Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7B97602403C811F09F0A6249762E951A.roa
File:                     7B97602403C811F09F0A6249762E951A.roa (raw, json)
Hash identifier:          +Jak5yutg6uUY7yYc7IdyE5cSftpMdeNssbV5bQP6D8=
Subject key identifier:   EA:A5:D7:79:1E:CC:0F:67:5D:F7:20:9A:CD:4E:3C:EF:C2:5E:9E:32
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0C17
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7B97602403C811F09F0A6249762E951A.roa
Signing time:             Tue 18 Mar 2025 07:13:25 +0000
ROA not before:           Tue 18 Mar 2025 07:13:21 +0000
ROA not after:            Tue 13 Mar 2035 07:13:21 +0000
asID:                     36916
IP address blocks:        192.142.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR
        Validity
            Not Before: Mar 18 07:13:21 2025 GMT
            Not After : Mar 13 07:13:21 2035 GMT
        Subject: CN=67d91d15-4bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:08:e7:92:65:47:0e:4b:28:c5:9c:7f:19:
                    db:ce:4f:54:90:61:1d:48:bb:b6:34:95:32:c0:71:
                    64:f1:21:9b:d2:80:5d:55:cb:c4:c7:b0:c1:83:18:
                    73:c4:61:49:f5:e0:fb:f6:d8:c3:31:a6:d4:0e:f4:
                    89:3c:ed:dd:1e:86:cf:51:47:8a:e8:e4:b3:2b:f9:
                    91:48:82:2c:43:11:21:b8:77:f6:d7:1a:c2:aa:12:
                    b2:8a:1a:74:0e:f7:b0:e2:1c:83:6f:51:34:62:d1:
                    c6:22:f9:c7:b3:f3:57:42:37:69:2d:5f:a8:2b:b1:
                    0b:2a:12:57:42:2f:73:04:7b:3b:f0:97:b1:57:c5:
                    2b:df:92:1b:5a:6f:46:cb:04:26:f8:ef:f2:57:19:
                    c9:1b:3d:68:d0:b5:24:ea:e4:df:2a:75:18:e8:62:
                    13:08:33:1e:af:b7:13:73:c9:50:13:ef:d0:2b:aa:
                    84:69:98:99:4e:79:a6:9f:b0:2e:4e:ab:6b:3a:14:
                    29:c1:cf:ed:9f:6c:5e:a0:4c:8c:e1:df:92:eb:82:
                    27:c0:23:fb:af:66:d6:a5:bd:4f:08:1a:7c:e9:9b:
                    61:9e:86:00:0a:be:7c:ce:63:cb:2a:71:59:74:3c:
                    92:93:a4:20:ce:95:8a:1d:51:40:2e:a0:84:18:40:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:D7:79:1E:CC:0F:67:5D:F7:20:9A:CD:4E:3C:EF:C2:5E:9E:32
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7B97602403C811F09F0A6249762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:f3:08:97:92:51:1c:42:11:4b:3f:52:b9:22:74:43:28:
         1e:12:3c:90:86:c5:a7:65:ab:12:f8:f8:76:ee:80:40:e2:64:
         dc:b2:d8:b8:85:94:8f:9a:cf:45:7e:b5:1b:10:62:cd:62:8b:
         cb:d4:b4:22:db:e8:2a:e0:37:95:f7:60:f5:90:1c:94:98:76:
         3f:2e:48:38:47:ff:24:19:39:b3:cc:55:0c:33:1d:0c:7e:95:
         d5:28:ac:4b:1c:fd:f3:b1:4e:7c:b1:d4:6a:f2:90:91:e9:38:
         7a:41:a3:fb:7a:4b:51:ec:2c:c1:43:13:73:b4:79:22:7d:1d:
         98:b1:bc:c6:04:1f:66:45:83:ed:74:5a:ad:6e:3f:66:37:ba:
         f4:9a:c5:f6:fa:52:ca:a2:92:96:fa:d9:32:ad:fc:b7:fc:27:
         17:51:05:34:0b:c8:45:03:b5:01:86:c1:6b:79:c8:75:9c:92:
         88:29:11:02:cf:49:e8:d5:38:33:25:0d:77:b6:de:6d:73:38:
         2d:7c:2c:c0:0b:ff:04:f0:f8:37:7c:98:a9:c3:e4:de:02:82:
         d8:af:0b:d2:b0:d8:22:6d:90:e7:69:39:39:55:39:3c:96:68:
         1d:77:21:90:e8:a6:d2:d4:3b:e8:e7:e4:3f:14:13:9f:6d:92:
         be:03:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:29 2025 by rpki-client