Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD49203A096C11F0AF34B04F762E951A.roa
File:                     BD49203A096C11F0AF34B04F762E951A.roa (raw, json)
Hash identifier:          CXzzSusvPEw/mfV+43huoqTJ1PHvT4FnCHxL2wJtUMQ=
Subject key identifier:   80:53:E5:A6:39:0E:D1:DB:E6:9F:71:01:2F:CA:F9:B5:39:F6:73:D4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       081E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD49203A096C11F0AF34B04F762E951A.roa
Signing time:             Tue 25 Mar 2025 11:31:49 +0000
ROA not before:           Tue 25 Mar 2025 11:31:45 +0000
ROA not after:            Wed 25 Mar 2026 11:31:45 +0000
asID:                     2914
IP address blocks:        102.135.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 25 11:31:45 2025 GMT
            Not After : Mar 25 11:31:45 2026 GMT
        Subject: CN=67e29424-94ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:ac:15:d4:64:e6:97:f4:d6:c0:6c:3a:78:
                    fe:14:ec:2e:3f:5c:79:f7:88:cc:31:ec:1d:dd:5f:
                    02:0a:30:01:8b:81:b1:cd:5d:45:4f:08:d6:d1:19:
                    6e:03:41:41:65:68:f5:77:5a:ed:56:89:71:06:32:
                    0e:61:9e:cf:65:8a:ed:c7:d8:0f:dc:a9:88:5b:c7:
                    27:dd:ff:75:35:dd:a6:4e:79:da:ad:90:4f:8f:e4:
                    eb:b1:3e:27:2a:83:7e:39:6a:f8:02:72:b6:46:b0:
                    f6:90:04:f7:74:b8:5e:22:e5:d1:b8:aa:a1:17:30:
                    98:93:d2:89:b8:ad:23:4b:f9:d5:8e:28:24:1f:30:
                    e8:04:80:0e:e6:92:b7:50:6c:f1:d2:0b:f9:56:81:
                    d6:74:2c:78:ca:7d:4d:7d:ef:b8:cc:25:84:75:d7:
                    5e:bd:6f:1c:04:ea:e4:34:22:b8:48:45:69:31:48:
                    c1:63:54:10:23:9d:9a:fb:94:4c:cd:7b:29:17:c0:
                    18:d2:a8:93:7d:aa:76:0f:47:4a:72:43:b3:f8:fe:
                    e6:14:f0:78:1a:01:d7:45:a9:9e:9b:47:cf:01:87:
                    be:b5:63:a7:4b:7c:6c:a2:2e:ae:b4:4e:d1:7b:7e:
                    95:e5:bf:39:c3:f9:78:5a:10:8a:27:ae:53:63:ee:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:E5:A6:39:0E:D1:DB:E6:9F:71:01:2F:CA:F9:B5:39:F6:73:D4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BD49203A096C11F0AF34B04F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:a6:85:41:9c:fd:69:b9:62:7d:c9:a2:66:7a:99:b2:82:
         e1:dd:86:79:ce:b7:53:49:53:ee:6a:d4:31:2d:1e:11:05:b5:
         b5:10:9e:eb:10:7a:a3:18:c7:08:d8:f2:ae:7e:59:ef:a5:0a:
         68:68:c3:3e:77:5b:7b:08:e0:a9:c7:ef:d7:56:5a:fb:8d:69:
         01:25:3c:75:c0:87:d5:fc:cb:8c:9a:1d:d3:e9:04:46:b1:cb:
         52:86:45:e8:11:38:50:2d:c2:90:12:91:fe:ab:78:57:7c:0f:
         0c:32:72:39:9c:9c:62:5f:f6:44:26:9c:89:ab:10:df:95:a8:
         ba:11:e0:3c:e2:e9:ff:8c:d4:07:96:39:88:14:01:7f:a5:9d:
         8e:77:e4:ff:40:64:31:3b:4f:66:20:ee:2a:7f:6c:b9:39:f1:
         36:e6:99:c4:44:1b:b5:5f:cb:d7:3f:93:99:3d:5e:eb:ac:13:
         0f:e9:ec:ed:43:67:f0:44:a2:8f:f1:db:0b:2b:02:98:c6:94:
         0a:a6:49:35:0d:5d:a7:77:02:20:62:a0:2d:04:45:b4:7c:13:
         d0:37:7e:27:16:79:a3:cd:04:76:23:a1:6a:72:82:90:ca:12:
         15:78:3b:17:fa:f5:3f:2c:57:07:3c:0a:7b:2a:ce:2f:b3:e0:
         f2:92:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:59 2025 by rpki-client