Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F21253E208A211F08392F17C762E951A.roa
File:                     F21253E208A211F08392F17C762E951A.roa (raw, json)
Hash identifier:          Fh6qvAo6s+ie/XxTEL0XHxDrEJ3xaCGgGLMGUYr3Vo0=
Subject key identifier:   5D:73:2A:74:68:6A:95:EA:AB:8C:AD:92:16:76:2C:D7:D6:FB:C6:F2
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       07E8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F21253E208A211F08392F17C762E951A.roa
Signing time:             Mon 24 Mar 2025 11:27:19 +0000
ROA not before:           Mon 24 Mar 2025 11:27:03 +0000
ROA not after:            Tue 24 Mar 2026 11:27:03 +0000
asID:                     2914
IP address blocks:        196.251.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 24 11:27:03 2025 GMT
            Not After : Mar 24 11:27:03 2026 GMT
        Subject: CN=67e14197-ea01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:33:8d:e1:09:d9:08:27:3b:69:c8:91:d2:
                    7f:58:65:8a:37:07:1c:33:f2:33:61:4c:25:55:ec:
                    f5:a7:57:fc:41:2b:0a:66:bb:74:47:69:27:ca:ee:
                    7b:ca:43:e8:0b:d9:9d:90:7e:cf:05:89:63:c9:d4:
                    78:14:f9:4d:b5:b8:aa:9d:ea:3e:86:b1:22:04:cf:
                    3e:af:2f:33:27:80:62:79:b4:56:66:fa:e6:97:ac:
                    84:19:8a:08:63:5a:2f:73:20:a1:13:62:28:28:78:
                    c4:6e:17:a3:c4:a3:34:40:52:d3:8c:ff:95:a1:a2:
                    e5:66:24:3e:66:04:14:c8:2a:f9:8c:f8:fc:85:92:
                    93:56:16:26:bb:9a:32:ea:ef:57:1a:2c:22:b6:6a:
                    d2:bc:17:1f:c7:9d:93:4e:5c:46:e9:03:c2:c2:a7:
                    42:77:bf:8b:5e:7b:9c:2e:59:08:50:09:7a:53:de:
                    2f:c8:d4:f1:cc:b9:9d:2a:56:75:ba:be:11:d2:9e:
                    19:03:c2:7f:80:c8:3d:41:39:55:b5:37:cc:81:26:
                    ab:d9:6e:62:03:61:3c:68:12:e1:df:2d:49:3f:6e:
                    08:6b:ae:92:89:04:6d:ac:09:e0:82:c8:ac:c0:0f:
                    0f:4e:c9:3c:95:02:03:a7:75:14:51:ee:a5:ef:21:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:2A:74:68:6A:95:EA:AB:8C:AD:92:16:76:2C:D7:D6:FB:C6:F2
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F21253E208A211F08392F17C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:c1:d2:ac:3b:7e:fc:69:01:4b:73:7c:c9:9d:89:fb:db:
         34:6e:f2:0e:d7:8d:37:56:48:2d:1b:f1:53:ab:9b:37:73:c9:
         38:a2:77:01:3a:60:f8:16:e1:6b:fb:5b:ed:b3:41:36:0b:f4:
         59:f6:09:a0:a5:ff:95:83:ab:87:14:c1:e1:eb:8c:70:58:48:
         43:ae:55:23:71:51:9b:7f:6f:87:97:30:35:0f:16:68:bd:ed:
         94:91:4f:43:c4:58:ce:f8:db:50:b5:4c:d2:00:61:00:75:e8:
         70:29:fc:56:11:e9:0c:09:53:31:62:6a:a5:d4:20:90:55:af:
         87:ee:c8:c2:d4:51:25:67:11:f7:ed:17:74:30:0c:87:99:e9:
         ba:a3:ed:c9:10:33:05:f1:a2:20:07:b8:c5:0b:37:fc:15:ca:
         5e:f3:2f:9f:ed:af:5e:fe:05:a5:4b:fb:cc:f2:09:68:cd:c6:
         73:97:f7:3f:fc:90:49:fe:16:df:72:67:63:69:b6:3d:2d:72:
         dd:6d:74:d2:3c:d0:54:64:3e:ed:49:74:69:0b:14:28:cc:6f:
         d0:b4:5e:6a:97:b2:e3:2e:ad:e9:b8:4d:a9:09:d8:bf:d4:44:
         77:d8:56:08:4d:46:1a:a9:42:76:e8:bf:d2:63:60:3d:9d:ba:
         d4:e2:71:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjQxMTI3MDNaFw0yNjAzMjQxMTI3MDNaMBgxFjAU
BgNVBAMTDTY3ZTE0MTk3LWVhMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDFjON4QnZCCc7aciR0n9YZYo3Bxwz8jNhTCVV7PWnV/xBKwpmu3RHaSfK
7nvKQ+gL2Z2Qfs8FiWPJ1HgU+U21uKqd6j6GsSIEzz6vLzMngGJ5tFZm+uaXrIQZ
ighjWi9zIKETYigoeMRuF6PEozRAUtOM/5WhouVmJD5mBBTIKvmM+PyFkpNWFia7
mjLq71caLCK2atK8Fx/HnZNOXEbpA8LCp0J3v4tee5wuWQhQCXpT3i/I1PHMuZ0q
VnW6vhHSnhkDwn+AyD1BOVW1N8yBJqvZbmIDYTxoEuHfLUk/bghrrpKJBG2sCeCC
yKzADw9OyTyVAgOndRRR7qXvIR+/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXXMq
dGhqleqrjK2SFnYs19b7xvIwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0YyMTI1M0UyMDhBMjExRjA4MzkyRjE3Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+0owDQYJKoZIhvcNAQEL
BQADggEBAKHnwdKsO378aQFLc3zJnYn72zRu8g7XjTdWSC0b8VOrmzdzyTiidwE6
YPgW4Wv7W+2zQTYL9Fn2CaCl/5WDq4cUweHrjHBYSEOuVSNxUZt/b4eXMDUPFmi9
7ZSRT0PEWM7421C1TNIAYQB16HAp/FYR6QwJUzFiaqXUIJBVr4fuyMLUUSVnEfft
F3QwDIeZ6bqj7ckQMwXxoiAHuMULN/wVyl7zL5/tr17+BaVL+8zyCWjNxnOX9z/8
kEn+Ft9yZ2Nptj0tct1tdNI80FRkPu1JdGkLFCjMb9C0XmqXsuMurem4TakJ2L/U
RHfYVghNRhqpQnbov9JjYD2dutTicfs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:13 2025 by rpki-client