Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E0FF4C74EF6C11ECAECF54F8F1222468.roa
File:                     E0FF4C74EF6C11ECAECF54F8F1222468.roa (raw, json)
Hash identifier:          5DZXYKhNjz8ElTd9Fo+DFPUw26OeH9zi0pSAQxVKw8A=
Subject key identifier:   1A:1C:75:E2:3A:0E:45:52:D5:07:16:51:A5:14:43:68:71:D5:48:91
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0587
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E0FF4C74EF6C11ECAECF54F8F1222468.roa
Signing time:             Sun 19 Jun 2022 01:12:25 +0000
ROA not before:           Sun 19 Jun 2022 01:12:20 +0000
ROA not after:            Mon 19 Jun 2023 01:12:20 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415 (0x587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 19 01:12:20 2022 GMT
            Not After : Jun 19 01:12:20 2023 GMT
        Subject: CN=62ae77f9-4842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:c6:6a:71:1f:3a:48:b4:8c:2e:0d:b7:12:
                    fb:3e:b1:5e:7c:cf:25:1f:9f:97:5a:b9:c6:cd:7a:
                    73:64:f8:2e:e3:81:d7:51:bf:35:04:c9:47:10:6d:
                    59:d0:31:28:c0:d7:fc:0d:03:3a:f5:9e:58:82:04:
                    d1:0f:5c:20:1d:ff:2f:55:2b:07:3c:f9:46:02:6d:
                    4f:ec:87:5c:52:e2:43:03:e9:88:e5:3c:ce:2f:7c:
                    ff:a1:fa:86:50:68:c6:d6:90:bf:3c:57:a1:b1:7e:
                    34:e5:76:9d:78:73:bc:75:3c:5a:c1:0d:5e:ed:d0:
                    e0:c4:e6:ea:c3:c5:dd:e4:c0:67:22:b1:4d:6e:ea:
                    7a:1f:94:cb:c0:5c:4d:76:4a:67:38:49:ff:de:88:
                    3e:af:e7:c5:f4:27:f8:fc:10:d0:a1:8b:d2:c9:23:
                    a2:d3:d2:e5:42:91:fa:e0:24:e7:00:27:f7:e1:e3:
                    6c:62:6f:f5:e7:41:de:2a:0e:36:67:c9:81:24:8c:
                    0d:ad:3c:c4:a0:03:b0:f5:8b:ef:ed:a8:79:d5:4d:
                    06:2f:b9:47:8a:71:5f:a5:48:c8:53:16:80:8c:de:
                    2a:52:3e:01:e8:76:d9:9d:7b:15:d6:25:a3:70:ba:
                    4a:df:8c:bf:4e:73:e1:0a:aa:b1:92:f2:6d:5a:3e:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:75:E2:3A:0E:45:52:D5:07:16:51:A5:14:43:68:71:D5:48:91
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E0FF4C74EF6C11ECAECF54F8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:ac:3f:e4:1d:dc:51:5a:91:8e:79:9c:36:cf:f9:50:2a:d9:
         13:fa:02:7d:14:8e:4e:6d:d0:5b:83:dc:13:62:27:58:53:a1:
         0c:6e:69:cf:e6:ee:85:28:0e:c2:78:03:5f:1a:5f:01:03:c7:
         d4:58:61:5e:a0:a9:16:0d:be:6e:ce:91:6d:09:8b:aa:eb:7b:
         f7:ae:84:d4:85:4b:f2:1d:db:22:09:96:a8:ee:08:30:0a:bb:
         7f:ed:99:18:a5:d2:27:10:76:f1:38:03:65:3f:fa:6f:16:75:
         87:e1:06:03:18:90:91:6b:13:33:bf:e5:3e:3b:84:56:20:8b:
         5a:e8:08:14:0f:e9:f1:d1:7c:b0:c8:49:cc:72:12:c6:d3:01:
         34:cb:9a:be:d9:f3:c5:37:ea:5e:5c:2c:a3:05:78:54:80:be:
         16:68:aa:85:cb:4c:6a:c7:ae:77:82:8d:e9:34:51:71:5b:2f:
         79:a4:46:62:0d:a6:ca:1d:33:73:dc:30:6e:82:04:9d:3a:73:
         03:7a:6e:e5:c4:15:5a:97:f6:50:7a:eb:c5:a3:94:34:7c:bf:
         b6:55:3f:7a:3d:dd:1e:cf:ba:9d:0a:a7:f8:f4:c5:ee:69:cf:
         b3:2a:ef:06:69:79:2c:b9:ba:f8:0c:6f:38:20:f7:bc:65:9b:
         79:08:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org