Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EAD09AD6B24111ECA2078A6C5A40D577.roa
File:                     EAD09AD6B24111ECA2078A6C5A40D577.roa (raw, json)
Hash identifier:          Z/f05JavjGNiWr/KRmLK5usOig0bCC3G5sktusEnSa4=
Subject key identifier:   19:EB:17:50:9C:D1:B0:24:08:F1:BA:65:7F:B9:DE:2C:BB:E7:2B:BB
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       037F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EAD09AD6B24111ECA2078A6C5A40D577.roa
Signing time:             Sat 02 Apr 2022 05:01:12 +0000
ROA not before:           Sat 02 Apr 2022 05:01:08 +0000
ROA not after:            Sun 02 Apr 2023 05:01:08 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr  2 05:01:08 2022 GMT
            Not After : Apr  2 05:01:08 2023 GMT
        Subject: CN=6247d898-a41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:db:05:96:5d:d7:46:75:0e:32:4d:35:db:
                    6e:a7:b8:93:ca:7e:5a:cc:8e:e9:9f:3f:13:bf:42:
                    16:3d:64:4b:56:82:9b:0a:41:94:14:ce:96:dc:22:
                    ae:f9:4d:66:a4:62:8c:25:09:0c:8e:4b:54:5d:2a:
                    1a:f7:b8:8e:7e:27:90:c0:96:5e:03:dc:4f:08:62:
                    fe:d4:ff:3d:36:e6:d4:92:d6:da:45:15:eb:50:8c:
                    8d:b3:33:94:cd:5f:d3:a4:f4:db:2c:b5:e1:7f:e1:
                    37:ea:d2:7c:89:dc:87:ef:a2:d4:10:48:54:ae:ec:
                    a2:16:21:ae:d0:90:d9:2e:c6:1a:3e:6d:74:a0:98:
                    38:8b:d0:fa:21:43:e0:22:97:d8:e8:96:92:fa:08:
                    a9:63:92:22:11:8c:17:1e:44:9f:4c:d2:3b:98:9c:
                    66:97:52:07:76:97:18:e9:24:b0:a7:ce:42:46:85:
                    72:2b:f5:dd:87:dd:e9:c3:62:70:e4:db:8f:51:8e:
                    6d:69:14:dd:36:da:d7:c3:f7:d3:4f:b6:2a:41:5a:
                    5d:39:f1:c8:a4:1b:59:46:ec:e6:ba:fa:68:73:d4:
                    d9:3a:50:c0:c1:75:c6:ca:1c:f8:5d:5c:64:92:d8:
                    39:ef:ab:6f:b6:52:37:99:21:8c:56:af:7e:cb:9e:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EB:17:50:9C:D1:B0:24:08:F1:BA:65:7F:B9:DE:2C:BB:E7:2B:BB
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EAD09AD6B24111ECA2078A6C5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:50:7a:db:81:08:92:f7:74:57:c0:9e:5b:e7:ac:58:c9:4f:
         04:b3:b2:7d:00:32:4a:7a:1d:8c:c3:cf:3b:cb:a9:2f:7f:ab:
         e2:c9:59:27:86:94:91:f6:6b:5e:25:58:ef:78:12:a4:70:c8:
         af:2b:1c:ae:22:c3:8f:94:34:3b:a0:af:d6:7a:fa:51:81:2e:
         50:4a:41:64:0a:13:90:50:2f:c9:a6:66:ce:f4:79:8b:7d:7b:
         0e:b0:80:ef:23:97:14:1b:c0:00:50:23:2c:ea:e5:fd:0d:69:
         1e:ef:97:99:3a:75:cc:77:b8:06:2e:c4:2b:4b:08:b3:ab:ac:
         c6:2b:2e:fb:8f:e7:8b:9c:69:57:68:2d:f7:46:56:ec:2f:20:
         f5:c2:92:a3:61:27:1f:e4:6b:04:c4:8e:86:14:44:6d:33:6d:
         30:09:fa:05:34:d3:12:30:4c:8d:4b:82:a2:ce:58:08:18:9f:
         9a:8a:09:66:f9:15:39:b8:52:4b:3b:52:6d:eb:4e:24:08:22:
         a1:3d:5d:fa:4a:56:aa:66:53:98:c9:4c:17:c5:1f:77:74:1c:
         eb:70:54:d0:fe:d4:d0:18:ad:2a:b6:cb:ff:7d:3d:a6:c9:3f:
         e3:0a:b9:d7:a1:68:e9:e5:25:ea:78:64:02:7e:98:5b:8b:a2:
         50:d4:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org