Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044757A600A111F0B481BE80762E951A.roa
File:                     044757A600A111F0B481BE80762E951A.roa (raw, json)
Hash identifier:          0dh0PuqPv0pLhzQGNdLgJmh7+BLk+jhDStad+dIveYM=
Subject key identifier:   AC:78:BD:56:C2:77:94:AA:AF:96:4D:68:BA:5C:CD:3B:89:27:1B:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0145BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044757A600A111F0B481BE80762E951A.roa
Signing time:             Fri 14 Mar 2025 06:53:21 +0000
ROA not before:           Fri 14 Mar 2025 06:53:16 +0000
ROA not after:            Fri 04 Apr 2025 06:53:16 +0000
asID:                     57043
IP address blocks:        156.253.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83388 (0x145bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Mar 14 06:53:16 2025 GMT
            Not After : Apr  4 06:53:16 2025 GMT
        Subject: CN=67d3d261-75f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:38:26:af:2b:ca:0b:65:5a:8f:8f:10:25:
                    f8:1a:7e:40:1c:20:5c:a2:e5:08:2a:28:aa:07:b2:
                    29:b9:81:29:b6:b1:1c:5f:45:de:6f:28:20:df:53:
                    d5:72:71:dd:21:83:14:c8:ea:e8:80:c3:48:ce:56:
                    a4:ab:ea:df:55:82:b2:28:1a:98:16:8b:47:3b:5d:
                    32:23:ef:57:42:9f:4e:17:66:de:0b:58:25:aa:fa:
                    a2:4b:22:bc:7d:70:4c:77:24:94:55:75:5f:b2:be:
                    f8:3e:fa:a1:4a:17:61:7d:00:76:3b:a9:f3:e2:a9:
                    fe:31:30:56:a3:8d:92:2a:a5:0f:72:5c:a3:2b:36:
                    0a:02:64:c0:81:6e:ab:80:70:ab:36:38:fe:29:9f:
                    ac:2d:49:ed:05:bf:4e:4c:34:13:3f:67:08:9e:6a:
                    12:49:d1:c6:5c:6c:8b:05:c0:f6:11:64:8c:10:e8:
                    b6:c7:b1:67:12:bd:9c:35:57:cb:b0:27:3c:9d:d4:
                    08:28:b6:63:17:a2:43:e1:1d:44:03:0d:02:a1:af:
                    28:8a:36:e5:77:2d:46:bd:85:83:94:69:39:e4:d2:
                    82:bb:22:b2:b2:7c:4f:de:53:13:14:21:83:d5:34:
                    ad:6d:95:bd:8d:da:82:4a:73:d8:4a:8d:61:e9:c0:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:BD:56:C2:77:94:AA:AF:96:4D:68:BA:5C:CD:3B:89:27:1B:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044757A600A111F0B481BE80762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:89:3c:4a:fa:72:c0:1d:33:ca:9a:ae:4e:72:cf:2c:6b:
         48:1d:75:21:69:9b:14:77:0f:95:cb:7b:08:b3:9a:6f:fb:d1:
         64:62:24:76:5f:6f:9f:fc:36:6f:72:dc:d7:ce:45:7d:f1:9e:
         c5:8c:6c:b7:03:8b:4e:a1:d0:59:c9:88:24:9d:84:11:16:6d:
         f4:af:65:f3:ae:a5:f3:68:a1:94:0e:d9:51:ff:55:f6:1e:b5:
         2a:e3:a1:01:27:3f:0b:d9:35:c6:d1:c5:e5:76:34:5a:1a:43:
         69:f4:ac:b3:b0:0a:83:c1:8c:53:55:67:bf:74:ba:7c:0d:0a:
         01:70:9a:7e:fb:51:8f:ba:3d:1c:b3:32:44:03:39:a6:1a:63:
         19:a9:07:10:fd:a3:b3:fb:1d:d8:ae:82:3d:4c:3e:db:35:44:
         e2:cc:73:5b:6b:af:a2:3a:21:f9:7c:89:50:b7:2f:db:33:82:
         04:3d:ae:00:e6:d5:5d:21:c4:d1:d4:fb:71:c6:e8:bf:64:60:
         04:79:6f:6a:45:7f:48:21:ab:6f:b2:88:6c:cd:9e:2e:bc:31:
         40:5a:a9:83:06:94:5f:b4:f7:1f:19:8a:ec:fc:93:fc:a6:00:
         5b:af:09:c7:44:c6:67:2e:fb:56:07:42:d9:a6:77:86:68:21:
         d6:50:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:14 2025 by rpki-client