Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E392FEC6AE6011EFAAC6679F762E951A.roa
File:                     E392FEC6AE6011EFAAC6679F762E951A.roa (raw, json)
Hash identifier:          56JYHwpG5+9xG9Qv9wJ53HoJZmgzZ5O4GCVtLvoStDc=
Subject key identifier:   63:BB:EF:50:AD:B4:19:64:43:A8:15:BE:A7:DF:8E:2D:E3:6D:0C:1A
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0B36
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E392FEC6AE6011EFAAC6679F762E951A.roa
Signing time:             Fri 29 Nov 2024 14:47:43 +0000
ROA not before:           Fri 29 Nov 2024 14:47:39 +0000
ROA not after:            Wed 29 Nov 2034 14:47:39 +0000
asID:                     6202
IP address blocks:        192.142.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR
        Validity
            Not Before: Nov 29 14:47:39 2024 GMT
            Not After : Nov 29 14:47:39 2034 GMT
        Subject: CN=6749d40f-93ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:49:6a:67:c5:f4:0d:d8:c3:9b:0b:9c:66:
                    5b:22:68:41:c8:21:11:46:7c:dc:0f:2a:ff:a7:b6:
                    f1:7c:36:79:26:25:cf:5b:e6:7c:cb:b4:5c:48:a5:
                    f6:64:75:e3:0c:6c:89:1c:86:f7:13:37:d5:99:49:
                    70:d8:f9:fb:c8:87:2f:e3:ea:08:55:ae:77:9c:05:
                    2e:8f:2f:e7:e8:16:73:71:19:8b:97:df:1a:e6:b6:
                    6a:5f:c8:bd:f3:78:e1:59:1f:b6:0e:0d:76:06:a8:
                    dd:a2:be:fd:5f:31:6a:88:f6:be:17:be:2f:9e:5b:
                    f0:11:2f:72:a9:1b:f8:85:d8:c0:b3:c9:c6:db:75:
                    61:c7:4e:1b:c5:7f:d7:47:3f:0e:91:fe:18:ba:7b:
                    3a:81:28:ae:7f:ff:d4:75:e2:43:0c:01:4c:8e:fd:
                    a8:8c:ec:2f:d5:ae:0b:18:7e:8a:bf:ef:dc:b7:66:
                    ac:c4:1e:d0:1c:35:41:7c:a4:97:9a:03:ac:57:37:
                    aa:fb:14:7d:35:46:22:e6:ec:48:94:b2:39:cb:58:
                    57:15:c8:12:93:53:b0:85:b2:bc:79:44:cd:49:6f:
                    fe:d7:07:57:55:f3:a8:98:6a:fe:1c:ee:0c:c4:9a:
                    b2:0f:b4:b3:48:5e:84:9c:0d:2e:33:71:af:2c:e7:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:EF:50:AD:B4:19:64:43:A8:15:BE:A7:DF:8E:2D:E3:6D:0C:1A
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E392FEC6AE6011EFAAC6679F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:0f:40:c5:81:57:34:03:58:a2:ee:54:83:83:78:6b:8c:ce:
         db:a8:e2:a4:0e:7b:8f:c6:39:c5:4d:b1:70:b2:b2:29:24:04:
         1c:34:1e:97:e6:6a:ae:0f:a4:cc:d7:94:34:4d:b1:e8:6d:32:
         d5:2d:32:c4:5b:b3:66:0f:ce:aa:cc:35:e5:14:85:b4:6c:24:
         bd:e4:50:9f:c6:72:d8:b4:c2:f4:7e:63:81:af:a8:bb:82:a2:
         12:ce:78:a8:98:59:8c:f3:98:61:a4:f4:84:33:4b:cb:44:00:
         14:9b:24:95:a2:db:16:5c:ae:b3:fa:5d:15:66:e5:f9:0e:2e:
         14:b3:a3:a4:e3:65:2f:6c:6a:67:c4:70:24:51:f7:90:dc:1b:
         ef:50:ba:c3:f5:5d:57:98:3a:1f:a5:59:48:27:d6:30:cd:a8:
         de:c0:bf:16:46:e4:a3:01:33:99:92:93:b2:5b:0e:c2:ed:fc:
         79:57:ee:ba:4f:1b:8e:a6:eb:ac:4d:53:ae:be:4b:2f:1f:c4:
         8d:ab:7c:2d:31:d8:16:fe:51:40:41:fb:b1:45:a2:4c:e7:1f:
         1c:f0:26:81:cc:a2:03:50:c3:5f:c5:9f:f6:c2:be:74:a1:00:
         3d:ff:7a:96:69:ac:2d:24:6c:7d:8f:cb:11:ae:0d:f9:d3:94:
         be:1b:62:1b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMjkxNDQ3MzlaFw0zNDExMjkxNDQ3MzlaMBgxFjAU
BgNVBAMTDTY3NDlkNDBmLTkzY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0YklqZ8X0DdjDmwucZlsiaEHIIRFGfNwPKv+ntvF8NnkmJc9b5nzLtFxI
pfZkdeMMbIkchvcTN9WZSXDY+fvIhy/j6ghVrnecBS6PL+foFnNxGYuX3xrmtmpf
yL3zeOFZH7YODXYGqN2ivv1fMWqI9r4Xvi+eW/ARL3KpG/iF2MCzycbbdWHHThvF
f9dHPw6R/hi6ezqBKK5//9R14kMMAUyO/aiM7C/VrgsYfoq/79y3ZqzEHtAcNUF8
pJeaA6xXN6r7FH01RiLm7EiUsjnLWFcVyBKTU7CFsrx5RM1Jb/7XB1dV86iYav4c
7gzEmrIPtLNIXoScDS4zca8s5z5xAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUY7vv
UK20GWRDqBW+p9+OLeNtDBowHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0UzOTJGRUM2QUU2MDExRUZBQUM2Njc5Rjc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjkIwDQYJKoZIhvcNAQELBQAD
ggEBALUPQMWBVzQDWKLuVIODeGuMztuo4qQOe4/GOcVNsXCysikkBBw0Hpfmaq4P
pMzXlDRNsehtMtUtMsRbs2YPzqrMNeUUhbRsJL3kUJ/Gcti0wvR+Y4GvqLuCohLO
eKiYWYzzmGGk9IQzS8tEABSbJJWi2xZcrrP6XRVm5fkOLhSzo6TjZS9samfEcCRR
95DcG+9QusP1XVeYOh+lWUgn1jDNqN7AvxZG5KMBM5mSk7JbDsLt/HlX7rpPG46m
66xNU66+Sy8fxI2rfC0x2Bb+UUBB+7FFokznHxzwJoHMogNQw1/Fn/bCvnShAD3/
epZprC0kbH2PyxGuDfnTlL4bYhs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:25 2025 by rpki-client