Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E5F7FDB4FFF911ECA3104393F1222468.roa
File:                     E5F7FDB4FFF911ECA3104393F1222468.roa (raw, json)
Hash identifier:          t0fClHZI/uTStNdIdSepmlrYUDn69FGLhtIxx9HbFX0=
Subject key identifier:   8D:20:99:20:AB:60:12:7D:2A:2F:AF:0E:4D:3A:55:FA:D5:1F:66:15
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0618
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E5F7FDB4FFF911ECA3104393F1222468.roa
Signing time:             Sun 10 Jul 2022 02:42:11 +0000
ROA not before:           Sun 10 Jul 2022 02:42:05 +0000
ROA not after:            Mon 10 Jul 2023 02:42:05 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jul 10 02:42:05 2022 GMT
            Not After : Jul 10 02:42:05 2023 GMT
        Subject: CN=62ca3c83-ea50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:6f:36:bb:c3:23:20:84:fa:5e:ad:b6:9b:
                    f7:e7:05:88:23:0c:71:04:91:f2:6c:47:6a:c9:2f:
                    67:47:c6:ad:bc:b3:f1:c6:be:83:ad:94:b3:a5:8a:
                    20:97:44:84:0e:93:76:f6:a1:3d:44:d2:c7:e6:a2:
                    4e:b3:3b:45:3e:e3:c2:ab:2a:ef:d7:8b:b5:c6:ac:
                    ea:71:ce:5c:39:f0:7b:cb:b0:e6:9c:92:6c:99:b7:
                    44:e5:51:17:1b:61:7b:5e:7e:59:9b:99:c1:77:b7:
                    bd:cc:7a:8e:98:36:1d:40:43:b9:8a:53:3d:85:2b:
                    3d:82:85:fc:f5:66:78:64:b5:0c:36:f7:53:7f:4d:
                    23:1d:5e:1c:ea:a6:ef:89:ad:67:fb:dd:46:52:24:
                    57:ee:ad:55:99:6e:54:25:b6:ce:3e:a5:77:84:3f:
                    f2:50:af:24:33:6e:94:ef:55:ac:8e:c6:58:af:19:
                    64:37:10:9d:a4:b1:b3:98:49:a6:52:62:68:81:bf:
                    9a:2f:b7:f7:f5:fb:a6:c8:0b:55:38:0c:9d:ab:32:
                    dc:92:b8:25:ec:79:88:6e:1c:da:ad:67:5e:d4:a0:
                    09:37:08:a7:c6:03:a5:88:89:63:07:a0:73:0c:f0:
                    ee:58:f7:e2:be:d6:74:81:a4:30:87:81:39:25:77:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:20:99:20:AB:60:12:7D:2A:2F:AF:0E:4D:3A:55:FA:D5:1F:66:15
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E5F7FDB4FFF911ECA3104393F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:5c:f5:fd:70:8d:b5:b7:99:4b:d8:57:cf:dd:f8:81:d7:
         44:ae:ea:44:c2:b0:48:c3:b0:b4:23:7f:2e:31:e9:9d:89:ac:
         34:6d:ff:47:9e:94:8b:77:5f:6f:d4:c3:9b:86:bb:45:5e:af:
         71:44:31:22:a8:3f:6c:ce:f9:0e:22:f7:18:2a:70:36:35:2e:
         dd:52:90:fc:8c:16:8c:2b:33:34:8d:6f:e4:17:ad:11:4b:6a:
         5f:bd:f0:17:9e:0b:2d:44:13:a6:78:66:80:48:d5:6b:f9:9e:
         31:9a:c7:c3:f8:f5:a6:1c:0a:3b:1d:bd:74:c7:e1:02:1a:5e:
         00:59:5a:d2:02:95:67:2c:d4:09:44:01:e7:d3:47:fd:93:17:
         2a:e6:44:2c:da:1b:16:97:7f:8d:a8:48:f7:cd:92:6d:ea:4b:
         b6:42:41:81:25:04:65:ea:18:65:eb:ba:a5:7e:09:fb:d6:4a:
         b6:5d:0d:72:46:ba:4c:ad:26:c3:21:cc:a4:98:c9:d2:94:19:
         ac:ea:86:a9:3c:8f:6e:b2:cc:9c:79:0d:e2:37:dd:f4:39:dc:
         07:4e:68:39:6c:72:a2:f9:5e:27:ac:a8:40:8b:4c:51:51:89:
         45:86:bf:44:7c:ba:9d:1d:46:c1:ec:3c:6a:e0:ef:d5:5e:8e:
         d5:53:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org