Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93555F7EC3C511EFB530C27C762E951A.roa
File:                     93555F7EC3C511EFB530C27C762E951A.roa (raw, json)
Hash identifier:          iAUHi17cF/vSjIQ5/DI0iqXwnFl69nq4jdZcPA2HPcI=
Subject key identifier:   3A:5B:58:58:92:A4:CD:1B:42:81:1A:BC:42:71:EC:7A:1B:24:F5:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0127CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93555F7EC3C511EFB530C27C762E951A.roa
Signing time:             Thu 26 Dec 2024 20:11:22 +0000
ROA not before:           Thu 26 Dec 2024 20:11:18 +0000
ROA not after:            Sun 12 Dec 2027 20:11:18 +0000
asID:                     17561
IP address blocks:        154.83.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75724 (0x127cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF
        Validity
            Not Before: Dec 26 20:11:18 2024 GMT
            Not After : Dec 12 20:11:18 2027 GMT
        Subject: CN=676db86a-1936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:5d:5b:2c:d1:27:57:49:c4:f4:bd:81:5c:
                    25:ba:1e:b1:e5:96:03:a7:b5:47:a8:22:30:89:e7:
                    80:d7:97:3d:9a:d2:68:11:97:b6:14:30:82:2d:9b:
                    f4:25:58:63:da:90:e8:d9:8a:a3:44:33:b6:fb:ad:
                    f8:5f:44:9f:7e:e7:d5:b6:d8:53:65:66:eb:83:07:
                    45:8e:63:d9:66:b9:1d:51:d3:e6:9d:90:53:cd:41:
                    e3:00:46:16:af:39:6c:3d:c1:31:58:25:f5:82:62:
                    08:38:88:64:48:89:68:56:99:14:35:cc:55:f8:56:
                    95:e4:a0:0e:2c:1f:e3:eb:f5:1d:a9:b9:b0:07:9e:
                    2e:e0:b6:6e:cf:29:b0:92:51:6d:1f:a5:1a:f6:4e:
                    37:b0:db:57:6e:fe:73:ed:8d:dc:d2:21:d2:64:9b:
                    3c:8c:9a:1b:6c:58:82:e1:44:5a:6f:88:f7:ff:99:
                    37:8a:2b:58:02:dc:da:65:ee:70:78:38:62:3f:6a:
                    b7:c7:3b:48:06:f2:b4:16:3a:8c:90:2f:ff:21:3c:
                    2c:2d:15:8e:ed:34:fa:4a:1b:0a:24:a6:4b:22:bc:
                    98:72:60:15:bb:c7:d6:55:9a:4c:45:30:9c:51:8c:
                    d4:30:4a:ae:d5:44:b8:95:22:10:68:b1:a0:98:9b:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5B:58:58:92:A4:CD:1B:42:81:1A:BC:42:71:EC:7A:1B:24:F5:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93555F7EC3C511EFB530C27C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:d4:8e:b7:0e:da:59:2e:a1:54:02:e8:5f:5f:e8:88:88:
         d6:3f:4f:0c:73:cf:91:90:36:ce:0f:94:1c:71:a6:31:07:06:
         9d:47:62:a8:05:e4:b4:f5:a0:4c:e0:96:89:f6:17:d9:42:bb:
         f6:ab:9b:06:1e:1e:38:d5:d5:c6:6d:17:0b:df:21:e6:34:00:
         33:c2:5c:f7:33:bd:1a:1b:53:59:d0:c9:ef:54:4f:f0:0d:c8:
         64:b6:26:af:c1:50:ef:5a:52:eb:81:d3:40:4e:f3:6f:28:06:
         d8:71:2a:7c:ec:65:06:49:b8:eb:94:b8:a6:9f:d9:12:e9:7c:
         50:ab:be:eb:18:38:7e:94:2a:83:34:6b:ee:13:c9:00:ed:73:
         a5:70:be:f1:1c:6d:83:23:4a:01:3d:00:74:0e:0c:56:54:1a:
         6f:b8:6c:f9:f8:a9:51:c0:9a:1d:5a:ea:03:bc:bb:63:26:e2:
         b5:c1:14:59:03:3d:64:ae:39:2d:18:3c:a4:4c:27:f0:07:2e:
         a6:2e:67:a6:46:0c:bc:3d:96:61:08:bf:b1:74:8d:76:3a:04:
         8c:1b:c0:30:4c:41:2c:b6:9c:4d:eb:ed:0b:02:4b:b1:1b:c2:
         60:06:49:e2:da:ac:43:f2:75:20:bb:b6:10:c5:c1:91:7c:8a:
         c9:6d:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:27 2025 by rpki-client