Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FE3A8A7024BE11EC9D576A67D8A014CE.roa
File:                     FE3A8A7024BE11EC9D576A67D8A014CE.roa (raw, json)
Hash identifier:          o5zmpktkJpRVMHLWaKfW44wiej26ab4Q0eH9fmJ+wZU=
Subject key identifier:   07:D8:A0:5D:75:BF:77:5F:1E:D9:C9:99:38:16:DF:A6:D3:FE:A1:FD
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       20
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FE3A8A7024BE11EC9D576A67D8A014CE.roa
Signing time:             Mon 04 Oct 2021 02:58:47 +0000
ROA not before:           Mon 04 Oct 2021 02:58:44 +0000
ROA not after:            Tue 04 Oct 2022 02:58:44 +0000
asID:                     666
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Oct  4 02:58:44 2021 GMT
            Not After : Oct  4 02:58:44 2022 GMT
        Subject: CN=615a6de7-a206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:3d:bb:5f:08:29:f1:a8:c1:24:6b:05:2b:
                    3f:af:1d:7a:16:24:da:af:6d:b1:75:4b:a1:31:cb:
                    d1:09:5d:c1:d1:e0:e5:97:1b:d5:10:f1:07:41:74:
                    fb:99:4a:15:e9:c5:7a:37:f7:8e:22:67:11:b7:9a:
                    11:ea:dd:d3:42:13:d7:f6:d0:27:3b:81:16:74:08:
                    4e:68:e3:e6:a3:9c:ff:22:42:6c:da:c3:7e:cc:39:
                    af:47:ea:5b:3a:3a:c4:b1:a5:4d:21:6c:ae:40:37:
                    fc:0a:93:d1:c2:58:9d:e8:af:15:33:81:73:6b:4c:
                    28:38:c6:be:5c:f2:b2:02:48:cd:c5:78:ab:93:1a:
                    15:f9:d0:68:07:b4:d3:00:99:f0:ac:2f:27:b5:5f:
                    fd:42:ba:65:58:16:dc:92:80:46:a6:fb:3e:dd:d5:
                    f0:e9:58:39:fe:de:90:26:03:4e:c4:46:ef:87:64:
                    34:1e:db:d4:80:bc:df:72:bd:c8:ee:80:1a:e6:7f:
                    c6:81:50:ca:c2:48:75:9e:fd:76:e7:fe:fb:4f:96:
                    25:07:2c:40:f9:ad:b6:85:71:62:48:2a:d5:95:ef:
                    8d:38:4b:b0:96:aa:a9:23:96:89:cf:01:bb:9c:dc:
                    ff:e2:55:0c:c8:06:f7:f5:ff:5d:88:4d:d2:91:d3:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D8:A0:5D:75:BF:77:5F:1E:D9:C9:99:38:16:DF:A6:D3:FE:A1:FD
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FE3A8A7024BE11EC9D576A67D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:9a:4f:2d:b0:bc:df:a0:9d:22:52:2e:b9:cb:4d:4a:21:
         9b:a9:2b:33:e9:5d:9d:03:41:41:5b:47:89:36:5a:43:71:cd:
         6a:2c:4d:91:bd:1f:36:16:c3:99:00:51:e3:43:df:91:b6:e0:
         81:93:21:8d:7a:33:22:78:f8:58:3a:99:67:26:1a:5f:dc:e2:
         90:8a:2b:26:05:a5:38:67:dc:29:d4:66:c9:48:3b:a8:24:54:
         b3:a9:a1:2b:0d:28:7c:8c:07:6f:87:0f:c7:26:08:75:d9:db:
         49:22:90:af:20:66:dc:9e:3e:07:cf:62:e3:95:a9:81:a3:3d:
         7e:ae:14:ff:80:aa:d2:66:79:a2:10:e6:06:91:be:91:db:dc:
         62:72:87:1e:3c:6e:dd:c3:a4:56:b6:1b:08:3f:f2:33:4c:5c:
         b1:8f:fd:2d:40:e5:10:5f:dd:c4:f7:6d:da:27:3d:cc:f4:de:
         06:64:8b:8c:90:74:73:cb:e7:49:f4:58:2b:e5:84:ae:eb:9d:
         cb:eb:26:c0:a5:e9:36:8c:10:27:25:2f:e1:0d:93:59:2c:11:
         79:c4:8e:97:c7:91:ba:10:60:df:dc:32:5a:64:e3:a9:60:a8:
         14:be:30:98:3b:8e:f5:35:fd:8b:91:41:a1:0f:57:32:98:86:
         6e:db:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org