Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F7BD01DCB97911EC8DCC509A5A40D577.roa
File:                     F7BD01DCB97911EC8DCC509A5A40D577.roa (raw, json)
Hash identifier:          yAgqWOsOPnoShbHr8tvk+phpVp1Ooyu+zjvAiKWNlwY=
Subject key identifier:   13:0C:17:0B:39:9B:5C:47:AD:33:67:62:3D:3D:79:DF:9B:04:93:0B
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       03B8
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F7BD01DCB97911EC8DCC509A5A40D577.roa
Signing time:             Mon 11 Apr 2022 09:30:04 +0000
ROA not before:           Mon 11 Apr 2022 09:29:59 +0000
ROA not after:            Tue 11 Apr 2023 09:29:59 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr 11 09:29:59 2022 GMT
            Not After : Apr 11 09:29:59 2023 GMT
        Subject: CN=6253f51c-4b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:71:49:22:3c:6a:8e:56:6d:d2:27:4d:09:
                    95:11:d6:f8:c4:3c:e1:55:d4:d9:f8:9c:a6:1e:c4:
                    da:9f:f9:d4:be:d6:17:9d:2b:2a:67:7a:d7:44:d8:
                    b0:d4:fa:15:f5:af:df:45:54:19:60:c0:85:98:2e:
                    5f:b4:40:b8:86:72:2a:e9:5c:e6:21:16:dd:77:ff:
                    f7:f6:df:24:bc:3c:45:cd:3b:60:6b:63:41:b4:d9:
                    6c:f6:c2:c5:ab:9c:d2:49:3a:bc:e8:cd:79:6f:13:
                    7f:b1:0f:a3:c8:16:11:61:b9:dc:2b:21:d5:e0:56:
                    fa:2b:37:fb:be:c2:f2:15:46:92:c6:69:30:df:4e:
                    bb:d1:58:9f:2b:79:47:65:30:a1:73:8f:a9:9f:6f:
                    6a:50:3a:1a:ee:7e:b8:a7:5a:3d:48:52:39:22:1b:
                    43:46:c4:d2:74:50:f9:c2:b4:27:e9:3d:7c:68:f5:
                    68:f2:2c:d1:0a:7a:e8:0c:79:ea:9d:11:2e:11:20:
                    f4:17:c8:7c:0b:1e:08:56:75:6f:1f:fe:70:06:4a:
                    ce:9f:31:8f:41:0b:d9:c2:d6:96:71:3d:9a:a6:ad:
                    49:e6:3f:15:2a:12:9b:cf:eb:24:d7:26:b5:83:3f:
                    5b:51:f8:30:c1:7f:12:04:9a:f9:59:f9:f0:a3:79:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:17:0B:39:9B:5C:47:AD:33:67:62:3D:3D:79:DF:9B:04:93:0B
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/F7BD01DCB97911EC8DCC509A5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:40:68:33:58:c2:63:28:f7:1e:c2:69:5a:c0:44:01:cd:73:
         87:42:16:d6:3f:47:3e:26:c6:91:13:5e:41:ab:01:78:e9:60:
         50:81:67:af:d7:75:78:86:78:e3:49:f7:68:c2:2c:43:f6:bb:
         1f:4f:52:7d:bb:82:f8:7e:b7:2b:3b:80:ae:41:18:cd:92:22:
         7b:7a:55:02:8f:19:0b:a3:5d:2f:c2:f8:c0:9b:48:ae:62:ff:
         9e:f9:6d:5e:a0:eb:b0:c0:b9:ee:bb:4f:5c:4e:68:1e:94:b6:
         a0:97:01:de:33:6a:bd:ce:69:fa:fa:f0:5f:e8:ce:64:4c:65:
         80:a3:46:5a:ae:9f:a4:bf:b1:a4:c4:40:07:f2:13:bf:26:4f:
         0b:c7:f8:da:9e:2f:59:e8:be:b6:2f:fe:d8:1f:44:90:2e:3b:
         c2:90:e6:4d:46:46:7a:28:93:d8:5c:ca:6f:e0:36:4c:22:6b:
         87:43:ef:af:84:f4:3e:b3:0a:36:fc:48:e7:ef:e9:5d:a1:a5:
         93:38:6c:cc:c7:48:06:a8:1d:14:c3:ca:61:86:70:80:ef:52:
         36:47:52:fb:ef:8b:98:25:c9:16:23:9e:61:2e:56:e8:88:bd:
         9f:eb:3b:3d:f8:57:88:b5:4c:df:f2:60:91:47:17:91:be:7d:
         a2:6a:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org