Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A0F715ADB1611EF82A77D90762E951A.roa
File:                     1A0F715ADB1611EF82A77D90762E951A.roa (raw, json)
Hash identifier:          w05sTOqtBWvMcQtKfRVElMCl8V+WPO4ttfw5hsk8ykA=
Subject key identifier:   EF:7A:99:74:D2:EE:44:6E:78:72:54:95:40:83:4E:1B:06:5D:57:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       011239
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A0F715ADB1611EF82A77D90762E951A.roa
Signing time:             Sat 25 Jan 2025 12:15:44 +0000
ROA not before:           Sat 25 Jan 2025 12:15:41 +0000
ROA not after:            Wed 23 Apr 2025 12:15:41 +0000
asID:                     134824
IP address blocks:        45.194.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70201 (0x11239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Jan 25 12:15:41 2025 GMT
            Not After : Apr 23 12:15:41 2025 GMT
        Subject: CN=6794d5f0-ce51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:97:40:9a:52:36:64:66:86:a2:00:7f:6a:
                    58:17:86:c0:1f:12:58:99:57:27:71:c5:fc:03:83:
                    5f:c2:19:b9:68:bb:b5:1a:97:06:b0:b5:0c:2e:10:
                    00:c8:36:f8:17:f3:ee:2f:6c:5b:89:97:33:89:9d:
                    c0:ad:8e:bd:49:ab:6a:53:ef:0d:77:33:44:8d:73:
                    87:a1:f8:1d:a4:8e:67:80:36:ff:a8:0a:db:7e:e8:
                    e7:54:a8:1a:19:56:9a:d3:37:cb:98:82:c1:4b:05:
                    06:8d:27:d0:31:fe:d3:2d:73:a3:41:15:0e:eb:ca:
                    d1:fb:69:7e:22:e2:72:b3:68:63:dd:90:50:85:5c:
                    20:6e:cb:7f:e2:1b:26:76:3f:78:91:15:61:0b:f1:
                    32:4e:8e:f3:9c:03:ef:2a:84:56:ee:a4:89:be:31:
                    1c:51:a3:9a:24:78:29:31:91:73:c7:97:14:8d:b0:
                    cb:c4:bb:2c:9a:32:c7:f9:c4:75:dc:67:df:2d:80:
                    a5:7f:43:2b:75:3c:03:8c:77:d7:24:ac:46:5a:6b:
                    61:6c:8e:e0:0c:00:00:4f:51:ed:de:ba:0e:e2:89:
                    67:67:68:18:8d:7c:3b:59:2f:03:aa:7f:12:61:ea:
                    94:ba:5d:44:c5:d5:9d:6c:9f:7f:99:81:54:b4:89:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:99:74:D2:EE:44:6E:78:72:54:95:40:83:4E:1B:06:5D:57:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A0F715ADB1611EF82A77D90762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:fb:cf:a9:73:7a:09:5e:ff:f4:c5:cf:45:fa:7b:74:a6:
         8e:79:f2:7a:cd:34:60:49:7e:4b:3e:04:5a:a5:de:f1:3e:6b:
         e8:88:0b:d8:fd:9e:cb:26:a8:d7:87:43:68:bd:30:c4:97:34:
         d6:46:47:fc:76:84:7f:85:c5:7c:94:89:a8:35:63:a0:ca:e6:
         eb:44:04:a3:45:f9:c5:ab:8e:df:d3:65:14:24:61:fb:9c:ad:
         ea:7d:8f:17:48:f4:49:4e:ff:5c:40:7e:32:a5:8d:7e:91:2f:
         d8:b2:d7:59:2c:c1:74:24:cc:2b:76:99:9b:71:34:eb:6f:08:
         90:aa:ea:1b:bc:e1:d5:d7:d0:0a:f0:92:dd:fd:fd:28:40:f4:
         91:c4:4a:5f:af:a9:f7:d6:a8:a8:01:12:bd:6c:c0:80:91:cd:
         9d:aa:ca:d6:aa:12:92:46:a4:2e:c0:f5:08:ed:fd:79:3a:ed:
         32:84:5f:a6:fd:e5:4a:a5:cf:ed:ed:4f:95:97:b7:6f:e9:84:
         dc:c5:10:ea:08:33:3a:3d:4d:7d:d4:50:2f:35:c8:c9:68:f5:
         3f:af:c7:09:43:97:1d:3c:1b:c9:1f:e5:68:e1:af:9c:2f:33:
         a5:b7:63:19:07:84:2c:1c:18:bd:70:44:58:77:26:93:fd:cc:
         2c:50:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:51 2025 by rpki-client