Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C91E546AEEB311EC8DDC12B2F1222468.roa
File:                     C91E546AEEB311EC8DDC12B2F1222468.roa (raw, json)
Hash identifier:          xgnYpFvzH1wsANcASjASG7l4DVTFE1+4CNwf5HiADb0=
Subject key identifier:   EC:A4:40:1C:3E:C1:F3:54:4E:B1:14:22:C3:11:D1:63:53:37:2E:28
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0581
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C91E546AEEB311EC8DDC12B2F1222468.roa
Signing time:             Sat 18 Jun 2022 03:07:29 +0000
ROA not before:           Sat 18 Jun 2022 03:07:23 +0000
ROA not after:            Sun 18 Jun 2023 03:07:23 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 18 03:07:23 2022 GMT
            Not After : Jun 18 03:07:23 2023 GMT
        Subject: CN=62ad4170-7729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:57:04:8b:af:60:f6:e0:d1:d6:16:50:ae:
                    6a:cf:63:13:f0:ab:45:ae:09:de:58:74:f5:d3:8f:
                    1b:4d:07:0e:05:61:c2:2e:32:ee:ef:35:a9:ca:bc:
                    7b:9d:bb:72:c4:99:d4:50:2f:89:b8:1e:ab:ef:53:
                    97:bb:33:40:77:de:96:59:65:1a:c8:2b:97:1b:6a:
                    cf:3c:a1:a8:49:b7:6f:29:be:37:9c:f5:38:9c:98:
                    83:7a:4f:76:27:b8:40:41:08:35:44:42:bb:c6:9a:
                    f6:50:e5:a3:5e:6c:14:eb:76:ff:36:52:7c:4a:78:
                    18:70:c2:a5:5b:95:5d:8e:4f:11:04:bb:20:e1:16:
                    8d:5c:f2:09:e8:f1:1c:3f:52:cc:aa:50:f8:4f:12:
                    18:ba:8c:8d:35:1c:b5:e2:01:b4:0a:92:75:4a:6d:
                    a5:87:55:f6:90:db:51:b3:b9:ea:1a:bd:8e:c4:55:
                    83:13:31:57:5d:f0:33:d6:b2:e6:97:34:17:a0:24:
                    d4:5c:94:a8:81:29:17:f0:ec:2b:64:94:be:56:04:
                    6a:7a:11:42:1a:0d:a3:b9:db:ed:45:99:1d:b3:d1:
                    af:34:c8:d7:7f:b5:4a:c1:5b:df:d1:4a:94:fb:e0:
                    7f:ac:97:6b:21:ae:a0:a9:f5:20:83:06:c4:c7:04:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A4:40:1C:3E:C1:F3:54:4E:B1:14:22:C3:11:D1:63:53:37:2E:28
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C91E546AEEB311EC8DDC12B2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:80:60:cb:82:8e:ed:6a:c5:18:02:13:c8:32:c7:65:a9:
         e5:4b:2c:13:2c:73:9e:4a:96:8b:cf:88:97:3b:c4:8f:3f:55:
         ee:42:35:02:26:41:c7:1e:28:47:e5:fa:2e:e7:04:29:e0:2b:
         da:81:eb:fd:12:b2:34:17:ad:32:3a:6a:c0:b0:a4:9b:88:3a:
         12:a9:a2:d0:27:0a:94:64:ba:c5:29:ca:b2:53:31:06:20:10:
         6c:7c:be:3b:ab:1a:e2:de:bb:9e:0d:63:fd:b2:4a:f3:e1:51:
         06:f7:17:d3:56:3e:0f:84:21:8d:34:e5:13:95:b0:75:3c:85:
         d9:5c:32:a9:12:c1:db:b8:c2:3e:94:dd:6e:74:95:9e:92:71:
         c4:d4:0e:0c:ad:15:27:07:e5:3c:84:bc:bf:e7:6c:b7:54:60:
         50:fd:b3:e5:2b:87:a6:98:3a:2f:1b:b1:55:7c:bd:6b:ac:c9:
         1b:14:2d:f4:a4:0e:e0:9e:54:06:3a:2d:61:11:1a:56:25:75:
         73:f6:de:7d:c5:d6:5a:35:a4:87:4c:ef:7e:70:c5:24:aa:ea:
         99:7e:c9:68:4c:65:14:42:25:ef:8d:2a:62:bb:1b:b6:ff:d1:
         a7:d2:31:1b:bc:55:74:0d:fc:6e:da:ea:37:44:b1:9c:8d:bb:
         37:d2:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org