Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17723026B00E11F180AC5DFECE1D38B0.roa
File:                     17723026B00E11F180AC5DFECE1D38B0.roa (raw, json)
Hash identifier:          /ADkiz5q0Hm3nvQ/hTnZ3r+dCxaE/eHcn6Y0Skps4Yk=
Subject key identifier:   7C:43:03:EC:8C:1E:D7:0D:CE:87:C8:37:B5:D0:68:12:FA:A2:07:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17723026B00E11F180AC5DFECE1D38B0.roa
Signing time:             Mon 14 Sep 2026 07:30:00 +0000
ROA not before:           Mon 14 Sep 2026 07:29:56 +0000
ROA not after:            Thu 05 Nov 2026 07:29:56 +0000
asID:                     401701
IP address blocks:        156.233.224.0/20 maxlen: 24
                          156.238.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120300 (0x1d5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 14 07:29:56 2026 GMT
            Not After : Nov  5 07:29:56 2026 GMT
        Subject: CN=6aa7a278-b473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:d9:71:b4:dd:d1:56:ee:ff:4f:a7:ab:a4:
                    74:84:2d:bf:71:7c:e3:8c:77:87:97:3a:19:40:46:
                    49:e1:1a:49:68:65:0d:8b:7c:c6:94:1b:c1:36:81:
                    cf:8b:50:4a:0f:81:6b:1a:42:ca:33:9c:f9:ff:6b:
                    e6:7a:d0:56:48:bc:a7:61:de:dc:11:19:2a:18:05:
                    53:4f:65:8a:eb:18:17:5b:7e:61:68:00:91:bd:fd:
                    cd:48:07:db:ed:c7:6c:95:64:63:8d:a4:8b:e0:4e:
                    cb:3f:3c:36:7e:ce:78:76:13:aa:09:d3:e7:61:c1:
                    97:6e:c3:1a:93:33:b4:03:0b:be:92:d7:d9:58:ae:
                    42:94:e4:cd:91:4a:8e:b2:9b:5c:94:2b:0d:26:79:
                    ea:4a:48:1f:e7:4b:c9:eb:d3:03:ee:42:6f:13:a2:
                    5e:f1:fd:86:59:c4:e1:25:8c:bd:1d:48:1a:14:24:
                    9c:1d:09:0f:ad:15:54:be:93:a9:fc:e4:35:1d:01:
                    a5:d9:6a:89:bc:fa:11:63:c7:87:3e:2f:ce:4b:74:
                    16:8f:55:a9:f2:62:bb:82:59:10:c0:1b:85:a0:ca:
                    08:14:0d:14:64:9d:fb:f9:c0:d8:a4:79:eb:56:a5:
                    3f:05:34:2b:63:d2:fe:ff:15:20:98:cf:31:40:85:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:43:03:EC:8C:1E:D7:0D:CE:87:C8:37:B5:D0:68:12:FA:A2:07:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17723026B00E11F180AC5DFECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:27:b8:22:50:d8:68:78:0a:25:64:d0:9a:ba:9a:13:fa:a5:
         c0:d1:60:4a:0c:71:56:ef:71:71:ba:03:fc:cb:b6:ef:af:4e:
         3b:db:ba:51:e0:ce:e6:ae:df:2d:4f:60:53:97:f9:bb:d4:63:
         1a:04:47:4c:1f:6f:5a:83:4f:34:b1:5e:16:02:5e:04:44:b3:
         c8:ec:2c:35:6e:35:b3:b4:04:f5:aa:49:42:56:4e:e1:1b:7f:
         cf:88:dd:b3:df:f5:57:46:ad:91:a9:a5:d5:55:f0:07:15:c3:
         e2:ad:cd:44:31:19:bd:dc:65:e3:67:b4:bb:0d:59:eb:dd:68:
         a5:54:c0:37:6d:c4:ad:e6:f5:05:1d:05:b6:c2:7d:93:36:d0:
         44:f2:3c:9b:6a:dd:37:0b:21:38:05:52:93:63:e8:16:8b:ab:
         c0:5e:4f:01:a3:94:db:4b:9e:4a:bf:bd:e6:16:02:23:d6:a5:
         ea:1a:ab:ba:c6:ba:00:a9:fe:c3:e0:48:d6:6e:8c:dc:39:92:
         b7:b3:59:7a:14:65:be:b9:8b:de:55:7d:d9:f1:9b:d5:05:5e:
         02:e2:30:43:b3:8e:57:ca:01:cc:c6:ef:63:8e:31:45:94:e4:
         d1:0f:78:b2:19:bf:4b:84:c7:41:30:2c:5b:66:1f:07:07:45:
         f4:39:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----