Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EC13261001A711ED9FFFBDE9F1222468.roa
File:                     EC13261001A711ED9FFFBDE9F1222468.roa (raw, json)
Hash identifier:          Zl/c+HTXoNcUTqsD9MNx+KGF/Gp00mJtfyOQziYg7tk=
Subject key identifier:   59:95:D0:DF:E1:68:08:03:F3:BE:7A:52:AC:6F:E6:C1:02:A4:3F:32
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0628
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EC13261001A711ED9FFFBDE9F1222468.roa
Signing time:             Tue 12 Jul 2022 06:00:25 +0000
ROA not before:           Tue 12 Jul 2022 06:00:20 +0000
ROA not after:            Wed 12 Jul 2023 06:00:20 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jul 12 06:00:20 2022 GMT
            Not After : Jul 12 06:00:20 2023 GMT
        Subject: CN=62cd0df9-c720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:3d:a8:e8:8d:4e:08:08:56:d5:f3:f1:25:
                    17:1f:42:5c:f4:62:3f:59:b2:61:6d:e3:72:68:d9:
                    5a:9c:df:09:20:59:04:3c:95:22:72:6c:f0:72:cb:
                    7a:6f:1e:ea:08:e2:53:02:2c:d2:3e:5a:5f:fe:07:
                    b2:d6:65:91:2a:8a:8f:99:08:c7:69:dd:4b:a7:af:
                    83:f4:c9:e6:8e:66:27:71:c2:b7:e8:c2:16:22:e7:
                    b5:7b:aa:1b:73:22:9a:13:b5:41:99:b0:6c:e8:82:
                    30:46:66:cb:c0:96:80:c8:a1:03:14:39:7e:27:a3:
                    82:a5:2c:01:33:be:cb:14:b8:50:cb:f9:42:ce:0c:
                    52:c4:0c:9f:35:ac:8a:fc:77:92:7d:a1:ad:a9:63:
                    30:05:24:40:c2:6d:6b:53:ef:bc:ea:73:5a:d7:dc:
                    d7:57:50:e3:4d:95:17:66:ff:7e:08:8a:79:c2:91:
                    c5:7a:a8:84:bc:f9:e7:2b:7c:27:85:ac:58:f0:d1:
                    78:64:1d:30:90:e6:fd:01:ce:17:ec:cd:b2:8b:59:
                    bc:e5:e0:d1:63:86:9c:1b:a3:04:8e:a9:2c:dc:6e:
                    c3:d4:1e:c1:35:a7:f2:7e:9c:5b:bc:95:ef:d5:34:
                    5f:63:40:ef:a2:a9:9a:f3:40:a7:12:a9:e3:6f:8c:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:D0:DF:E1:68:08:03:F3:BE:7A:52:AC:6F:E6:C1:02:A4:3F:32
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EC13261001A711ED9FFFBDE9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:18:e0:80:e3:01:07:73:b9:4f:a0:6a:29:1e:5f:73:32:
         92:0a:da:89:a1:cf:02:5e:ef:a3:33:11:d7:d9:27:bd:78:16:
         c4:34:99:f8:45:ce:60:82:2a:11:fd:db:d5:dc:83:fc:e8:94:
         7e:ea:25:6a:7e:5b:30:23:c3:f0:d3:b6:ed:7b:43:a6:cc:46:
         1f:de:06:5d:fa:20:27:01:5b:41:2c:71:13:24:aa:69:62:29:
         c3:04:c4:ae:77:24:d6:b6:23:b1:e4:6a:77:4c:4c:13:b6:b0:
         ae:33:5f:8d:06:ca:ec:2c:66:62:50:5f:55:f3:ae:de:d6:46:
         c1:26:5e:a3:31:51:a4:ef:b5:63:e6:c6:5c:bd:c0:bc:91:49:
         ac:ca:c7:df:52:79:60:2e:01:71:5f:80:2b:d3:a7:9b:86:d4:
         00:e5:ec:03:b3:c5:33:32:76:ad:6a:e0:b6:e1:e5:6c:0b:c4:
         b5:1c:d3:8a:c7:25:63:0b:25:fb:f9:68:7a:07:f0:d0:b3:ef:
         57:77:3d:ba:d7:b9:83:c4:a9:bc:22:06:d3:6e:9b:a8:9e:2c:
         85:97:15:34:ec:21:48:71:ad:d5:ee:1e:08:81:b5:42:11:0a:
         a7:e2:f9:47:8a:6a:03:76:2d:d4:a0:cb:09:91:a6:07:48:52:
         17:4d:cf:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA3MTIwNjAwMjBaFw0yMzA3MTIwNjAwMjBaMBgxFjAU
BgNVBAMMDTYyY2QwZGY5LWM3MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcMz2o6I1OCAhW1fPxJRcfQlz0Yj9ZsmFt43Jo2Vqc3wkgWQQ8lSJybPBy
y3pvHuoI4lMCLNI+Wl/+B7LWZZEqio+ZCMdp3Uunr4P0yeaOZidxwrfowhYi57V7
qhtzIpoTtUGZsGzogjBGZsvAloDIoQMUOX4no4KlLAEzvssUuFDL+ULODFLEDJ81
rIr8d5J9oa2pYzAFJEDCbWtT77zqc1rX3NdXUONNlRdm/34IinnCkcV6qIS8+ecr
fCeFrFjw0XhkHTCQ5v0BzhfszbKLWbzl4NFjhpwbowSOqSzcbsPUHsE1p/J+nFu8
le/VNF9jQO+iqZrzQKcSqeNvjPivAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWZXQ
3+FoCAPzvnpSrG/mwQKkPzIwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0VDMTMyNjEwMDFBNzExRUQ5RkZGQkRFOUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAIP6GOCA4wEHc7lPoGopHl9zMpIK2omhzwJe76MzEdfZJ714FsQ0mfhF
zmCCKhH929Xcg/zolH7qJWp+WzAjw/DTtu17Q6bMRh/eBl36ICcBW0EscRMkqmli
KcMExK53JNa2I7HkandMTBO2sK4zX40GyuwsZmJQX1Xzrt7WRsEmXqMxUaTvtWPm
xly9wLyRSazKx99SeWAuAXFfgCvTp5uG1ADl7AOzxTMydq1q4Lbh5WwLxLUc04rH
JWMLJfv5aHoH8NCz71d3PbrXuYPEqbwiBtNum6ieLIWXFTTsIUhxrdXuHgiBtUIR
Cqfi+UeKagN2LdSgywmRpgdIUhdNz2s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org