Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BFD5A5CF39611EF8F8209B2762E951A.roa
File:                     6BFD5A5CF39611EF8F8209B2762E951A.roa (raw, json)
Hash identifier:          LTWrcs3pF86LsW9p8+WPRAKbhR2bNu+QEBcfogEIlfY=
Subject key identifier:   7F:E9:20:F1:1A:86:8F:2F:6F:A2:39:0D:BE:FC:D1:F3:3D:CA:D8:81
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       012EA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BFD5A5CF39611EF8F8209B2762E951A.roa
Signing time:             Tue 25 Feb 2025 16:34:45 +0000
ROA not before:           Tue 25 Feb 2025 16:34:42 +0000
ROA not after:            Wed 09 Apr 2025 16:34:42 +0000
asID:                     63139
IP address blocks:        45.197.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77473 (0x12ea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 25 16:34:42 2025 GMT
            Not After : Apr  9 16:34:42 2025 GMT
        Subject: CN=67bdf125-da8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:ae:fe:ae:60:af:12:47:2b:ae:90:6e:66:
                    09:48:97:33:7e:4e:8f:65:b6:2d:58:26:be:46:8c:
                    b5:11:8b:06:37:47:4d:20:77:53:dd:09:c4:3f:08:
                    64:1e:47:7c:10:b8:65:1f:fa:95:6f:81:13:6f:f3:
                    15:17:23:6d:cb:3d:e3:db:dc:61:cf:49:e9:12:da:
                    e1:82:c2:7d:b8:e8:b2:41:e5:af:76:3d:84:2c:2e:
                    96:db:38:db:80:42:b6:27:69:0b:90:fa:35:e1:2e:
                    ee:98:a4:3d:18:eb:92:8a:bd:b5:b1:05:45:21:02:
                    b9:e7:9b:aa:fa:8c:81:5e:37:74:33:92:02:69:08:
                    b0:32:49:4b:9e:a7:1f:95:e6:2c:43:e4:11:a9:56:
                    d5:a9:1d:c4:46:1d:29:2d:4b:05:3c:e6:67:cc:b7:
                    79:d7:69:9a:76:73:2d:3d:b5:8d:e0:75:08:6e:6f:
                    f7:4b:b9:96:82:e2:e6:fc:bb:b4:7a:ea:29:bd:5d:
                    a4:1f:c2:2e:f4:b0:d0:9e:e2:8a:4d:35:6e:80:f9:
                    2b:00:ad:c9:f9:31:f0:01:2e:a7:e8:e3:17:02:12:
                    18:ce:af:bf:3b:49:eb:5b:fc:65:3b:c2:de:3a:98:
                    b3:12:57:e2:d6:45:e8:52:89:11:58:d3:85:bf:bb:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E9:20:F1:1A:86:8F:2F:6F:A2:39:0D:BE:FC:D1:F3:3D:CA:D8:81
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BFD5A5CF39611EF8F8209B2762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:b8:a6:26:ae:b6:32:62:61:72:23:51:d3:ac:d2:b5:b6:
         d6:a3:c4:8d:49:85:e9:7e:9d:aa:51:4e:69:3c:b6:e8:2a:f9:
         73:e9:61:73:66:21:69:97:f3:68:44:ea:5c:97:89:d4:69:22:
         df:e8:a5:6c:16:34:82:dd:d3:e7:dd:06:22:39:5e:93:25:bc:
         85:e2:93:fb:48:02:04:e0:57:cc:e6:d8:28:cb:57:04:dd:b6:
         1a:39:9a:61:a2:b7:7b:01:a4:49:04:94:6b:d1:f1:dd:75:5e:
         0c:ea:46:97:5d:a4:37:d7:73:83:63:40:89:9f:df:28:a6:e3:
         df:82:db:82:36:fb:b8:35:6e:21:66:6d:9b:53:29:63:e6:84:
         93:21:cd:cb:df:86:a6:d0:31:22:00:99:2b:39:32:75:43:18:
         75:d7:8a:e4:a8:c5:95:ad:0e:e1:d8:82:d7:72:f5:a9:d8:1d:
         e4:8d:6d:c6:a1:a5:e8:22:b5:48:e9:41:6d:7c:75:3d:b0:c4:
         88:35:59:0a:0f:2d:84:80:a7:cf:21:6d:9a:61:99:d6:3a:d2:
         ff:fe:fa:ca:fa:31:66:61:01:24:e7:d5:9d:25:78:03:e4:12:
         33:ca:ed:54:ab:74:cc:2c:14:b2:62:8e:ac:4d:d6:e3:d2:c2:
         a6:cc:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client