Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09F36286F46B11EF89771472762E951A.roa
File:                     09F36286F46B11EF89771472762E951A.roa (raw, json)
Hash identifier:          vR3SlsyiqFO26ylriSYv8prmX+meckPMHS0Re2XRqGQ=
Subject key identifier:   9C:84:B3:E9:D4:FE:23:B7:CE:A3:99:06:B1:CB:57:68:C8:73:E2:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0135FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09F36286F46B11EF89771472762E951A.roa
Signing time:             Wed 26 Feb 2025 17:56:44 +0000
ROA not before:           Wed 26 Feb 2025 17:56:40 +0000
ROA not after:            Sat 19 Feb 2028 17:56:40 +0000
asID:                     17561
IP address blocks:        156.233.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79357 (0x135fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 26 17:56:40 2025 GMT
            Not After : Feb 19 17:56:40 2028 GMT
        Subject: CN=67bf55dc-28a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e3:a8:f8:8e:56:fc:89:e4:fe:d6:bf:c0:91:
                    11:3f:b9:ee:48:8b:20:56:2f:0d:fb:7c:fa:c9:2c:
                    06:bb:dc:cb:c2:5e:3c:82:50:87:1e:1f:6d:5e:bc:
                    1e:b5:cd:3d:38:97:cb:06:31:85:ac:a6:65:71:3e:
                    41:09:be:a1:33:8d:7e:c3:f2:57:e7:ad:f6:75:97:
                    e0:24:a6:b6:0c:48:64:e5:2f:19:95:61:69:45:d9:
                    da:2b:45:a8:53:49:4f:9f:fe:70:26:c5:aa:bb:69:
                    6b:1e:01:ad:44:d8:68:a6:fd:f6:c0:10:a3:78:08:
                    3e:50:af:d1:d2:90:fe:bf:77:9c:58:f2:40:3c:25:
                    00:eb:a3:26:e1:5a:1c:75:be:e6:78:27:ad:9d:85:
                    3c:f6:5b:3f:31:fa:cd:c4:5c:87:20:28:88:20:2d:
                    52:35:01:16:65:96:90:01:a2:e8:48:31:94:09:5a:
                    c7:78:a6:72:f0:43:2f:0d:09:d1:38:b9:8e:11:13:
                    9a:3e:94:97:7f:65:12:ae:79:94:a1:82:75:c4:8e:
                    ca:c7:2f:36:1d:ef:ec:f8:83:52:6d:f5:50:7d:3b:
                    bc:78:21:37:c7:eb:a5:83:98:d1:9f:e9:0e:f3:05:
                    75:50:3a:d8:f5:7b:96:79:06:d4:86:e0:49:af:b9:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:B3:E9:D4:FE:23:B7:CE:A3:99:06:B1:CB:57:68:C8:73:E2:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09F36286F46B11EF89771472762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:42:7a:b7:b7:46:ec:de:21:57:fe:64:10:ee:57:3a:f3:6f:
         e0:35:2b:ec:43:6f:49:2f:e3:18:92:81:c1:1b:d5:a0:73:fd:
         6b:c0:5e:83:9c:73:b0:2a:e1:56:33:bc:ce:14:cf:09:e5:21:
         69:2e:a3:71:7b:fa:de:00:5a:2b:e5:5b:52:4c:05:93:a7:d7:
         1c:ca:a1:f2:4c:f3:03:bc:0f:d4:62:a1:c5:bd:77:fe:d4:a5:
         bc:b4:83:9d:36:54:30:cf:bb:74:4c:2f:ca:3e:11:a5:87:34:
         f4:3d:99:fa:0e:84:03:98:cf:66:54:08:27:a6:db:97:a2:8d:
         ca:62:a2:12:d8:1f:b7:96:44:eb:cf:41:b5:7c:6f:e7:b7:06:
         32:68:22:69:62:a7:3a:46:24:3d:aa:9b:26:bf:ff:d8:c3:75:
         d6:c3:81:6c:04:ec:f9:0a:0e:54:0e:f1:74:9d:6b:31:9e:08:
         a8:dd:df:46:43:c7:5e:66:8a:53:ca:1e:eb:59:c9:59:82:a0:
         96:8b:6c:da:48:71:23:72:6c:3e:df:a6:5a:bf:81:f6:a5:78:
         01:16:5d:e3:cf:d8:68:83:8f:be:b7:00:c6:d4:25:a5:15:fd:
         dd:0c:12:55:3a:27:9d:97:4a:12:bd:a8:e4:a6:fe:63:cd:04:
         5f:9d:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client