Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3846BAA77D11F1B246411ECF1D38B0.roa
File:                     3B3846BAA77D11F1B246411ECF1D38B0.roa (raw, json)
Hash identifier:          OlNfw0ZITvDe5spqwaLd5wC7inSi+pYeoG9Bgx9IDGg=
Subject key identifier:   4D:E5:93:C3:3A:5F:DD:A8:A9:3B:A9:55:F7:B5:EA:5F:E3:DD:3F:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3846BAA77D11F1B246411ECF1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:52:53 +0000
ROA not before:           Thu 03 Sep 2026 09:52:49 +0000
ROA not after:            Fri 16 Oct 2026 09:52:49 +0000
asID:                     401701
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119538 (0x1d2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 09:52:49 2026 GMT
            Not After : Oct 16 09:52:49 2026 GMT
        Subject: CN=6a994375-d998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:71:81:74:71:94:63:d4:e8:9b:32:af:c5:
                    8b:10:c1:4b:6f:83:f7:6e:db:d2:c4:f6:70:d7:a9:
                    57:b8:f5:72:2d:24:31:6e:f7:43:d9:77:f1:5c:68:
                    8e:bd:c7:04:6f:f5:d8:fd:f5:3e:9d:10:5e:34:8e:
                    36:ab:2a:04:53:f2:bd:96:f0:14:d3:97:08:86:9f:
                    8d:77:3a:95:4d:cc:73:6c:7a:62:2b:fb:35:16:c1:
                    d5:dc:54:5e:89:00:49:ac:cd:4c:0f:4b:47:1a:06:
                    71:1a:50:00:6f:ae:1a:cb:61:f0:f4:90:b2:35:a4:
                    91:fb:92:a4:c4:12:44:34:27:e2:17:e9:fb:18:3f:
                    3b:ff:2b:2b:c4:aa:87:1e:ad:2c:72:ea:24:e6:28:
                    16:a6:41:46:d3:57:d0:38:bf:ee:a2:a2:f9:5c:6a:
                    f2:71:a8:3e:b1:c3:64:e7:a2:54:d4:97:2a:d5:a6:
                    11:e7:f9:55:a6:1c:a1:cb:68:c6:68:f4:3c:9d:dd:
                    0c:cf:36:74:8d:59:79:49:6b:55:15:1c:a1:9a:1a:
                    ab:01:97:95:03:1d:42:e7:c4:0d:71:fa:66:61:01:
                    f2:2f:63:f1:63:03:49:e6:03:9d:4c:c0:7d:44:7e:
                    45:d1:ca:be:b1:29:13:45:75:7c:35:ed:70:9a:2d:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:93:C3:3A:5F:DD:A8:A9:3B:A9:55:F7:B5:EA:5F:E3:DD:3F:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B3846BAA77D11F1B246411ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:48:3a:c9:8a:4e:69:d2:f7:c6:93:76:8f:d0:0b:e7:e1:e7:
         e1:30:22:c8:9f:00:9b:64:8c:09:65:bc:5c:b5:ca:d3:65:c4:
         c3:84:fe:e0:80:50:eb:56:86:db:59:fc:9b:f5:92:fc:de:b5:
         77:c2:3c:db:a2:33:c4:18:c9:e2:54:9e:4c:99:a9:26:33:91:
         66:98:21:df:f2:7f:6b:24:7c:ea:75:a5:e7:eb:f0:c1:a8:20:
         40:37:b1:bb:59:d4:69:9c:b5:c6:53:29:ee:1b:43:eb:66:fb:
         45:59:8b:64:6f:b6:f7:e9:b6:84:9e:56:84:8c:1f:74:46:06:
         7f:58:c9:0d:c3:eb:53:a6:53:bd:4b:77:5e:07:71:24:4c:c4:
         16:dd:6a:8b:03:06:e0:18:97:13:b1:59:01:85:df:e9:34:c5:
         66:99:0b:03:c8:12:36:99:9e:ab:09:8d:3b:74:36:c9:b4:22:
         d8:e4:fe:0b:27:89:29:76:ca:c9:db:21:b3:8d:e8:7e:aa:5d:
         10:56:67:41:23:e5:7b:d4:2b:35:3a:2c:c3:e2:a0:54:35:62:
         77:6c:29:61:13:50:36:a6:cb:d9:2f:7b:04:01:71:74:03:90:
         8e:ee:de:56:e3:88:b9:17:83:32:d2:72:54:6d:f7:48:fb:c8:
         12:d8:0c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----