Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2A245122042011F0B64D5B5D762E951A.roa
File:                     2A245122042011F0B64D5B5D762E951A.roa (raw, json)
Hash identifier:          qJSQhHYYqnn28b5313HryPaZXETjwNPhlo1pGCYmhmE=
Subject key identifier:   7E:B7:7D:0F:B9:4F:32:9F:81:CE:1D:36:EF:74:4E:54:64:8C:D2:16
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0747
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2A245122042011F0B64D5B5D762E951A.roa
Signing time:             Tue 18 Mar 2025 17:41:04 +0000
ROA not before:           Tue 18 Mar 2025 17:41:01 +0000
ROA not after:            Tue 17 Mar 2026 17:41:01 +0000
asID:                     329007
IP address blocks:        102.135.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 18 17:41:01 2025 GMT
            Not After : Mar 17 17:41:01 2026 GMT
        Subject: CN=67d9b030-1d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:79:9e:1d:47:ee:7e:cb:96:fe:99:8b:41:
                    69:79:6f:9a:72:12:59:fc:f5:f0:6a:27:f1:d7:24:
                    0d:df:72:4d:17:0d:8c:2a:64:77:a9:0f:71:30:f4:
                    b0:8b:25:e8:51:f2:7e:d2:5a:01:e6:82:96:e0:ea:
                    03:49:e0:4e:f7:fa:9e:24:71:1e:67:81:27:0b:e3:
                    4a:05:e7:26:37:c2:61:f8:d1:4c:da:3f:9a:db:36:
                    56:bb:45:5a:a3:c7:07:7a:81:ec:05:c4:bb:aa:8a:
                    b5:bd:b0:14:64:e2:60:0f:65:51:23:52:42:c5:47:
                    99:1e:ca:8a:a4:bc:4d:c3:61:fd:71:d3:94:6a:82:
                    71:5b:1e:bd:59:59:f1:24:77:be:cd:20:fe:ec:d2:
                    c9:f8:09:a1:5e:97:dd:ae:fe:ad:03:aa:e1:5e:08:
                    b3:d4:d7:50:b9:42:02:62:18:65:b5:ce:e7:8f:28:
                    1f:6b:af:aa:e3:4b:85:9e:ab:b5:08:17:c3:d4:6b:
                    63:43:fc:8e:3e:e4:d9:89:6b:eb:e6:63:43:fe:55:
                    63:ee:ce:e3:7f:8b:c4:cc:bd:dc:06:58:94:a5:16:
                    5d:5e:30:a5:59:56:ab:33:6e:90:d2:dc:1a:1a:ed:
                    da:d7:b2:ca:f0:19:ff:84:c3:07:aa:3a:27:c6:16:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:7D:0F:B9:4F:32:9F:81:CE:1D:36:EF:74:4E:54:64:8C:D2:16
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2A245122042011F0B64D5B5D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:72:27:99:ce:ec:db:85:d9:99:d0:65:3e:e4:02:03:65:
         69:8e:99:04:9c:45:f1:62:4d:57:9e:53:2a:49:87:39:fb:3c:
         37:05:be:c2:9a:4e:a8:ed:f4:c4:29:26:5a:af:6e:14:2e:dc:
         a1:cc:4f:5a:1e:46:d0:d8:5d:a8:01:5e:90:43:6f:91:a8:bb:
         82:50:13:98:bb:fe:49:c0:a8:b6:4e:b2:ed:9f:9f:89:6f:28:
         18:9e:aa:8d:11:1c:15:4a:9f:74:b9:3a:36:90:c1:84:d6:12:
         23:85:fb:cf:3e:b5:9e:51:0c:c6:43:0b:80:51:cb:08:29:61:
         de:92:67:3f:05:e4:f3:18:8f:ba:8c:0d:ee:f3:83:a3:6f:83:
         c8:0d:8f:f0:d5:04:91:2c:26:fc:70:49:de:81:a6:71:ee:fb:
         fd:c1:33:26:80:7a:b1:89:d8:55:31:2f:99:bc:4c:23:3d:3d:
         7b:a1:69:ec:0f:93:af:51:33:b8:b9:1d:2b:4d:4e:aa:0f:30:
         e4:2a:2d:6a:14:c6:74:bd:c4:43:d0:ab:78:2f:f2:a6:a6:e5:
         8f:de:88:b9:44:82:64:b2:81:b5:83:c4:2c:de:f9:fe:2c:45:
         94:44:89:b3:fe:9c:a2:b5:2a:59:91:7e:df:d5:e4:b2:b6:18:
         2f:f9:e8:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMTgxNzQxMDFaFw0yNjAzMTcxNzQxMDFaMBgxFjAU
BgNVBAMTDTY3ZDliMDMwLTFkM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/OHmeHUfufsuW/pmLQWl5b5pyEln89fBqJ/HXJA3fck0XDYwqZHepD3Ew
9LCLJehR8n7SWgHmgpbg6gNJ4E73+p4kcR5ngScL40oF5yY3wmH40UzaP5rbNla7
RVqjxwd6gewFxLuqirW9sBRk4mAPZVEjUkLFR5keyoqkvE3DYf1x05RqgnFbHr1Z
WfEkd77NIP7s0sn4CaFel92u/q0DquFeCLPU11C5QgJiGGW1zuePKB9rr6rjS4We
q7UIF8PUa2ND/I4+5NmJa+vmY0P+VWPuzuN/i8TMvdwGWJSlFl1eMKVZVqszbpDS
3Boa7drXssrwGf+EwweqOifGFvK3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfrd9
D7lPMp+Bzh0273ROVGSM0hYwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzJBMjQ1MTIyMDQyMDExRjBCNjRENUI1RDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh08wDQYJKoZIhvcNAQEL
BQADggEBABifcieZzuzbhdmZ0GU+5AIDZWmOmQScRfFiTVeeUypJhzn7PDcFvsKa
Tqjt9MQpJlqvbhQu3KHMT1oeRtDYXagBXpBDb5Gou4JQE5i7/knAqLZOsu2fn4lv
KBieqo0RHBVKn3S5OjaQwYTWEiOF+88+tZ5RDMZDC4BRywgpYd6SZz8F5PMYj7qM
De7zg6Nvg8gNj/DVBJEsJvxwSd6BpnHu+/3BMyaAerGJ2FUxL5m8TCM9PXuhaewP
k69RM7i5HStNTqoPMOQqLWoUxnS9xEPQq3gv8qam5Y/eiLlEgmSygbWDxCze+f4s
RZREibP+nKK1KlmRft/V5LK2GC/56BA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:49 2025 by rpki-client