Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ED512038A3FE11EC86DD89825A40D577.roa
File:                     ED512038A3FE11EC86DD89825A40D577.roa (raw, json)
Hash identifier:          h3fbqXKjfK9Y5aTYqOGPpenW6W7aqCzydPYfBvsWRGU=
Subject key identifier:   AE:64:51:3B:4B:36:0F:07:E7:15:88:53:72:D8:9F:08:CE:5A:F4:3C
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0303
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ED512038A3FE11EC86DD89825A40D577.roa
Signing time:             Tue 15 Mar 2022 01:26:24 +0000
ROA not before:           Tue 15 Mar 2022 01:26:19 +0000
ROA not after:            Wed 15 Mar 2023 01:26:19 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 15 01:26:19 2022 GMT
            Not After : Mar 15 01:26:19 2023 GMT
        Subject: CN=622feb40-d245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:59:65:0f:86:d2:9c:95:49:1f:fa:49:c1:
                    d9:73:b6:e2:f3:8a:03:80:f1:91:40:07:52:22:6b:
                    b9:20:6d:4b:a0:fb:80:82:ee:93:c7:44:ab:e4:14:
                    2c:de:a5:e0:93:b7:08:b6:97:14:8f:6e:71:ec:1e:
                    39:c4:77:59:cc:c9:a0:38:32:96:7f:a6:c9:36:d1:
                    de:ca:37:07:31:87:a3:a3:a6:9f:e0:f2:e3:0e:4e:
                    59:88:57:48:56:27:e9:8b:4e:dc:2c:7b:3b:9c:1a:
                    e9:1a:de:75:21:4f:04:bd:36:9a:73:ce:63:ff:57:
                    63:55:6d:ed:61:ab:e8:f6:6d:1f:b5:c1:61:58:bc:
                    09:33:60:9b:c7:df:b5:66:8c:f6:31:3f:bc:b4:d6:
                    12:cf:81:b7:c9:57:a1:13:c0:f8:bf:73:a0:c2:0d:
                    3b:40:23:a0:b8:61:ef:51:60:e0:42:38:8a:3c:b1:
                    eb:d4:50:99:ec:63:eb:42:a6:5b:c9:a4:25:62:b8:
                    91:7a:28:cd:bd:c0:98:90:bd:94:f9:b6:79:75:ee:
                    3a:f7:b9:10:fe:fa:eb:70:61:64:fc:8e:f1:34:9e:
                    d5:8f:59:86:5f:1d:5a:ba:b6:fc:54:0f:13:70:5c:
                    41:ee:30:e8:69:58:de:a9:08:e2:d5:7a:90:cf:00:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:51:3B:4B:36:0F:07:E7:15:88:53:72:D8:9F:08:CE:5A:F4:3C
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/ED512038A3FE11EC86DD89825A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ed:f4:d1:90:07:77:9e:3f:05:9c:87:a3:07:6f:03:04:f1:
         9e:ee:b5:9e:15:aa:94:3b:d9:7a:13:bc:94:91:87:6a:5c:4d:
         77:9a:3f:19:1e:9e:5e:7f:19:94:5b:4b:8d:04:4f:18:bf:7b:
         ac:c7:ce:a3:c7:57:90:dd:29:85:31:f1:5b:17:a0:30:a4:2c:
         2a:21:ab:f0:65:22:bb:74:c6:af:73:4f:53:ce:50:5c:06:05:
         8c:73:a8:12:f1:6e:1a:d5:07:fe:d0:7c:e3:02:6a:81:6d:d3:
         c6:0c:61:47:83:1b:28:fc:fd:9c:31:88:7f:35:d5:3a:b1:62:
         0b:c3:69:e4:bf:07:68:7c:9e:95:80:a3:1d:c8:61:d1:59:a9:
         ff:a1:be:29:b8:21:5c:71:02:67:89:ab:7c:ba:05:6c:36:94:
         22:99:e1:98:df:d7:9a:a9:18:8d:50:93:9f:53:da:fe:dc:46:
         d3:ad:c0:23:d4:80:db:53:9c:04:83:27:a1:20:03:aa:bd:59:
         1c:20:1a:6f:11:d2:db:f7:7b:40:06:76:96:02:78:6a:4a:9c:
         ec:74:d7:6e:75:c1:32:dc:9e:96:ee:18:6a:e1:61:bf:b5:7e:
         63:ab:e8:fc:7d:a5:58:2b:00:a0:81:f9:ec:75:13:5a:99:6c:
         2e:45:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org