Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/E8023078529511ECA97E8D55D8A014CE.roa
File:                     E8023078529511ECA97E8D55D8A014CE.roa (raw, json)
Hash identifier:          NBD2rTWHzxM1bjWMhw/mvID6jNNEkRqV4agUPf3rL3E=
Subject key identifier:   DB:BC:99:51:75:F1:5F:C3:21:87:5A:9E:7D:B0:CA:4A:E4:0D:36:C9
Certificate issuer:       /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial:       03DC
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/E8023078529511ECA97E8D55D8A014CE.roa
Signing time:             Wed 01 Dec 2021 11:00:34 +0000
ROA not before:           Wed 01 Dec 2021 11:00:30 +0000
ROA not after:            Fri 01 Dec 2023 11:00:30 +0000
asID:                     328366
IP address blocks:        102.218.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DAF
        Validity
            Not Before: Dec  1 11:00:30 2021 GMT
            Not After : Dec  1 11:00:30 2023 GMT
        Subject: CN=61a755d2-8481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:da:24:f1:ae:e3:57:3b:3e:c5:5e:1b:ff:
                    38:f6:92:97:18:39:91:68:a4:03:16:68:7c:41:d9:
                    32:d3:93:a0:6e:a4:97:22:e2:52:49:db:eb:0e:cf:
                    51:58:ad:60:9b:e7:9d:64:72:bd:c9:ec:a9:4c:76:
                    7b:63:38:45:fd:56:ce:78:7b:7e:6e:57:34:db:66:
                    2e:fe:8d:d3:1b:2f:3b:f2:46:27:6a:4f:25:3f:1d:
                    47:00:ff:55:f6:47:71:4a:c5:b6:e7:f6:17:fb:99:
                    e9:d7:3a:28:22:a2:57:2e:b3:69:0f:8b:28:c7:91:
                    8d:bb:94:5b:ef:75:74:91:38:a1:fd:6e:d1:ed:3b:
                    5c:53:9e:fd:bd:6c:67:5f:d9:f1:77:84:64:b2:4a:
                    7b:7d:09:43:46:19:86:b5:6e:ea:ea:8d:ed:25:69:
                    5d:27:98:38:97:93:a5:77:5e:60:d6:93:8b:45:63:
                    b3:42:e9:3c:8e:79:49:02:ff:87:6b:15:e3:db:70:
                    b4:0d:8d:a8:68:0f:52:2e:b1:94:c6:30:7a:80:ab:
                    58:d7:02:91:5e:53:1f:8b:99:d6:f6:d7:b6:16:b9:
                    05:b2:c8:14:55:63:e2:76:f8:9e:3a:ae:4a:03:70:
                    44:9a:86:1d:33:de:8f:0d:3b:03:85:0a:e4:ef:7d:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BC:99:51:75:F1:5F:C3:21:87:5A:9E:7D:B0:CA:4A:E4:0D:36:C9
            X509v3 Authority Key Identifier:
                keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/E8023078529511ECA97E8D55D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:d4:3d:c0:40:08:71:6f:2b:ce:36:d6:37:10:b4:d7:57:
         17:e9:d4:69:30:5a:1e:2b:ec:7d:32:0f:8c:6e:e6:8e:dd:98:
         0d:35:f4:39:44:d2:74:02:36:78:15:73:a3:e8:d5:14:f2:d4:
         f7:3a:ad:be:10:9e:c4:b6:65:c3:ec:7c:f3:9e:69:c3:1b:2d:
         9d:2d:e3:cc:9c:74:b6:03:fb:d3:27:77:8f:da:b6:83:3a:10:
         70:b4:7b:7e:c4:a1:50:e0:7a:b4:85:2e:7c:bb:f2:53:51:11:
         05:31:16:13:2a:96:ad:0d:39:5d:63:30:ab:76:71:3d:e2:c2:
         05:71:9c:95:e9:92:80:90:46:d7:12:6a:75:de:52:a3:e8:10:
         e8:f7:f5:bc:92:65:c7:59:d1:7f:ff:90:18:6c:82:87:db:46:
         a8:39:9e:c6:dd:26:ee:0d:62:82:74:b8:d7:48:09:bb:89:83:
         a4:5d:90:fe:4e:c6:d0:99:16:29:46:a1:b9:67:87:c3:e3:57:
         74:3c:08:13:7b:2a:69:fd:6d:f6:4c:5e:e3:26:ff:5d:fa:c7:
         2f:5f:a7:44:cb:38:02:16:a5:d1:3e:a6:bc:fa:7b:03:d6:f4:
         d2:25:fd:cf:9f:7a:4b:b5:a0:f6:30:0e:37:99:b9:b4:b9:5b:
         0d:9c:5f:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0YyNkRBRjExMC8GA1UEBRMoQUIxOTk2NDYxOUZGODUzNDNDQzA5MTE4MDY3M0E4
QUM1Mjg2MTBGNDAeFw0yMTEyMDExMTAwMzBaFw0yMzEyMDExMTAwMzBaMBgxFjAU
BgNVBAMMDTYxYTc1NWQyLTg0ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRyNok8a7jVzs+xV4b/zj2kpcYOZFopAMWaHxB2TLTk6BupJci4lJJ2+sO
z1FYrWCb551kcr3J7KlMdntjOEX9Vs54e35uVzTbZi7+jdMbLzvyRidqTyU/HUcA
/1X2R3FKxbbn9hf7menXOigiolcus2kPiyjHkY27lFvvdXSROKH9btHtO1xTnv29
bGdf2fF3hGSySnt9CUNGGYa1burqje0laV0nmDiXk6V3XmDWk4tFY7NC6TyOeUkC
/4drFePbcLQNjahoD1IusZTGMHqAq1jXApFeUx+Lmdb217YWuQWyyBRVY+J2+J46
rkoDcESahh0z3o8NOwOFCuTvfanVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU27yZ
UXXxX8Mhh1qefbDKSuQNNskwHwYDVR0jBBgwFoAUqxmWRhn/hTQ8wJEYBnOorFKG
EPQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzJENTg1NEU4NzBCOTExRTlCNzEyM0QzRkY4QUVBMjI4L3F4bVdS
aG5faFRROHdKRVlCbk9vckZLR0VQUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3F4bVdSaG5faFRROHdKRVlCbk9vckZLR0VQUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdGMjZELzJENTg1NEU4NzBCOTExRTlCNzEyM0QzRkY4
QUVBMjI4L0U4MDIzMDc4NTI5NTExRUNBOTdFOEQ1NUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2jQwDQYJKoZIhvcNAQEL
BQADggEBAFSk1D3AQAhxbyvONtY3ELTXVxfp1GkwWh4r7H0yD4xu5o7dmA019DlE
0nQCNngVc6Po1RTy1Pc6rb4QnsS2ZcPsfPOeacMbLZ0t48ycdLYD+9Mnd4/atoM6
EHC0e37EoVDgerSFLny78lNREQUxFhMqlq0NOV1jMKt2cT3iwgVxnJXpkoCQRtcS
anXeUqPoEOj39bySZcdZ0X//kBhsgofbRqg5nsbdJu4NYoJ0uNdICbuJg6RdkP5O
xtCZFilGoblnh8PjV3Q8CBN7Kmn9bfZMXuMm/136xy9fp0TLOAIWpdE+prz6ewPW
9NIl/c+feku1oPYwDjeZubS5Ww2cXxo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:33 2025 by rpki-client