Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7203A3FC096C11F08120A04D762E951A.roa
File:                     7203A3FC096C11F08120A04D762E951A.roa (raw, json)
Hash identifier:          uz/gTPmHEMfTjP4lWE1SG/nSaNGegn/95NL9eflCMYo=
Subject key identifier:   21:29:32:4F:6F:90:78:0B:01:FB:27:82:D7:24:64:85:29:6C:C1:0B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0816
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7203A3FC096C11F08120A04D762E951A.roa
Signing time:             Tue 25 Mar 2025 11:29:42 +0000
ROA not before:           Tue 25 Mar 2025 11:29:38 +0000
ROA not after:            Wed 25 Mar 2026 11:29:38 +0000
asID:                     2914
IP address blocks:        102.135.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 25 11:29:38 2025 GMT
            Not After : Mar 25 11:29:38 2026 GMT
        Subject: CN=67e293a6-bc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:b7:cc:99:00:1b:55:83:2f:c4:ee:f5:98:
                    2e:11:59:d9:6f:03:d0:6c:1a:c4:58:95:2d:94:91:
                    ac:a2:67:28:cc:d9:59:52:d3:72:18:5a:ca:8c:46:
                    12:cf:6b:13:fe:dc:34:0a:41:51:23:60:05:c1:e0:
                    70:76:87:70:07:b3:e4:f9:5b:48:7d:08:c3:64:4c:
                    bf:40:db:06:27:40:f9:ab:87:2f:eb:f9:f6:f3:0a:
                    74:67:01:8d:9a:51:af:b5:ad:79:7d:6e:15:50:ed:
                    dd:27:4c:01:f1:93:81:48:19:50:ab:57:4e:36:fb:
                    fb:d6:d8:34:b5:d4:cc:d1:05:da:10:1b:d9:87:5e:
                    84:96:74:c0:fb:f9:05:cd:ef:a5:be:75:af:29:24:
                    f1:2f:d7:42:08:bf:e3:06:6b:91:30:75:3b:4b:f2:
                    8a:73:dd:db:cb:13:05:3f:a2:62:18:0d:7f:e8:41:
                    47:84:cb:87:f1:a7:8f:0b:8b:6e:5e:9f:c8:c4:32:
                    a6:b3:84:36:7a:63:17:37:91:47:44:ed:ba:fc:19:
                    98:70:46:6b:dc:2f:76:70:04:5a:2c:03:aa:69:57:
                    b9:c8:e5:e1:b2:cd:3e:3b:d9:de:a1:ad:c5:38:ce:
                    4d:6b:8b:4a:d9:40:4f:a2:19:6e:06:23:8d:0b:86:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:32:4F:6F:90:78:0B:01:FB:27:82:D7:24:64:85:29:6C:C1:0B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7203A3FC096C11F08120A04D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:67:52:59:c8:72:9d:0b:5f:75:1c:83:0b:6a:82:03:1f:22:
         2b:21:5d:45:f2:e4:07:bc:1f:81:86:10:ca:e8:67:4d:d1:6b:
         f9:ac:b2:cc:af:33:a7:2e:d5:9e:8f:e6:53:cd:0e:ea:75:37:
         c3:17:d7:86:06:35:24:ff:12:78:db:18:8d:ff:77:ca:00:fc:
         35:4b:4d:4e:91:a5:f0:32:ea:84:28:97:d0:32:64:95:16:ff:
         ea:da:e3:31:17:d2:64:f0:ec:fa:9b:58:0c:fd:69:5a:bd:29:
         34:d2:3f:52:57:63:50:86:e5:6b:10:39:7b:8d:b3:a6:c2:89:
         4e:16:97:0d:e3:a9:f5:cc:93:05:62:52:51:83:da:94:e3:5e:
         40:04:31:4c:9a:cd:6c:fd:05:2c:96:19:cd:87:d5:f1:84:de:
         fc:42:f9:fb:59:67:50:5c:95:06:7a:13:39:11:50:5c:a2:47:
         2f:98:36:48:93:8e:6d:9f:6d:f3:2a:8b:5e:ca:2f:7b:75:09:
         9d:44:32:44:31:3d:e2:e3:17:c3:3f:20:b9:ad:d7:a8:62:06:
         2d:a2:fd:55:7e:d0:19:0e:5c:7e:91:08:b5:d5:50:4a:f4:2c:
         12:ad:41:cb:a6:e5:42:c7:98:01:ba:4f:a1:f3:c4:16:59:3b:
         5d:78:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:52 2025 by rpki-client