Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A690B61EC62311EF84D93985762E951A.roa
File:                     A690B61EC62311EF84D93985762E951A.roa (raw, json)
Hash identifier:          U2ukH6v23UjlwyjIXlIM7AbIdy62yOjuL8LiaJiKazw=
Subject key identifier:   82:1D:5E:F2:06:4A:B9:22:B6:2E:3C:18:C7:0C:66:55:90:C1:6A:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       012F82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A690B61EC62311EF84D93985762E951A.roa
Signing time:             Sun 29 Dec 2024 20:29:49 +0000
ROA not before:           Sun 29 Dec 2024 20:29:41 +0000
ROA not after:            Sun 12 Dec 2027 20:29:41 +0000
asID:                     17561
IP address blocks:        154.217.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77698 (0x12f82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF
        Validity
            Not Before: Dec 29 20:29:41 2024 GMT
            Not After : Dec 12 20:29:41 2027 GMT
        Subject: CN=6771b13d-829f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:ff:3b:05:1b:bc:6c:79:c8:7e:fb:fe:26:
                    d0:a0:5f:8f:c4:5d:e9:df:74:9f:8b:03:3e:bd:18:
                    06:29:ea:21:9f:44:e1:5b:60:16:8c:88:38:de:eb:
                    fa:9a:7c:86:f1:d0:07:5a:fd:4c:f6:0d:fe:1c:5f:
                    98:fa:7a:4c:56:7f:cc:f9:25:f4:6c:35:47:29:09:
                    bb:b2:fc:95:d4:07:43:80:54:38:46:5d:06:07:67:
                    32:be:b5:40:37:20:74:1a:7f:bc:af:ad:f3:66:8f:
                    24:ca:07:6f:3b:39:7f:b2:95:b4:91:6d:13:93:79:
                    97:11:96:f0:aa:d9:61:e8:3e:b9:f5:9c:a2:a7:af:
                    4c:c3:91:59:b4:18:25:98:33:fc:cb:7b:5a:a6:c9:
                    b1:4c:f3:af:b5:8e:47:7e:9f:22:72:3a:a7:d7:ff:
                    46:ec:84:0c:a3:d2:4f:c1:ca:3c:41:67:49:dd:e7:
                    2e:15:3a:31:e5:bd:04:c0:9c:72:53:cb:71:a2:64:
                    c0:21:3a:26:ff:6f:8d:f2:98:1c:d0:7d:39:d4:9e:
                    a6:12:cd:a1:cc:34:05:fa:2a:31:46:7a:98:db:f9:
                    76:c1:9c:ef:46:5d:fd:db:61:86:0a:bd:fd:e1:88:
                    63:49:56:8c:79:b7:b5:6e:db:4a:58:55:31:ba:5c:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:5E:F2:06:4A:B9:22:B6:2E:3C:18:C7:0C:66:55:90:C1:6A:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A690B61EC62311EF84D93985762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.217.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:d4:ca:10:6c:dc:16:fe:a7:01:c8:76:9f:53:26:2b:01:
         a7:7c:5a:df:65:7e:2c:d7:e6:b2:34:5d:ec:dc:37:fb:21:c0:
         25:c9:da:15:b3:da:59:fc:dc:9b:89:9c:ff:51:bf:04:34:81:
         40:e2:6d:76:8f:04:f8:fd:c3:51:b1:e1:f3:a1:ea:51:85:05:
         0b:54:ef:fa:fb:ca:30:cc:cd:5b:1f:5d:c7:d6:ae:21:da:60:
         02:5f:a4:3e:88:4a:02:2d:79:21:04:d5:44:3d:a7:c2:81:e3:
         4a:b3:f5:60:9d:98:91:43:78:c7:fd:51:cc:80:a6:d1:81:f8:
         8a:93:60:a6:b4:3c:70:20:35:0f:ea:2c:c8:aa:51:c4:bf:86:
         a0:34:1a:05:70:67:83:93:cf:49:d0:f1:65:28:8a:93:83:2e:
         03:30:8a:95:02:3e:69:c0:fe:3c:fb:9a:4e:df:02:5d:b0:6e:
         9e:4e:eb:5e:a7:ac:be:94:8b:ad:4c:0d:a7:0a:5e:b4:5b:c1:
         3c:75:72:7e:cc:bd:98:62:7a:69:21:50:a4:eb:16:3e:08:e7:
         ce:fc:53:02:14:c2:7e:4a:fa:a8:72:80:5a:c2:d6:1b:97:79:
         22:fd:fb:b9:5c:f1:11:52:e6:1a:58:2b:8c:06:26:07:21:68:
         2a:9b:98:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:25 2025 by rpki-client