Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DA6538F4C15611ECA9024FA2F1222468.roa
File:                     DA6538F4C15611ECA9024FA2F1222468.roa (raw, json)
Hash identifier:          Ky8Vcdm+2wCR+c4uwt22GjYMI6VdmxJMRoUFr7bRo/E=
Subject key identifier:   73:3C:C3:01:C6:CC:55:1D:6A:21:0F:61:34:28:9E:8B:04:54:94:C7
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       03F8
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DA6538F4C15611ECA9024FA2F1222468.roa
Signing time:             Thu 21 Apr 2022 09:38:52 +0000
ROA not before:           Thu 21 Apr 2022 09:38:47 +0000
ROA not after:            Fri 21 Apr 2023 09:38:47 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr 21 09:38:47 2022 GMT
            Not After : Apr 21 09:38:47 2023 GMT
        Subject: CN=6261262c-c015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:ff:6b:71:93:b9:88:45:5d:1c:3f:d7:72:
                    ef:a7:2d:85:59:48:68:c2:f3:2b:18:52:bf:f5:fb:
                    86:cb:f6:29:6b:82:04:e9:d2:4c:e8:20:6d:37:47:
                    4a:54:15:8d:53:3a:d1:f7:cd:81:fa:e7:f3:65:42:
                    e1:62:ba:04:48:0d:10:6f:ca:4e:59:4f:51:1f:ca:
                    9f:ef:a4:a2:6b:e6:d3:56:75:84:37:12:8f:c9:8a:
                    c0:dd:70:54:24:63:d8:f2:ea:c1:9e:69:ff:84:14:
                    07:04:0e:4c:f7:15:a6:91:b3:8c:81:cf:6e:af:03:
                    35:d9:bd:6f:11:3a:aa:6a:5a:b4:d7:cc:b3:6b:91:
                    43:0d:fa:b8:1c:47:1f:4b:4b:44:00:b8:0a:f6:21:
                    b4:e8:e2:e7:2d:63:84:0b:c3:e1:fd:33:82:bb:0d:
                    5a:3d:d9:34:0c:8d:fd:78:52:23:ac:12:d1:2e:c0:
                    f8:64:c9:04:5c:6a:db:d3:84:c4:74:37:1e:28:77:
                    d9:0d:9a:19:86:fb:6a:ae:c6:22:16:e6:bf:3e:be:
                    a5:f6:1c:ea:70:33:9c:e5:d0:7a:fa:4c:1a:d4:80:
                    d6:d1:3f:24:ad:7c:b8:8a:63:98:77:fd:3e:5f:e7:
                    e8:b5:0a:24:bc:2b:01:db:90:86:f2:03:4e:d5:94:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:C3:01:C6:CC:55:1D:6A:21:0F:61:34:28:9E:8B:04:54:94:C7
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DA6538F4C15611ECA9024FA2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:5f:40:4b:d5:86:9c:1b:6e:02:f5:1f:81:b2:35:fd:1c:
         3a:7e:d9:bd:b9:64:c5:79:b9:e8:fa:71:b0:e1:a2:6a:4c:5a:
         bb:41:b6:0d:d0:93:00:de:1d:c4:9b:d1:82:db:2a:39:72:cb:
         9e:64:59:73:fd:d6:54:03:52:c1:08:72:14:49:68:88:86:17:
         72:42:67:00:3e:06:34:9b:2a:f0:9d:64:c6:4e:a3:96:8c:b9:
         e1:e4:31:5e:17:e7:ae:c1:53:d0:d0:2f:0a:f5:f5:f3:de:59:
         9a:a5:a8:c3:8d:62:ed:86:86:cf:99:6c:ed:78:e8:60:06:30:
         b0:6f:e2:8f:7f:96:79:f3:97:3c:b3:30:7c:36:7c:36:a4:b3:
         5d:e4:36:ab:f0:38:8b:a0:a4:41:96:4c:bb:7b:9a:4c:55:3d:
         7c:93:39:aa:20:5d:c2:28:a2:b3:cd:b0:b5:78:18:16:a4:d5:
         80:9f:57:45:cf:79:53:7a:35:0a:55:a6:64:da:0c:6d:d6:96:
         ed:57:56:1f:e7:7c:0c:c5:d7:f9:48:06:17:b0:49:65:fa:e3:
         a3:8a:62:52:5a:23:d7:d4:05:12:01:61:dc:9f:d1:bc:47:a8:
         47:5c:3e:3a:9b:d7:30:2e:e9:29:68:0e:2b:6e:4c:19:c0:e4:
         5c:a8:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org