Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DF904E3AD59D11ECB835C7ECF1222468.roa
File:                     DF904E3AD59D11ECB835C7ECF1222468.roa (raw, json)
Hash identifier:          W+UXXQbukDMjh6FmNvZ5LMa5KM4b+Mp+YBkkVwUOVNk=
Subject key identifier:   21:12:6B:BC:89:70:DF:B6:DC:B6:74:CB:72:2C:19:CA:F7:5A:8D:E8
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       04A7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DF904E3AD59D11ECB835C7ECF1222468.roa
Signing time:             Tue 17 May 2022 04:57:38 +0000
ROA not before:           Tue 17 May 2022 04:57:34 +0000
ROA not after:            Wed 17 May 2023 04:57:34 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 17 04:57:34 2022 GMT
            Not After : May 17 04:57:34 2023 GMT
        Subject: CN=62832b42-ee66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:f3:a1:27:af:74:c7:00:29:ac:05:f5:c0:
                    06:f7:5a:0b:c0:71:df:5c:b6:b8:e3:93:d9:68:3a:
                    e5:f7:93:e2:d7:84:00:93:08:ab:f4:12:02:54:c5:
                    3f:02:5e:7a:af:78:40:dc:63:0e:2b:4e:53:ec:3e:
                    e7:5b:aa:5f:88:34:d7:cb:62:a6:a3:e7:ea:7a:6f:
                    47:e8:d0:76:e9:be:e3:7a:bb:d7:2a:ff:73:55:27:
                    a2:41:2f:c7:ef:4d:ec:bb:02:92:42:fa:26:eb:eb:
                    e6:4c:dd:f5:22:71:cb:e2:b6:0f:93:23:4d:c5:07:
                    55:19:3c:60:c4:af:b9:c5:69:f3:4c:d3:ec:8d:db:
                    08:2e:03:8c:d6:7c:70:f4:18:ba:c8:e9:75:9a:33:
                    c8:fa:87:15:49:9d:f6:c6:48:a5:6c:35:24:dc:1a:
                    5d:cd:de:29:b4:70:76:d5:c3:57:86:8c:d4:6a:95:
                    b3:95:46:36:dc:fc:33:25:07:83:03:2e:2a:33:2a:
                    b2:e2:f8:c6:eb:c8:6e:de:d2:7b:9d:0f:16:9f:50:
                    ad:da:bc:50:48:d9:a1:11:5f:e4:eb:da:d8:4a:80:
                    db:b3:28:d2:3d:2b:0a:d7:8f:23:0d:15:55:ee:2b:
                    97:64:54:b6:5b:7c:68:22:14:ef:b0:f7:77:a1:34:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:12:6B:BC:89:70:DF:B6:DC:B6:74:CB:72:2C:19:CA:F7:5A:8D:E8
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DF904E3AD59D11ECB835C7ECF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7f:72:b6:e6:bb:4f:3d:2b:21:ce:aa:5a:65:70:e4:77:15:
         9c:62:f4:6a:62:75:82:44:8e:ed:32:31:02:df:1f:c3:18:ed:
         fa:92:7f:4f:a8:2d:ea:3a:92:90:9d:41:db:82:3b:81:3e:c6:
         99:07:9b:e3:cc:78:4e:eb:81:a5:e3:d1:cc:13:69:15:b8:1a:
         0e:7a:a0:47:f2:0e:c2:ca:e6:62:74:a8:dd:17:1f:14:5b:6b:
         4d:fe:c4:ec:7e:39:50:83:dd:c4:c1:40:cd:fd:08:98:04:4f:
         b0:02:6d:fc:0a:f8:c3:ee:8c:74:5a:51:9a:d5:a3:3a:91:29:
         ec:50:08:1f:a2:b4:d6:42:4d:5e:d3:64:ee:2c:ac:9a:98:9b:
         aa:aa:02:7b:33:74:9f:4e:8b:ce:9c:58:97:ab:a3:3f:3c:54:
         bb:f3:7d:62:3f:54:3f:9f:c3:4b:57:83:bd:d0:e9:bd:16:48:
         89:7d:ce:4c:94:65:d7:63:e3:c8:86:c7:a1:6a:23:f4:f3:41:
         ce:31:33:3b:19:aa:22:6c:7f:55:c9:25:9e:3b:93:70:79:5c:
         4a:b7:3a:ad:47:61:1c:61:5b:b3:61:51:6d:81:ca:5f:76:db:
         93:db:1d:49:31:3c:2f:f8:7d:e9:2a:64:79:b1:d9:43:6c:2e:
         82:4c:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org