Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F1A432B4C16911EC81FBC6DBF1222468.roa
File:                     F1A432B4C16911EC81FBC6DBF1222468.roa (raw, json)
Hash identifier:          6cfyFuL50kP215kSFEwvK1eeskhhMINssuTDMstT1BU=
Subject key identifier:   66:4D:CC:E1:91:2B:29:58:D3:1A:1B:DB:E4:AF:DA:A1:4C:6E:75:BD
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       03FA
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F1A432B4C16911EC81FBC6DBF1222468.roa
Signing time:             Thu 21 Apr 2022 11:55:31 +0000
ROA not before:           Thu 21 Apr 2022 11:55:25 +0000
ROA not after:            Fri 21 Apr 2023 11:55:25 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr 21 11:55:25 2022 GMT
            Not After : Apr 21 11:55:25 2023 GMT
        Subject: CN=62614633-3bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:18:1d:ed:de:93:13:7d:30:5a:25:eb:bb:
                    90:c3:90:a4:fe:06:f0:ae:9f:a9:c3:82:36:26:ce:
                    26:e0:66:c1:85:81:92:c6:56:42:b2:4c:f8:32:90:
                    06:f3:27:96:54:6f:45:ea:56:48:ee:34:a9:ed:60:
                    d6:23:05:df:03:bb:4d:d8:cf:a5:d7:c2:1e:51:6a:
                    01:f7:b0:b4:ee:0c:56:17:fa:2e:be:19:6b:b2:17:
                    fb:89:d1:32:ac:05:d4:de:1e:1b:38:be:dc:b4:8a:
                    78:80:97:ff:93:8f:b2:48:17:ef:01:f6:64:01:3a:
                    31:86:58:a2:a5:af:b8:78:b9:2f:0e:02:9d:5f:b4:
                    6d:d9:f8:d3:ee:06:80:f8:8a:ef:c5:28:b8:f6:06:
                    73:be:14:c3:cf:1d:22:6f:10:d5:87:ba:da:ac:86:
                    13:22:70:34:32:b1:dd:85:3f:44:9e:89:ca:98:d4:
                    98:86:3b:d6:06:43:19:ce:22:5e:3f:5b:1b:4f:d2:
                    04:99:c6:14:7b:e6:bf:fc:6d:f0:8e:00:2f:37:f7:
                    c9:bf:c5:57:8d:ad:dd:62:d2:8e:30:2b:bd:10:10:
                    5a:76:45:6a:4f:db:8d:44:34:99:10:8f:33:5b:40:
                    f5:9a:ce:dd:56:50:35:d8:93:94:e9:19:24:f9:b7:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:CC:E1:91:2B:29:58:D3:1A:1B:DB:E4:AF:DA:A1:4C:6E:75:BD
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F1A432B4C16911EC81FBC6DBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:19:cd:7f:eb:4e:35:2c:44:60:79:1f:9e:5a:27:61:8e:20:
         f0:0a:5f:f7:9f:71:4a:46:4f:14:f1:79:72:4e:82:16:46:e4:
         43:04:41:5e:bb:ef:d5:a4:a9:a7:07:f6:08:67:d6:4d:5b:ef:
         f3:7e:13:b8:7e:23:ca:23:89:df:52:3e:8d:6b:50:fc:99:ff:
         e8:9b:16:48:2e:4a:4f:01:14:ee:00:b8:31:f4:61:b8:9f:db:
         d2:ed:2b:de:be:8f:7e:29:80:46:4f:d5:02:3c:32:f6:a4:33:
         5f:b4:3a:c3:60:92:98:a9:e0:f6:72:78:49:f8:b8:3f:00:97:
         0d:05:11:9a:c2:e2:d4:63:b6:aa:40:2a:bf:96:5a:de:40:de:
         f4:65:6e:c6:d5:0a:18:63:bc:a9:79:ed:59:82:80:0a:a4:00:
         e2:f4:40:02:f5:ec:b0:8e:10:fd:b0:b3:d9:b2:6b:d7:49:14:
         bb:f1:bf:3e:15:d6:64:2b:a7:af:11:f8:82:98:4a:a8:c5:a9:
         a4:a9:53:c9:b1:36:e1:cb:82:f9:c5:75:b2:c0:b2:19:28:b7:
         ac:e6:2c:05:bc:b7:2e:ac:dd:34:35:49:7f:e3:64:66:a8:18:
         19:4c:6c:13:31:da:cb:93:64:5f:6d:c5:3b:73:31:6e:5f:ac:
         64:27:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org