Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C457A8AE019C11ED915CCAC7F1222468.roa
File:                     C457A8AE019C11ED915CCAC7F1222468.roa (raw, json)
Hash identifier:          fZrTMkxmfv24nhT0MGzjZQtrQjCLwQgvhP7P3PB/dDk=
Subject key identifier:   4C:42:2D:D6:0E:B0:AF:ED:B4:A9:45:B4:F6:F0:50:E2:3C:76:29:32
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0626
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C457A8AE019C11ED915CCAC7F1222468.roa
Signing time:             Tue 12 Jul 2022 04:40:34 +0000
ROA not before:           Tue 12 Jul 2022 04:40:29 +0000
ROA not after:            Wed 12 Jul 2023 04:40:29 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1574 (0x626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jul 12 04:40:29 2022 GMT
            Not After : Jul 12 04:40:29 2023 GMT
        Subject: CN=62ccfb42-9d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:4a:8d:ff:2a:88:2c:f3:2c:11:db:5d:74:
                    fc:69:ed:37:b5:34:aa:23:bd:04:ff:e1:86:1f:7e:
                    62:c2:03:ff:84:d0:3f:7e:ac:5b:c2:a5:58:cf:d4:
                    a0:5f:73:44:8f:9e:a9:e2:08:6f:34:a3:6a:27:d0:
                    21:07:ab:eb:6c:dd:e1:d5:a6:1d:fe:a4:98:28:20:
                    f5:51:f5:0b:91:cf:55:83:a7:bc:29:f6:66:c3:6c:
                    e8:de:02:be:9d:db:d3:01:db:4b:7f:17:cd:98:c0:
                    27:f7:24:43:de:3b:b6:ca:0e:7e:12:92:04:d7:c6:
                    ec:2a:44:1b:7d:67:ca:d9:11:33:52:0e:9c:40:85:
                    94:c6:db:2d:c2:ff:5e:00:18:87:c7:51:07:cd:dd:
                    7c:95:13:a8:42:49:8b:13:d9:68:db:75:b0:2a:7e:
                    a6:64:fd:ad:33:49:8d:72:37:5e:95:e6:38:41:70:
                    12:3a:d3:b2:ff:93:de:86:ed:ef:34:a8:40:65:f6:
                    6c:26:f0:28:69:66:ac:5d:63:e3:5b:25:43:a3:04:
                    64:d1:77:88:d2:53:d7:da:5f:0f:89:3f:fe:ad:2c:
                    5a:89:30:97:61:8e:19:b6:6a:a1:da:bf:1b:44:2a:
                    33:2f:3b:18:29:0d:2d:02:03:b5:60:94:e6:e8:2a:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:42:2D:D6:0E:B0:AF:ED:B4:A9:45:B4:F6:F0:50:E2:3C:76:29:32
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C457A8AE019C11ED915CCAC7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:89:31:61:9c:e8:31:17:1a:02:cc:e0:be:58:cf:8a:d6:b4:
         3f:b6:75:ab:d7:8b:be:df:f6:20:22:bd:4f:b8:0f:00:70:e9:
         02:59:57:27:3d:ff:44:3a:52:33:0e:93:dc:9e:0a:4d:77:78:
         0d:e9:df:06:6b:18:3d:40:06:4b:82:f7:5e:a6:3e:dc:a2:8b:
         b5:c2:83:16:c0:b2:7f:57:67:df:03:1f:12:c8:d0:cf:a8:ff:
         6a:aa:06:c8:7d:99:8a:10:0e:60:45:e3:0a:36:51:79:b0:90:
         9a:a5:69:09:76:1a:86:10:8c:90:01:05:ee:8e:8e:df:92:19:
         70:ad:67:8f:e1:40:e3:2f:52:e1:4d:8b:21:66:79:83:e8:29:
         a8:de:cd:3e:fe:a9:79:31:ea:95:ba:13:52:2d:38:45:cb:9f:
         75:08:a6:d8:4e:98:43:28:b3:c3:03:23:8e:60:34:ea:f5:3b:
         5f:56:90:69:3c:ac:d8:28:92:4c:d9:07:a8:5d:6d:bc:74:c8:
         3d:fa:54:95:da:99:43:70:2a:a0:8d:c3:36:0c:67:2e:99:17:
         9e:de:08:6e:59:e6:0c:4c:c4:33:eb:57:7c:d8:2e:e0:e2:20:
         8d:e9:b8:3e:0a:4b:24:c1:d7:e4:6a:90:eb:aa:b0:49:8d:f5:
         ea:39:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org