Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FA6DBBD8089F11F0B5E7376C762E951A.roa
File:                     FA6DBBD8089F11F0B5E7376C762E951A.roa (raw, json)
Hash identifier:          EOIqEXFwenJ5ktL+lKXMRfJUZqDtzJ0Vo86ZTG5CN+A=
Subject key identifier:   DB:CF:97:FD:DE:70:86:34:C8:69:63:89:2E:ED:42:3F:3F:6C:4A:0B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       07BD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FA6DBBD8089F11F0B5E7376C762E951A.roa
Signing time:             Mon 24 Mar 2025 11:06:04 +0000
ROA not before:           Mon 24 Mar 2025 11:06:01 +0000
ROA not after:            Tue 24 Mar 2026 11:06:01 +0000
asID:                     2914
IP address blocks:        102.135.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981 (0x7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 24 11:06:01 2025 GMT
            Not After : Mar 24 11:06:01 2026 GMT
        Subject: CN=67e13c9c-3d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:a0:00:63:fd:a3:22:eb:5b:31:e4:70:ba:
                    b7:fc:3a:b0:f2:97:15:5e:7b:51:6a:b2:13:1f:44:
                    2a:88:28:80:b2:25:41:ec:43:8d:b1:82:8c:7c:bd:
                    4d:f8:43:59:df:80:46:f4:08:17:06:5e:08:31:08:
                    18:eb:e5:d9:db:0c:54:21:4f:23:eb:d5:4c:55:c5:
                    1c:fd:76:1e:a4:f6:60:64:b5:c4:39:3a:a0:d0:e8:
                    e1:fe:46:ce:06:b6:89:49:d1:21:2a:d1:7b:c0:a8:
                    10:34:2c:78:f4:70:22:7f:01:fd:47:29:c9:68:39:
                    75:ae:ad:bd:5f:dd:71:c8:da:e7:52:e8:02:fb:7e:
                    d3:bd:bf:f5:43:99:67:7a:20:b5:14:19:7d:53:a9:
                    18:be:31:ce:b3:09:8f:7c:e9:c7:09:5a:fd:88:7e:
                    96:f3:b4:fc:1e:cc:87:ed:eb:d5:8a:1f:eb:07:af:
                    91:c9:8a:d2:16:6c:dd:80:b7:95:1c:a2:13:32:d6:
                    04:48:33:fa:49:29:1c:8d:8a:bb:0c:f4:2d:1a:b4:
                    ba:33:e7:ad:02:c8:63:8e:59:ac:2d:85:0a:a5:e1:
                    35:2a:19:fa:69:9a:e7:8e:fa:31:ef:27:f8:f0:df:
                    6f:84:ee:28:bd:77:cc:c1:79:ed:f7:54:13:f3:c9:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CF:97:FD:DE:70:86:34:C8:69:63:89:2E:ED:42:3F:3F:6C:4A:0B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FA6DBBD8089F11F0B5E7376C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:ce:1f:82:71:0e:b6:42:e7:d7:9a:fa:d1:d0:35:fb:18:
         95:92:b4:c9:be:c7:d5:aa:d3:3a:2d:76:b1:63:2f:f8:87:c8:
         f1:7d:56:87:c0:1a:47:7a:f6:df:8a:b4:33:66:52:ea:69:68:
         fc:5a:c7:08:d2:2c:55:dc:c6:31:d6:3e:1d:bb:54:e5:58:6d:
         37:8c:2b:41:1a:60:15:5c:03:a9:88:33:f8:fe:4b:4d:47:ad:
         41:92:40:f1:f2:46:8d:4d:14:c5:ad:52:4c:31:df:e1:d3:1a:
         f6:66:c3:a1:53:09:50:c4:36:9e:3e:1e:d9:62:5e:a0:2e:a9:
         7d:3d:95:79:29:b7:f4:67:8c:31:78:68:01:7e:d1:ad:80:20:
         7a:08:ae:73:36:63:ff:05:51:10:86:e2:c5:bd:ce:b3:b7:e9:
         45:73:26:8b:7b:25:0d:49:a7:34:53:c7:22:5f:ed:b5:0e:91:
         e3:88:9b:4c:e6:6c:53:6b:2b:28:52:07:b5:f6:f2:1f:0c:29:
         b8:95:8b:9f:90:cf:0e:2c:d4:6e:e4:2a:ef:27:d8:48:16:3f:
         0a:ff:c9:c1:1d:0d:e3:66:ad:b9:5d:88:cb:bb:43:04:c9:0f:
         42:53:5e:22:eb:6f:a0:24:10:75:2f:3e:c8:95:a2:2f:77:a0:
         51:e1:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:48 2025 by rpki-client