Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E36120A23BCD11EDAFC7AEA9F1222468.roa
File:                     E36120A23BCD11EDAFC7AEA9F1222468.roa (raw, json)
Hash identifier:          6SEoISPkTF+t25Aqd8XaYJKkoRBcqfEwWO9Jgum/LIc=
Subject key identifier:   47:39:4C:D9:94:D2:E7:BC:8A:59:9F:C6:47:2E:A4:24:C3:12:2B:3F
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0725
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E36120A23BCD11EDAFC7AEA9F1222468.roa
Signing time:             Sat 24 Sep 2022 05:58:19 +0000
ROA not before:           Sat 24 Sep 2022 05:58:14 +0000
ROA not after:            Sun 24 Sep 2023 05:58:14 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep 24 05:58:14 2022 GMT
            Not After : Sep 24 05:58:14 2023 GMT
        Subject: CN=632e9c7b-0093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:ff:a5:0f:58:f7:44:f9:96:6d:35:52:c0:
                    09:22:09:a1:22:fc:74:3a:43:75:ee:cb:83:3a:ba:
                    51:f6:aa:e4:83:0d:c5:46:98:ed:b8:44:18:88:10:
                    61:a6:e6:a4:d6:39:0f:9a:bc:d5:a4:80:17:35:f7:
                    6d:e3:45:cc:7e:a2:03:7c:4b:84:84:c8:b4:99:02:
                    76:24:89:49:a4:49:ae:9c:9e:52:c8:5c:78:07:bf:
                    f6:e4:e8:6a:99:f1:2b:eb:f6:d1:31:43:bc:9f:60:
                    75:6a:af:c8:db:1d:7d:06:6b:fd:d5:9d:70:f7:7e:
                    c3:19:2b:32:60:d9:ca:7e:63:fd:43:4c:ce:3a:fe:
                    59:1b:f6:f1:85:89:a2:37:86:ad:ff:66:57:34:56:
                    8c:8a:2c:d7:75:18:d2:d2:59:f4:59:0a:da:77:77:
                    50:17:88:f6:76:da:b4:f7:95:99:b0:11:dd:b8:52:
                    96:96:04:13:03:e2:7f:88:96:e0:24:e7:0d:81:9e:
                    ce:2c:62:92:22:dc:ee:18:e7:10:cc:21:98:ce:5d:
                    d0:d6:25:54:27:e3:61:84:a1:4f:5d:e9:af:37:37:
                    ad:f0:f4:f5:47:2e:28:c1:da:5f:53:e7:0f:86:70:
                    b3:86:75:55:9e:28:09:e5:d0:cd:f4:e0:aa:3c:b9:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:39:4C:D9:94:D2:E7:BC:8A:59:9F:C6:47:2E:A4:24:C3:12:2B:3F
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E36120A23BCD11EDAFC7AEA9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:19:07:cc:c2:74:32:a3:a4:be:06:98:52:3a:3b:52:00:
         3f:6f:ef:da:2e:56:6b:5c:1b:c7:3a:1e:a9:d5:5e:d4:ba:ac:
         d8:6f:d0:ac:c2:53:85:fa:9a:5c:23:06:6a:04:d6:4d:8e:4b:
         7e:41:58:1d:87:bb:b8:c9:23:89:dd:21:ff:b6:11:ed:7e:5e:
         95:f0:6f:a3:ff:43:57:ef:40:31:41:43:c4:a1:21:4b:33:f7:
         a8:89:ab:60:b7:e0:63:84:82:fa:94:27:c1:45:aa:d4:62:1f:
         4a:cb:af:40:75:9f:51:b0:59:1d:ce:5d:0a:3b:8c:d2:1e:49:
         d0:b9:ee:89:8f:47:96:89:3c:fe:8b:10:f0:a7:e0:c1:64:24:
         1d:e6:61:fb:4b:ad:21:6f:4f:49:91:a0:53:12:bf:1c:6a:63:
         ba:c7:2d:d2:36:d9:9c:fd:9f:29:53:99:90:98:05:c7:1c:37:
         ea:e8:6d:65:9c:d0:f3:81:1a:da:20:31:4b:e7:d6:83:ee:b3:
         fb:36:19:4c:58:a0:53:77:f4:e5:f5:d8:d6:4e:24:37:16:79:
         8f:05:91:56:14:fa:cc:1d:57:33:cc:98:0f:b6:c7:c3:80:7a:
         cd:51:74:ac:70:74:79:42:fa:6f:bf:20:0e:be:6d:e4:27:c3:
         bc:3d:f5:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICByUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA5MjQwNTU4MTRaFw0yMzA5MjQwNTU4MTRaMBgxFjAU
BgNVBAMMDTYzMmU5YzdiLTAwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXyv+lD1j3RPmWbTVSwAkiCaEi/HQ6Q3Xuy4M6ulH2quSDDcVGmO24RBiI
EGGm5qTWOQ+avNWkgBc1923jRcx+ogN8S4SEyLSZAnYkiUmkSa6cnlLIXHgHv/bk
6GqZ8Svr9tExQ7yfYHVqr8jbHX0Ga/3VnXD3fsMZKzJg2cp+Y/1DTM46/lkb9vGF
iaI3hq3/Zlc0VoyKLNd1GNLSWfRZCtp3d1AXiPZ22rT3lZmwEd24UpaWBBMD4n+I
luAk5w2Bns4sYpIi3O4Y5xDMIZjOXdDWJVQn42GEoU9d6a83N63w9PVHLijB2l9T
5w+GcLOGdVWeKAnl0M304Ko8uYSJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURzlM
2ZTS57yKWZ/GRy6kJMMSKz8wHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0UzNjEyMEEyM0JDRDExRURBRkM3QUVBOUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAEsTGQfMwnQyo6S+BphSOjtSAD9v79ouVmtcG8c6HqnVXtS6rNhv0KzC
U4X6mlwjBmoE1k2OS35BWB2Hu7jJI4ndIf+2Ee1+XpXwb6P/Q1fvQDFBQ8ShIUsz
96iJq2C34GOEgvqUJ8FFqtRiH0rLr0B1n1GwWR3OXQo7jNIeSdC57omPR5aJPP6L
EPCn4MFkJB3mYftLrSFvT0mRoFMSvxxqY7rHLdI22Zz9nylTmZCYBcccN+robWWc
0POBGtogMUvn1oPus/s2GUxYoFN39OX12NZOJDcWeY8FkVYU+swdVzPMmA+2x8OA
es1RdKxwdHlC+m+/IA6+beQnw7w99Yc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org