:eb:fd:75:03:2e:e3:e4:a5:87:a5:85:39:
                    99:8c:a2:4b:12:f6:34:b9:9a:36:59:03:b1:b2:12:
                    38:16:2a:be:4b:23:49:75:0d:fd:bd:f0:a6:ef:5e:
                    1c:28:84:f7:b9:05:9d:46:68:e9:fe:e2:48:82:3d:
                    1f:b8:28:7f:5a:07:cc:70:cd:b0:59:d6:00:d7:0d:
                    98:7b:3c:0d:46:d1:57:60:64:72:2d:3c:19:8c:2f:
                    66:83:45:39:82:f0:aa:b8:bd:60:03:9a:27:d0:ce:
                    0e:c0:17:e0:95:87:70:af:5a:3a:c7:37:01:e9:8c:
                    21:de:96:3d:e4:f0:f9:f6:d9:26:df:56:eb:f4:e9:
                    7d:9b:56:2c:26:01:4c:70:a5:4e:e0:c0:32:50:71:
                    9b:89:5f:81:26:a3:fb:64:68:8c:f0:4c:5b:c6:d6:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:B1:71:65:B2:3D:7B:88:5F:4C:13:DB:42:48:B6:12:6A:A6:88
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AADC3E08E09A11EC9587B87FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:5b:31:7d:0b:5e:bd:d7:15:db:fa:3d:24:b1:f9:c6:8f:
         dd:35:12:3b:1a:14:47:4b:3d:29:c4:d0:61:7d:1a:03:a7:66:
         cf:58:97:db:7a:ce:ca:2a:8e:4b:c6:2f:2e:a8:b1:49:fd:c3:
         4f:70:0a:e1:b9:d2:1a:9c:44:55:08:2f:3e:43:13:8a:e0:c8:
         c5:1b:f1:d0:34:4b:72:bc:22:5f:39:59:b5:59:c5:82:99:69:
         31:53:6a:5b:53:e2:77:21:ce:ad:c7:8b:a7:a8:85:85:b3:3f:
         c4:9a:aa:35:31:20:48:ba:ce:1c:e0:75:9a:0a:cc:b0:be:0e:
         ad:3f:13:5c:71:1e:43:48:4c:db:82:3d:52:e5:50:62:26:2c:
         32:3a:f0:dc:6c:a2:fc:19:f3:5d:4f:42:14:4a:20:a5:0a:63:
         9e:a4:1b:c7:c9:21:ce:d0:06:e1:2a:7b:af:6b:a1:86:b7:44:
         fb:af:d2:0c:61:e0:17:45:2d:2f:b0:95:17:2b:08:b7:5a:e2:
         eb:96:15:b9:e9:87:77:a7:ff:69:a4:d3:69:26:77:e8:b6:5c:
         38:b0:f4:4b:cd:97:9f:a0:79:d8:b5:07:2d:b3:67:00:c5:0b:
         f1:d4:92:31:eb:0c:ff:70:17:8d:68:76:75:7d:da:1c:72:a9:
         48:d1:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org