Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/9319A76CA6BA11EBAA0FC931F8AEA228.roa
File:                     9319A76CA6BA11EBAA0FC931F8AEA228.roa (raw, json)
Hash identifier:          BMqpVWMRM2qV7gH1EpiYCRoVCVtMR15wCtxY433BR68=
Subject key identifier:   64:05:D8:5D:7F:36:07:99:FB:BC:84:A7:F0:64:EE:95:71:BC:8E:E0
Certificate issuer:       /CN=F36665C1AF/serialNumber=726458AC5385500836B96DDFB828FF668E753551
Certificate serial:       02
Authority key identifier: 72:64:58:AC:53:85:50:08:36:B9:6D:DF:B8:28:FF:66:8E:75:35:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cmRYrFOFUAg2uW3fuCj_Zo51NVE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/9319A76CA6BA11EBAA0FC931F8AEA228.roa
Signing time:             Mon 26 Apr 2021 18:09:43 +0000
ROA not before:           Mon 26 Apr 2021 18:09:38 +0000
ROA not after:            Thu 31 Mar 2022 18:09:38 +0000
asID:                     328771
IP address blocks:        102.222.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36665C1AF/serialNumber=726458AC5385500836B96DDFB828FF668E753551
        Validity
            Not Before: Apr 26 18:09:38 2021 GMT
            Not After : Mar 31 18:09:38 2022 GMT
        Subject: CN=608701e7-ab20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:48:83:33:03:3d:17:3b:c6:26:63:62:6c:
                    69:75:88:4a:c3:8c:a4:1f:f9:47:3e:3c:d3:55:be:
                    7b:19:66:3d:d4:8b:83:2b:2f:5c:d8:c0:7a:79:fc:
                    fb:11:c4:21:86:52:04:c2:2b:c5:c2:5c:3d:77:94:
                    c0:04:89:ff:53:34:76:66:4b:78:77:4f:40:f2:c0:
                    9c:b7:01:b8:18:2f:08:d4:ac:64:1b:1c:91:21:fd:
                    76:58:d4:12:4e:57:a1:10:93:99:e5:75:b1:ce:09:
                    46:bb:15:b7:5b:74:20:3a:a0:76:2d:a3:3c:05:38:
                    81:35:a4:c8:18:30:4e:06:22:ce:01:8d:dd:a7:0c:
                    fe:ec:ab:da:72:54:8b:3f:ab:75:9e:3d:29:a0:54:
                    a5:56:87:e0:41:bc:b4:72:c3:17:46:7b:70:3d:0d:
                    b0:2b:ad:8d:ef:d7:93:67:50:fe:47:66:fd:b3:1f:
                    dd:88:1f:ea:f7:8c:f3:1b:4d:6c:c2:fc:0c:57:a1:
                    34:53:c7:48:78:19:cc:4a:90:bf:a9:90:c2:6f:7e:
                    00:08:b4:57:83:47:46:fd:b6:0b:75:5c:7f:b8:d0:
                    08:a0:75:cb:13:2d:38:1d:56:58:fa:c0:60:67:c6:
                    1a:99:24:48:c5:cc:e2:65:ab:0b:91:9c:6f:58:09:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:05:D8:5D:7F:36:07:99:FB:BC:84:A7:F0:64:EE:95:71:BC:8E:E0
            X509v3 Authority Key Identifier:
                keyid:72:64:58:AC:53:85:50:08:36:B9:6D:DF:B8:28:FF:66:8E:75:35:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/cmRYrFOFUAg2uW3fuCj_Zo51NVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cmRYrFOFUAg2uW3fuCj_Zo51NVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36665C1/A59EEB5CA6B711EB921BE22DF8AEA228/9319A76CA6BA11EBAA0FC931F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e4:c8:21:03:3a:5c:44:85:6c:7a:d2:07:9a:ff:23:4d:69:
         99:bc:16:00:e7:90:64:b4:79:f8:6d:38:cc:be:58:56:54:b0:
         72:61:e9:ce:7f:6e:b0:02:c9:0c:6a:08:21:a0:1a:4b:41:64:
         d0:96:db:6c:d6:e5:59:58:cb:08:b2:89:8f:a1:34:e0:2d:dd:
         63:d1:e2:f5:5c:73:ff:7b:6a:dc:a2:73:2d:e0:3c:a8:2f:9a:
         f6:57:8b:32:63:90:96:1d:e4:7d:03:c6:5e:ca:a6:5b:f9:50:
         88:48:eb:05:a4:92:96:09:df:47:9b:e7:b8:c4:8d:fa:26:1d:
         58:33:cb:1a:e6:ee:8b:98:28:5e:3b:62:40:29:ad:da:73:76:
         60:2d:07:13:fc:02:3b:d7:20:81:af:5b:ab:b6:1c:c7:f4:82:
         96:fd:fa:c9:cd:98:d3:f2:f8:a1:22:cc:87:4d:79:99:bd:4f:
         a5:c0:eb:19:9f:09:25:8b:47:ed:53:fb:f9:d7:51:14:8c:bc:
         f7:52:b6:88:e3:bf:19:36:8d:86:b5:5a:95:6c:32:7d:55:46:
         49:91:15:28:ef:6b:a9:af:b7:e9:7b:56:f9:b1:80:90:99:a1:
         dd:35:ff:d6:ec:b6:f1:db:7f:38:f3:45:e8:46:7d:4b:c9:60:
         99:75:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org