Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EA403B74D96711EC9A9828CDF1222468.roa
File:                     EA403B74D96711EC9A9828CDF1222468.roa (raw, json)
Hash identifier:          hWkQWuzJ8dkggTuRtNHWTAlEbr0xZ88qZhXODVDxp34=
Subject key identifier:   66:B9:C8:DE:38:BB:77:CC:44:9A:BE:05:7A:DD:32:66:40:28:6B:87
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       04C7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EA403B74D96711EC9A9828CDF1222468.roa
Signing time:             Sun 22 May 2022 00:41:28 +0000
ROA not before:           Sun 22 May 2022 00:00:23 +0000
ROA not after:            Mon 22 May 2023 00:00:23 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: May 22 00:00:23 2022 GMT
            Not After : May 22 00:00:23 2023 GMT
        Subject: CN=628986b8-4213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:78:2b:7f:3c:96:14:7a:de:65:5f:b7:c9:
                    4a:4a:d4:99:a5:7e:0e:3d:10:61:27:5c:30:98:d9:
                    9c:3c:74:71:fa:23:c1:c0:b8:37:bf:2e:cf:7f:c2:
                    db:2d:75:45:80:ff:b7:c6:12:de:82:d6:71:1b:b5:
                    e7:24:0c:c3:e6:7e:5c:c6:4e:9b:9a:7e:4b:8c:12:
                    41:06:f5:c6:3a:dd:c8:0e:b4:d3:0c:9f:5d:d2:b9:
                    8d:48:b7:43:1c:3e:5e:5a:a7:3c:e8:1a:71:e5:5c:
                    6e:85:d9:fa:b7:29:60:a1:cc:cf:2a:f1:86:6e:d0:
                    7e:26:0b:b2:24:30:3c:ba:6f:53:8a:87:ef:b6:50:
                    16:93:bc:f7:b2:28:6c:60:a4:b2:16:ea:17:f2:02:
                    9b:cf:da:e5:49:08:4e:63:9f:13:ff:56:4c:05:bf:
                    dd:2c:d9:2a:59:a8:32:cb:be:e9:36:fe:b0:31:57:
                    8c:27:7d:89:11:99:44:7d:48:ed:b9:35:85:f7:52:
                    dd:3c:4a:09:01:29:7f:94:ce:4b:c7:96:45:d2:0e:
                    22:92:c6:3b:75:a8:27:1e:40:b5:e6:43:b2:ed:6e:
                    36:ee:40:38:9a:6a:7a:53:b3:7f:cc:a1:84:cd:80:
                    5c:de:3e:be:0a:8f:50:ab:7a:3a:06:7d:54:43:df:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B9:C8:DE:38:BB:77:CC:44:9A:BE:05:7A:DD:32:66:40:28:6B:87
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EA403B74D96711EC9A9828CDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:95:4c:29:34:d2:89:70:d1:a4:81:1e:c3:6b:68:2d:c5:62:
         07:23:b6:89:cb:14:98:83:a5:ea:db:9b:b4:44:88:f6:6f:1f:
         2a:de:00:d5:40:bb:4b:92:a5:fc:5d:94:38:58:c6:6c:d3:8a:
         c5:01:49:a8:b5:2c:be:7c:f0:58:14:93:a7:f8:26:15:56:1a:
         18:79:1d:44:db:28:8a:1e:48:bd:04:3c:6c:41:ee:2b:1a:34:
         d4:68:e9:a7:c1:20:1a:a4:97:ba:bc:98:7b:5f:8f:db:c0:86:
         7b:ea:6b:4f:5b:14:83:38:b7:ec:d2:b8:40:b4:e0:e6:f9:c3:
         e4:3b:98:93:91:71:68:b6:9b:7b:b5:9d:dd:2b:02:9f:9b:73:
         88:65:3c:e3:c1:19:8d:d4:9a:c7:56:f4:4c:11:00:c8:30:32:
         99:4a:80:9b:51:2c:f4:a4:b0:00:f0:28:18:09:10:a3:bd:3a:
         8c:e0:d5:c1:a1:ca:46:5e:42:5d:68:1c:34:cd:38:07:db:5e:
         73:a7:7e:37:81:84:09:91:b2:4b:f4:02:77:de:96:d8:ee:9c:
         14:64:05:cc:da:c2:9b:a8:19:12:2b:24:77:88:9c:62:58:f9:
         f4:df:42:92:be:d9:58:21:a0:85:e6:a4:d5:e3:30:e3:42:57:
         fc:22:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org