Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B70E0ADAB6DD11EC825B926E5A40D577.roa
File:                     B70E0ADAB6DD11EC825B926E5A40D577.roa (raw, json)
Hash identifier:          UGEFjszDWufseVRQrJHumDypRhJHbk3N1nhPQ9hyWfw=
Subject key identifier:   FE:81:29:5D:23:BB:58:36:CC:2F:15:A8:6B:37:8E:98:99:2B:14:90
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       03A3
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B70E0ADAB6DD11EC825B926E5A40D577.roa
Signing time:             Fri 08 Apr 2022 01:46:32 +0000
ROA not before:           Fri 08 Apr 2022 01:46:27 +0000
ROA not after:            Sat 08 Apr 2023 01:46:27 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr  8 01:46:27 2022 GMT
            Not After : Apr  8 01:46:27 2023 GMT
        Subject: CN=624f93f8-3954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:78:5b:36:c0:74:e5:38:a6:2b:08:77:e2:
                    6d:87:45:7e:99:b7:7b:9c:ba:3b:10:1c:71:73:e4:
                    ab:06:31:52:7d:60:90:af:4c:42:0b:b3:64:7d:ac:
                    07:8b:a5:26:38:24:d7:b5:3d:f0:2e:f0:db:6f:7b:
                    2e:35:2e:41:29:d0:76:6e:80:2d:c0:8c:5b:4c:57:
                    f9:0d:26:00:46:88:14:98:19:13:a1:bb:cd:cb:e0:
                    21:24:f8:c1:58:f2:1c:a3:76:6b:ad:10:22:e9:a5:
                    a5:33:f6:46:e3:f8:d9:c7:3f:8f:2a:ac:e1:06:4c:
                    c0:d1:0f:76:c1:11:2d:81:ce:fa:41:a1:15:4e:2a:
                    2c:ac:72:41:12:c8:21:c4:9b:b7:8d:e5:8c:52:94:
                    f6:e9:c0:b1:24:5a:62:54:f3:3b:df:3f:e8:0d:bf:
                    5f:83:5a:c1:56:60:e4:25:02:89:b6:7b:5f:cd:c2:
                    a7:95:b6:f4:65:13:8e:65:ff:8e:55:33:c6:e1:e9:
                    0d:1e:40:f3:0e:79:b6:b6:0f:c9:e2:26:77:0e:d4:
                    4a:10:d7:08:a4:ec:d2:3b:47:60:c4:70:df:92:9f:
                    43:02:b9:a9:0b:f2:84:6a:78:90:f0:7f:ad:82:30:
                    f6:76:5d:ae:49:e4:78:45:94:36:03:07:15:8a:b9:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:29:5D:23:BB:58:36:CC:2F:15:A8:6B:37:8E:98:99:2B:14:90
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B70E0ADAB6DD11EC825B926E5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:bd:f7:24:2d:67:1a:86:7a:47:27:1d:ae:8e:d4:51:3a:
         8f:77:24:4d:b9:bb:67:7c:41:58:d2:80:4c:5e:be:7a:18:74:
         42:09:2f:df:4a:1e:fd:6b:a6:84:15:d4:d8:f5:e2:8d:79:22:
         f5:4d:97:dc:48:fc:7c:15:5d:19:9f:86:f2:61:ea:12:47:b7:
         cb:3c:33:ad:10:8b:ca:aa:13:20:67:b3:91:a4:f8:41:7c:d3:
         d3:eb:c0:4c:76:67:ca:3d:93:15:e8:72:3b:f8:a2:b5:be:73:
         02:a7:1e:07:d5:b5:4a:c6:62:03:7b:de:d4:ff:e7:7e:02:0f:
         64:77:29:6e:62:a0:c5:80:bd:c8:e5:52:b3:03:42:b6:58:1f:
         7a:a7:ef:03:04:61:64:b2:3c:37:dc:07:a2:a5:9f:d6:9a:fc:
         6c:56:3f:e7:e3:e6:ea:24:86:d9:83:dd:89:14:89:79:49:0b:
         9e:2a:a7:1b:4c:45:70:85:c7:38:d4:8d:7a:0e:de:3c:e6:f1:
         97:5c:fd:99:79:1f:e7:be:0b:fb:eb:9b:a2:57:56:2a:05:e5:
         4e:40:54:49:be:e1:a7:73:02:d1:27:41:10:a2:2a:01:44:54:
         fd:a3:95:52:2d:76:3a:41:82:b9:ba:ef:35:a5:76:2c:fc:99:
         e5:4c:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org