Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DF81F028EEA311EC88791F7CF1222468.roa
File:                     DF81F028EEA311EC88791F7CF1222468.roa (raw, json)
Hash identifier:          u/4H/aMM2MqhL5Aw9g6Yn6R9vQIQUffH5t88aBRl6yg=
Subject key identifier:   CF:29:05:6F:C8:F3:A7:37:FA:34:DF:23:47:7E:86:20:48:B8:0A:73
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       057E
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DF81F028EEA311EC88791F7CF1222468.roa
Signing time:             Sat 18 Jun 2022 01:13:34 +0000
ROA not before:           Sat 18 Jun 2022 01:13:28 +0000
ROA not after:            Sun 18 Jun 2023 01:13:28 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 18 01:13:28 2022 GMT
            Not After : Jun 18 01:13:28 2023 GMT
        Subject: CN=62ad26be-b1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:18:ad:7e:93:94:3c:0d:7c:5b:90:86:93:
                    00:01:fe:04:98:1c:a6:4e:e5:25:be:63:c2:fa:af:
                    a7:02:e6:c7:79:29:c9:66:00:d7:48:61:e6:4a:ce:
                    68:e1:ce:18:f1:4c:76:23:87:11:33:51:4f:45:6d:
                    a4:28:aa:2e:4b:72:b0:d4:a0:ff:36:ec:fc:ba:4f:
                    14:2f:d0:07:8d:5e:5a:fe:42:a0:68:96:51:d7:a1:
                    aa:33:64:8d:d3:3c:4e:e2:42:fb:f1:10:80:70:bc:
                    f7:cd:4a:c3:89:a1:cf:0f:b8:d1:1f:ee:ba:54:9f:
                    f9:2c:f5:2f:5c:d1:17:f4:38:cc:e3:e4:bb:7d:66:
                    7c:27:63:48:1a:c8:d4:27:0c:c1:a3:86:ee:1a:a1:
                    52:5d:ed:db:81:59:2c:b0:b5:2c:65:7c:aa:86:39:
                    26:5f:7e:71:63:51:79:d2:bc:c8:ec:28:af:da:8d:
                    5d:c7:78:60:ab:46:cd:0f:44:99:f4:44:bf:1e:d7:
                    fa:df:66:c5:b0:53:6b:0c:7f:c8:c9:4b:30:77:b3:
                    20:f4:bb:cc:68:48:49:05:b1:a1:a5:88:78:da:d0:
                    ba:2f:c6:58:a2:ae:f6:53:49:dc:a1:a3:29:fa:e6:
                    a3:db:5a:e7:97:3b:a9:db:ec:54:bf:1c:4c:75:89:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:05:6F:C8:F3:A7:37:FA:34:DF:23:47:7E:86:20:48:B8:0A:73
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DF81F028EEA311EC88791F7CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:ff:8a:63:3c:f5:34:72:8c:0a:49:b1:3e:30:9b:4f:55:82:
         bd:a5:9b:ce:1a:bb:89:31:ad:64:8a:4b:d3:c5:9e:b5:f4:d4:
         06:17:97:dc:64:18:9b:8b:2e:d6:3b:cf:da:85:8f:83:66:5b:
         91:62:31:b5:53:c8:54:50:a7:72:5b:97:fe:bc:c1:b9:a9:a5:
         d2:6c:fc:f8:33:82:1c:fc:10:05:bd:17:61:28:b9:c6:67:a3:
         a2:da:6b:17:26:0e:18:b8:dc:f8:ee:98:08:cb:d7:4d:ef:10:
         34:71:58:6e:e1:e2:7a:8a:a3:d0:5a:9d:68:3a:92:57:4b:02:
         49:67:b5:23:a3:f1:8e:c8:d6:fc:04:7a:63:ee:a4:53:12:74:
         18:e5:33:08:14:2f:5c:a8:2c:d9:21:db:72:72:74:f2:07:7e:
         87:59:cd:66:06:94:62:5f:f7:82:76:11:fb:b9:46:9d:8e:71:
         29:7a:67:2e:33:54:bc:ec:d7:0d:dc:7a:74:97:de:f3:c1:0e:
         8c:ce:c4:5b:32:a4:9d:1f:ed:a9:70:e0:25:7c:56:79:f0:23:
         4c:93:ca:dd:ce:b5:df:76:cb:55:e7:c9:fd:de:8d:c8:0f:9f:
         12:78:60:41:cc:59:2e:10:60:85:de:8a:4d:b5:b2:74:1f:b4:
         0e:94:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org