Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E0236820A8CD11ECAE6B7AA55A40D577.roa
File:                     E0236820A8CD11ECAE6B7AA55A40D577.roa (raw, json)
Hash identifier:          oxy8Tie1R8W0gP2H3waD3FGeb1m1+wHNAjBeL1VzZi4=
Subject key identifier:   C4:91:87:C6:D7:D8:EE:26:A6:0D:BD:6E:BA:01:12:C7:A5:87:2A:88
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       032B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E0236820A8CD11ECAE6B7AA55A40D577.roa
Signing time:             Mon 21 Mar 2022 04:17:53 +0000
ROA not before:           Mon 21 Mar 2022 04:17:48 +0000
ROA not after:            Tue 21 Mar 2023 04:17:48 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 21 04:17:48 2022 GMT
            Not After : Mar 21 04:17:48 2023 GMT
        Subject: CN=6237fc70-df81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:c3:bc:cb:8b:bf:d8:90:88:9c:c9:63:a8:
                    ff:1e:fc:2f:ad:f3:f3:c3:f8:7d:37:8d:52:e5:2b:
                    c5:81:8d:11:8e:ac:9d:e4:51:bc:56:4f:2e:4e:42:
                    76:dd:13:ea:c2:98:b8:73:6f:55:71:89:00:b5:8d:
                    f6:00:24:5c:61:b3:d9:58:37:bd:87:55:db:49:d6:
                    95:fa:ea:52:b4:37:8f:e5:22:95:55:cf:87:f8:95:
                    fa:a8:f6:a2:78:0f:a7:38:28:6f:1b:14:67:68:b3:
                    3e:07:36:07:ce:d9:2a:bc:c1:b9:db:71:c4:f8:bd:
                    00:45:cc:20:58:12:0d:2d:f0:76:8d:4f:a8:c7:c9:
                    8e:56:e3:9c:e6:54:6a:4c:e4:53:f9:6e:36:98:00:
                    90:e7:61:84:d1:b5:9b:88:1d:48:92:23:b0:b6:f7:
                    cf:0f:47:7f:a7:69:79:6c:23:c9:cc:23:77:13:94:
                    12:f0:e8:6c:57:99:66:99:b6:18:66:eb:29:44:24:
                    b1:e3:7a:19:09:dd:29:a2:af:09:2e:f1:51:26:10:
                    16:e6:b2:67:42:6b:6e:75:2c:24:d7:14:34:ed:0e:
                    5f:12:14:4b:51:1f:70:86:a5:e3:15:77:e4:88:39:
                    39:36:64:6b:74:d3:20:5a:60:29:c4:fe:3d:e1:19:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:87:C6:D7:D8:EE:26:A6:0D:BD:6E:BA:01:12:C7:A5:87:2A:88
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E0236820A8CD11ECAE6B7AA55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:f3:ca:af:81:91:af:66:42:7d:d4:5c:e1:25:2f:9c:83:4f:
         c1:ac:af:90:57:10:bf:50:a3:33:db:71:47:12:1e:96:ce:44:
         f5:e4:20:66:b7:2f:f0:44:f6:96:fc:e0:a9:7b:e1:26:5b:17:
         de:81:76:23:d5:30:8b:ad:cd:f4:6a:73:31:a4:2c:77:04:23:
         1d:93:e6:6d:94:03:8e:d3:71:bc:7e:81:94:69:6c:62:f1:9e:
         81:8e:4b:13:23:fb:d5:51:c0:0e:dc:f4:e6:9f:ab:89:8f:c8:
         60:e1:60:33:6a:77:23:dc:3b:f3:b8:28:f8:93:fd:fd:cc:61:
         fb:65:16:41:2c:27:75:15:de:0e:72:e0:68:20:80:1c:a3:43:
         3f:78:53:b9:97:a0:f5:4e:c3:e1:59:9a:02:49:41:b6:f2:ac:
         1a:70:c6:ea:3e:f4:cd:00:db:00:53:87:4d:31:0a:14:af:64:
         22:1d:24:fc:32:21:74:00:15:bf:56:3e:9a:80:09:bf:50:75:
         e0:94:4a:a6:8b:d6:7c:7d:12:ed:20:e1:fb:9d:bc:92:ec:0a:
         cd:69:48:f1:70:6e:61:48:eb:17:b1:e8:da:9e:9f:8d:1d:80:
         1b:c4:2f:29:eb:c1:13:73:c0:e6:9e:56:c7:ff:24:c7:84:9b:
         9e:00:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org