Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AC88C3E2AE3C11EC8F61079B5A40D577.roa
File:                     AC88C3E2AE3C11EC8F61079B5A40D577.roa (raw, json)
Hash identifier:          c2MmSrbUHjSHq+fjiMNfUKpSgRPeVM5TJmGKFu1LbJU=
Subject key identifier:   18:07:40:6C:90:E3:2A:5D:13:15:79:DE:80:26:31:69:75:53:66:2E
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       035F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AC88C3E2AE3C11EC8F61079B5A40D577.roa
Signing time:             Mon 28 Mar 2022 02:13:36 +0000
ROA not before:           Mon 28 Mar 2022 02:13:32 +0000
ROA not after:            Tue 28 Mar 2023 02:13:32 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863 (0x35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 28 02:13:32 2022 GMT
            Not After : Mar 28 02:13:32 2023 GMT
        Subject: CN=624119d0-b0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:6c:87:d8:e0:df:f8:27:33:aa:b1:4b:65:
                    54:64:cf:ff:23:6c:f9:55:47:6a:0a:89:4a:68:ea:
                    5b:13:4d:23:c3:26:65:1f:49:e1:e8:1e:7a:2c:85:
                    ed:1d:a5:66:b7:83:76:19:e0:d0:2a:84:7c:03:54:
                    f4:dd:d5:16:ff:a2:d0:1b:71:50:10:fa:70:ac:66:
                    b2:0b:ed:44:21:01:9d:1c:1b:28:0b:ea:b9:b9:95:
                    3f:de:b1:0c:54:e5:45:7e:b5:47:60:b0:16:df:fe:
                    24:10:f6:3f:42:df:dc:4d:39:e3:ea:f2:00:9e:cc:
                    a2:22:91:a4:67:0f:e8:61:80:16:02:13:54:d9:ba:
                    06:e7:82:35:cd:ec:ff:7c:7c:7f:74:93:14:5a:42:
                    04:70:2e:4c:b0:8a:62:29:a6:69:d8:0f:69:bf:85:
                    a9:68:59:b0:2c:78:9e:f9:c4:63:00:85:5c:08:29:
                    6a:90:61:15:b5:c1:7f:b4:08:68:1d:e5:c0:2c:52:
                    34:56:9e:16:15:8e:f0:d8:e3:86:52:d6:3e:b7:d1:
                    0d:3d:4f:35:2e:13:02:8f:e7:7f:4a:26:26:dc:eb:
                    22:81:fc:d7:7e:3f:8b:b7:63:80:68:0e:1f:ee:af:
                    3c:9e:d8:49:1f:ab:d1:2e:81:ed:c9:96:7f:08:b2:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:07:40:6C:90:E3:2A:5D:13:15:79:DE:80:26:31:69:75:53:66:2E
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AC88C3E2AE3C11EC8F61079B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:cc:95:1c:e8:8f:fd:65:a4:f7:ce:b9:9a:32:7a:21:68:d8:
         2b:93:96:4c:ed:56:ba:d2:04:ed:e6:77:b8:26:c1:45:96:bb:
         ee:4f:4f:3f:b0:ed:ad:f5:50:36:fb:4b:6f:a6:7b:c5:2a:d1:
         d4:d7:2c:b4:b9:bf:27:86:d5:91:9f:60:22:75:b8:ec:53:ed:
         fc:da:c8:25:27:d4:a7:c8:75:40:3d:5c:b7:a7:2a:97:13:c4:
         aa:c9:2f:d3:d2:9d:12:dc:c3:04:83:f8:ec:28:11:1d:fb:94:
         73:9d:c9:e1:3d:5b:0b:bf:5d:e8:d5:ef:32:35:b8:bb:81:78:
         b0:c8:f1:25:77:6c:7d:04:9f:40:2c:cf:fd:27:72:fe:db:8d:
         25:ad:68:ff:08:98:e1:ef:b1:eb:2c:3a:c4:d5:8d:54:e4:a5:
         f9:b5:a7:eb:a0:e2:2d:a9:d2:8c:5e:85:2c:83:95:ca:4e:76:
         c7:f3:e7:72:f3:12:ba:8b:19:04:68:f5:b7:33:0b:89:44:5b:
         16:49:54:5b:8f:20:a1:30:2d:68:f2:d5:8f:f7:b3:dd:f8:4d:
         97:d4:b0:03:55:0a:57:c2:d7:d0:14:9c:33:8f:ad:76:c8:39:
         7b:1f:2b:76:1d:f7:5a:07:63:f3:05:e3:d1:da:0a:a8:cf:7c:
         a4:57:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org