Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19184CCCF47011EF89D07B96762E951A.roa
File:                     19184CCCF47011EF89D07B96762E951A.roa (raw, json)
Hash identifier:          p7gBoB4lj5bOGJrnScaJKvsHoT60shSiTHbCLeMv3bc=
Subject key identifier:   43:BE:F1:AE:C3:E0:CE:F9:4F:AE:86:BD:B1:04:08:70:41:61:5F:21
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       013671
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19184CCCF47011EF89D07B96762E951A.roa
Signing time:             Wed 26 Feb 2025 18:32:57 +0000
ROA not before:           Wed 26 Feb 2025 18:32:53 +0000
ROA not after:            Thu 19 Feb 2026 18:32:53 +0000
asID:                     984
IP address blocks:        45.201.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79473 (0x13671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 26 18:32:53 2025 GMT
            Not After : Feb 19 18:32:53 2026 GMT
        Subject: CN=67bf5e59-09a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:bc:31:2b:34:bb:cd:12:12:34:82:f5:4f:
                    51:45:16:d1:90:af:fd:53:a4:e0:a2:a7:c4:ef:d6:
                    5a:33:cc:c6:36:13:65:42:67:14:c1:8d:6e:8e:71:
                    f7:c9:40:a7:c0:df:50:a6:75:5b:2d:99:a5:02:ad:
                    65:27:80:48:88:3f:63:88:c4:5e:d6:96:54:e7:87:
                    ce:b6:0e:93:c0:fb:8f:39:7c:be:70:4e:02:33:9b:
                    ee:e5:b4:45:af:5b:4e:c4:6d:05:5a:82:b5:93:b3:
                    4f:9f:0f:7b:2c:b7:fd:03:08:dc:c3:2c:f6:01:a5:
                    c4:bd:1a:c0:59:d6:0c:ed:69:f5:fc:ac:69:96:d2:
                    2a:32:62:73:10:0a:b9:b8:c4:da:53:16:47:ad:fd:
                    ac:83:20:ce:55:b8:e9:79:54:ef:8b:c0:39:1b:79:
                    ee:ff:25:13:34:88:03:c9:dd:4d:96:5f:76:55:2d:
                    f1:ed:f0:f7:67:99:51:44:6f:27:16:bd:b2:f8:af:
                    3f:57:dc:44:73:a7:2e:7a:53:9a:b3:57:de:ce:61:
                    e6:ea:f9:05:98:98:aa:dc:25:ef:63:99:b9:16:2d:
                    e9:e4:15:31:c0:b3:50:6c:9f:04:cc:ea:89:6e:5a:
                    d8:1a:19:83:f0:fb:b9:5c:a4:7e:06:48:03:14:90:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:F1:AE:C3:E0:CE:F9:4F:AE:86:BD:B1:04:08:70:41:61:5F:21
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19184CCCF47011EF89D07B96762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:2f:f4:64:dc:ef:2e:c2:ca:57:fb:ed:29:d0:2a:81:ac:07:
         39:1d:bf:c0:fd:84:29:23:0e:fc:23:fe:73:bc:a1:dc:cb:2c:
         14:c6:bd:3f:48:2e:2a:7e:bd:2d:c0:99:37:da:3e:63:6c:04:
         f3:c9:23:4b:51:8a:3d:47:a1:3a:c9:57:fa:1e:5e:e3:64:6c:
         92:dd:78:75:57:92:e2:6c:58:41:51:0a:55:bb:27:29:c2:d2:
         b6:e1:95:fb:d3:ff:e1:f5:93:23:0a:13:d6:7c:49:4e:e2:8c:
         de:52:8f:48:0f:d3:0d:a8:d0:24:b9:a7:52:c8:65:f5:79:e1:
         38:2c:54:b9:60:40:7d:12:75:08:26:ba:c0:c4:53:9f:85:c7:
         7d:80:94:af:21:37:84:b3:eb:06:75:da:0e:a8:b2:12:16:c6:
         c4:d6:4c:a5:18:55:59:d3:a4:e2:af:3e:86:e1:fe:42:92:6f:
         bf:35:d1:46:b3:01:b6:c9:a5:ee:10:4b:d9:05:38:e4:a6:86:
         73:09:bf:8a:70:61:bd:b2:84:e4:9a:b1:7a:de:77:68:96:d1:
         ae:0d:c2:a8:4f:21:d1:28:b1:2a:26:a1:3e:0e:2a:be:58:e5:
         6b:7b:0c:3c:bd:26:6d:66:40:ce:84:07:d9:db:52:86:37:75:
         44:4d:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:56 2025 by rpki-client