Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E4ED103A978011ECA2D810D55A40D577.roa
File:                     E4ED103A978011ECA2D810D55A40D577.roa (raw, json)
Hash identifier:          rtvrCwNJglnh7NawC7FCwdelbsCC0kuiy04qdbBsGVI=
Subject key identifier:   37:9F:C9:C0:32:F1:BC:F6:BA:28:5D:8F:3B:C6:D8:B5:6F:12:8C:48
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       02E2
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E4ED103A978011ECA2D810D55A40D577.roa
Signing time:             Sun 27 Feb 2022 03:54:00 +0000
ROA not before:           Sun 27 Feb 2022 03:53:54 +0000
ROA not after:            Mon 27 Feb 2023 03:53:54 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 27 03:53:54 2022 GMT
            Not After : Feb 27 03:53:54 2023 GMT
        Subject: CN=621af5d7-7b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:bf:3b:64:42:15:1e:ec:4c:1c:c1:c2:6b:
                    78:46:77:1a:09:6b:e1:d5:0b:14:49:93:42:83:b9:
                    54:30:9a:d5:b9:c3:a0:51:18:41:a7:e3:01:6f:f0:
                    da:76:4a:91:e4:20:b8:23:85:84:f9:16:3c:3e:fa:
                    ca:b8:68:64:db:b7:e1:a1:9f:b8:78:86:82:14:39:
                    6f:c9:16:79:59:ba:cb:34:b8:48:c1:16:d4:76:49:
                    a3:21:12:d8:67:75:be:cd:d2:26:c8:04:93:ca:07:
                    b6:b4:04:a3:87:9c:88:ff:0d:2f:c8:b8:17:c4:90:
                    05:08:61:e8:36:3b:92:76:0c:3b:9d:19:68:3f:9d:
                    bf:b4:da:35:11:12:de:6d:1d:59:cd:1d:26:ed:ab:
                    a3:23:8e:0f:fe:7c:e9:26:b5:80:62:05:27:94:8b:
                    05:bf:c6:f3:6e:00:f3:14:d5:d3:75:5d:56:3d:9d:
                    06:99:e2:4f:a5:2a:ff:ce:50:e4:00:19:2d:8c:b7:
                    05:19:76:30:28:35:50:f0:97:a7:e4:a5:26:17:2c:
                    e1:5e:4e:18:57:20:74:e8:f0:a0:6a:52:5b:e5:d8:
                    23:76:be:6c:49:30:b2:bd:43:c4:51:4c:f7:84:83:
                    8f:d6:10:62:4b:7b:5b:4e:5f:fa:10:a1:e1:81:a0:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9F:C9:C0:32:F1:BC:F6:BA:28:5D:8F:3B:C6:D8:B5:6F:12:8C:48
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E4ED103A978011ECA2D810D55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:1a:2a:1c:bf:18:60:13:2b:2d:5c:41:e6:29:93:21:30:
         11:9a:f8:11:ee:85:cd:6f:0d:48:7f:4c:e6:ad:97:e7:62:3d:
         b7:15:a5:3b:52:43:ef:89:98:91:43:67:12:05:eb:91:2e:94:
         e0:8c:af:1a:1d:0e:7c:ea:38:4c:2f:6e:bf:46:be:32:77:c0:
         da:59:78:69:7b:d8:19:d1:f3:91:80:87:5e:86:32:35:e2:7e:
         34:ba:98:25:c6:6d:26:fb:9f:b0:49:bd:d1:ba:d3:34:4c:68:
         90:0f:f0:30:7d:2f:f3:b5:71:8a:37:68:8b:0a:f9:1d:2e:45:
         00:6a:4a:41:eb:b0:11:1a:60:31:c5:24:db:6b:10:31:93:ff:
         86:0f:07:f9:86:4e:13:4f:a5:cb:90:cc:0e:a7:69:52:ad:c3:
         6a:8d:a6:7e:00:55:22:f6:19:be:68:69:e1:93:a4:3b:c3:53:
         2d:ba:fb:ba:32:e0:c9:3b:42:7b:05:53:25:f3:32:42:94:41:
         ca:7c:7a:de:0d:6a:8e:c2:1e:15:8c:21:54:6d:f3:a6:5c:df:
         f7:87:f1:3b:80:52:04:f1:a1:12:55:df:d8:89:ae:6e:9b:02:
         16:d3:85:fd:70:b3:79:a8:26:ed:3c:f2:35:77:dc:26:b6:0e:
         51:c2:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org