Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FE381026B55D11ECB74B03875A40D577.roa
File:                     FE381026B55D11ECB74B03875A40D577.roa (raw, json)
Hash identifier:          vb5P6chbibE5dSiMva6XgWrDFUtfpme4W4PKJR7jWCg=
Subject key identifier:   23:6A:36:99:BD:52:68:24:EC:99:0F:F2:8C:EE:2B:6D:0B:85:8F:75
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0397
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FE381026B55D11ECB74B03875A40D577.roa
Signing time:             Wed 06 Apr 2022 03:59:44 +0000
ROA not before:           Wed 06 Apr 2022 03:59:40 +0000
ROA not after:            Thu 06 Apr 2023 03:59:40 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Apr  6 03:59:40 2022 GMT
            Not After : Apr  6 03:59:40 2023 GMT
        Subject: CN=624d1030-acdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:0c:48:11:03:da:96:7f:ea:08:a5:b8:67:
                    e4:87:ec:4a:a9:06:db:1c:a5:3a:d6:c4:6e:b0:68:
                    55:a4:cb:e6:c0:6d:7b:d7:48:e7:86:bf:0b:38:5a:
                    31:98:01:08:0a:b3:9d:53:f0:e1:6d:0f:43:0e:af:
                    15:4c:f0:93:05:ee:38:95:8a:43:e2:67:db:62:84:
                    fc:e0:07:ac:1a:ce:a1:ed:6b:ea:e5:10:64:3c:8e:
                    fb:03:ce:6e:4d:7f:57:15:09:02:b9:09:8e:a1:82:
                    3b:75:3a:18:c9:1b:54:a6:b7:40:12:ea:25:dd:f0:
                    a2:26:b2:cc:1d:a1:80:ee:94:df:84:ec:1b:28:a8:
                    18:d6:c0:56:b0:de:cc:78:37:ba:18:a9:dc:19:eb:
                    67:5e:3a:bd:d1:72:ce:ba:41:bc:ca:2d:58:d2:5d:
                    06:85:db:b4:3f:07:42:22:56:53:f8:80:69:f6:dd:
                    a6:a0:45:ef:54:2e:74:06:b3:73:5d:30:94:fa:4a:
                    87:6a:5d:7a:f7:b5:85:63:03:c6:6d:98:1d:f4:ed:
                    31:e9:68:1b:e0:68:b3:9e:11:07:7b:68:8e:11:82:
                    ac:8e:cc:b2:23:21:6a:33:ee:6b:0f:9b:f7:d0:ba:
                    57:5a:09:f4:45:82:71:28:5f:54:37:f7:ab:6c:77:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:36:99:BD:52:68:24:EC:99:0F:F2:8C:EE:2B:6D:0B:85:8F:75
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FE381026B55D11ECB74B03875A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:e6:52:5b:a0:a3:cf:7b:13:2b:25:8e:6c:f8:dd:33:10:fa:
         ba:e3:1e:83:77:d7:d7:9c:2a:58:cf:c2:1b:a3:fe:76:5e:b5:
         11:50:fb:1d:6d:80:93:44:28:05:a1:bc:cc:91:7e:4c:ec:71:
         5d:c0:3b:59:cd:54:df:c2:59:b2:4d:c7:1e:03:21:00:72:41:
         63:e6:1b:3b:1a:fd:ca:6c:4d:01:27:59:2f:6f:f6:de:35:57:
         50:de:99:9d:85:b8:41:35:72:34:9f:6e:b8:48:9f:a2:f3:b0:
         56:b7:45:ad:00:1a:1c:a2:bd:93:d0:d6:21:d3:02:eb:cc:75:
         65:69:3c:10:c8:25:04:cf:18:2d:8f:7a:db:9c:76:ed:b0:e2:
         c8:c8:6b:87:d2:cf:ea:a7:e6:0f:4e:40:d3:f8:0e:4d:66:6b:
         b6:02:ac:45:47:88:2b:3b:8f:6f:bf:ee:29:f2:c4:7e:c8:93:
         51:3f:2e:83:36:fe:37:61:4f:e3:ac:52:38:ee:72:82:04:42:
         1f:b8:62:fb:4e:47:cb:e7:d3:d1:a9:36:7c:82:9c:2c:98:bb:
         ac:3a:66:2d:60:6d:37:4b:85:31:34:51:20:e2:5c:75:2a:49:
         9a:ca:7f:e9:af:52:4d:20:4f:2d:73:24:24:0c:65:a0:6a:e1:
         c7:fe:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org