Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26B980B4C6A111EF861A19A8762E951A.roa
File:                     26B980B4C6A111EF861A19A8762E951A.roa (raw, json)
Hash identifier:          B1fzA1Z7PXvGGYJYCD/zv34wZ/ROqCh+V4oqoto5zK8=
Subject key identifier:   12:F9:4F:09:28:4B:B0:05:48:4B:36:45:1B:0F:C9:44:EB:6F:9D:7D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       04BB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26B980B4C6A111EF861A19A8762E951A.roa
Signing time:             Mon 30 Dec 2024 11:28:11 +0000
ROA not before:           Mon 30 Dec 2024 11:28:08 +0000
ROA not after:            Wed 24 Dec 2025 11:28:08 +0000
asID:                     329007
IP address blocks:        196.251.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 30 11:28:08 2024 GMT
            Not After : Dec 24 11:28:08 2025 GMT
        Subject: CN=677283cb-55b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:3d:f1:ec:59:7f:79:8b:71:47:86:ce:33:
                    2e:8a:12:66:60:c1:f5:1b:19:48:35:fb:3d:6b:c7:
                    cf:d9:1e:d6:b6:ac:8c:7d:2f:e3:f9:7f:e3:21:dc:
                    d6:75:c7:17:1f:43:85:ab:42:cd:83:fc:22:4e:2d:
                    28:2c:7c:c4:8d:73:f8:50:34:91:19:22:1b:8f:be:
                    43:c5:47:49:e8:18:c4:51:75:15:11:cc:7b:97:23:
                    b3:89:f0:20:e0:00:20:7c:7d:a3:fd:2c:66:3f:2b:
                    ff:c4:0c:85:ab:f4:3b:f0:7b:f3:af:91:56:35:bc:
                    86:39:51:45:77:a6:64:3b:57:e6:ee:2d:35:8a:29:
                    58:02:54:8a:13:cd:d1:df:66:f7:67:85:89:35:f3:
                    3f:6d:3e:e0:84:6f:dd:96:73:68:c0:ec:e0:6e:e1:
                    b8:a1:f3:3a:08:d1:b7:e3:f9:79:5e:09:71:cc:38:
                    10:77:c3:0d:44:20:50:6f:8c:28:d2:7a:ff:f1:e8:
                    3d:c5:d6:83:e6:7e:34:e6:c3:ed:85:ce:19:1f:38:
                    97:24:18:cc:83:cc:86:b2:01:1b:ee:96:2e:e6:8b:
                    79:ef:90:c7:1b:ca:91:29:73:9d:51:ac:8f:63:92:
                    6e:4c:9b:46:a5:68:b5:a2:1e:e7:62:5e:b3:71:88:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:4F:09:28:4B:B0:05:48:4B:36:45:1B:0F:C9:44:EB:6F:9D:7D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/26B980B4C6A111EF861A19A8762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:d8:ac:6a:6c:1c:8a:a6:59:ec:34:4f:f7:b4:c8:52:bb:
         de:54:9a:39:3b:59:19:64:62:c7:d2:cf:ff:66:6f:28:98:2b:
         ed:9a:70:93:54:ec:6c:11:87:8c:83:0a:14:8a:26:a5:4a:e8:
         2e:58:28:d9:da:22:91:cb:02:46:dc:e0:de:37:86:a9:8c:82:
         28:a7:c8:f7:77:ae:c3:f0:62:4d:76:af:e7:55:47:78:90:34:
         fb:b7:62:3d:95:bb:05:67:47:e1:a1:bf:49:9c:a0:3f:e6:80:
         d3:28:db:aa:75:bd:76:0c:d4:f8:a7:9e:ff:f5:54:31:f7:01:
         86:75:57:c3:ff:c6:bc:4b:e6:00:86:0f:81:0a:07:38:da:03:
         c3:3b:e0:ef:c5:5c:af:60:5a:09:12:93:f9:f0:16:d2:f5:47:
         9f:38:1a:d0:5b:73:4b:ff:75:b9:e5:46:17:2e:b9:49:db:01:
         97:a5:d7:55:9b:16:8e:f5:99:21:7e:ce:d8:3c:aa:fa:00:30:
         83:14:77:3e:9e:87:a4:b2:e3:17:31:da:87:59:cf:3a:ba:9b:
         76:67:ce:53:fe:7f:ae:df:fe:75:ae:2d:d1:a2:5a:ac:16:b5:
         c3:ff:78:9c:7c:35:3c:62:ba:cc:4d:4e:f8:14:0a:85:ed:c4:
         8a:be:c8:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBLswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMzAxMTI4MDhaFw0yNTEyMjQxMTI4MDhaMBgxFjAU
BgNVBAMTDTY3NzI4M2NiLTU1YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCz5z3x7Fl/eYtxR4bOMy6KEmZgwfUbGUg1+z1rx8/ZHta2rIx9L+P5f+Mh
3NZ1xxcfQ4WrQs2D/CJOLSgsfMSNc/hQNJEZIhuPvkPFR0noGMRRdRURzHuXI7OJ
8CDgACB8faP9LGY/K//EDIWr9Dvwe/OvkVY1vIY5UUV3pmQ7V+buLTWKKVgCVIoT
zdHfZvdnhYk18z9tPuCEb92Wc2jA7OBu4bih8zoI0bfj+XleCXHMOBB3ww1EIFBv
jCjSev/x6D3F1oPmfjTmw+2FzhkfOJckGMyDzIayARvuli7mi3nvkMcbypEpc51R
rI9jkm5Mm0alaLWiHudiXrNxiGHFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEvlP
CShLsAVISzZFGw/JROtvnX0wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzI2Qjk4MEI0QzZBMTExRUY4NjFBMTlBODc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3QwDQYJKoZIhvcNAQEL
BQADggEBAIyq2KxqbByKplnsNE/3tMhSu95Umjk7WRlkYsfSz/9mbyiYK+2acJNU
7GwRh4yDChSKJqVK6C5YKNnaIpHLAkbc4N43hqmMgiinyPd3rsPwYk12r+dVR3iQ
NPu3Yj2VuwVnR+Ghv0mcoD/mgNMo26p1vXYM1Pinnv/1VDH3AYZ1V8P/xrxL5gCG
D4EKBzjaA8M74O/FXK9gWgkSk/nwFtL1R584GtBbc0v/dbnlRhcuuUnbAZel11Wb
Fo71mSF+ztg8qvoAMIMUdz6eh6Sy4xcx2odZzzq6m3ZnzlP+f67f/nWuLdGiWqwW
tcP/eJx8NTxiusxNTvgUCoXtxIq+yAE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:01 2025 by rpki-client