Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9726BCF42C11EFB14320BB762E951A.roa
File:                     6E9726BCF42C11EFB14320BB762E951A.roa (raw, json)
Hash identifier:          iq66d17oLp/MdHl/bK3uIl2zX4acfTkQwnSifzY3Eq8=
Subject key identifier:   75:89:B9:D5:6D:96:75:B5:FA:74:A8:61:45:65:4B:E7:B7:E4:0C:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       013110
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9726BCF42C11EFB14320BB762E951A.roa
Signing time:             Wed 26 Feb 2025 10:28:34 +0000
ROA not before:           Wed 26 Feb 2025 10:28:30 +0000
ROA not after:            Sun 20 Feb 2028 10:28:30 +0000
asID:                     17561
IP address blocks:        45.203.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78096 (0x13110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 26 10:28:30 2025 GMT
            Not After : Feb 20 10:28:30 2028 GMT
        Subject: CN=67beecd2-27a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:dc:6a:20:bc:e9:6d:90:ec:74:df:30:fa:
                    4d:bf:38:8c:65:3b:a6:c4:fb:ff:6b:bd:be:a7:f7:
                    d2:d8:cf:1f:83:a3:09:c8:c2:87:4d:81:14:09:d6:
                    c2:07:8a:bd:25:27:c6:b1:33:f4:db:29:ff:16:b8:
                    89:a5:35:dd:c3:d6:6c:a8:ca:82:54:06:a9:46:11:
                    c4:7f:7f:c6:e8:8b:e2:d0:86:8a:32:48:cc:46:83:
                    8f:16:ce:29:85:02:39:52:3e:e1:45:0f:3d:14:91:
                    60:ba:a2:bd:26:8b:ab:cd:a1:28:58:19:c3:9a:1a:
                    bd:fd:a1:6b:0d:aa:51:15:dd:3c:33:24:2b:cf:14:
                    38:be:7a:bd:e2:d9:c3:21:e0:a1:c1:17:af:a1:c1:
                    e0:3b:d8:c5:dd:fd:97:d3:b0:89:47:bd:ee:bf:1b:
                    45:51:76:21:d5:d9:6a:d2:e1:75:00:01:73:93:74:
                    cf:72:95:a6:3e:e6:90:1b:50:f0:bf:15:c2:68:df:
                    0f:e2:61:df:15:d8:40:cb:c7:f8:9f:de:86:a6:c7:
                    df:04:c4:2a:3f:49:d8:07:ea:64:95:05:30:5f:36:
                    fb:ac:a2:23:70:c5:9b:22:17:ba:14:8f:3d:d9:c0:
                    5c:a6:8e:eb:4e:ee:a0:af:dd:b9:66:eb:78:61:23:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:89:B9:D5:6D:96:75:B5:FA:74:A8:61:45:65:4B:E7:B7:E4:0C:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9726BCF42C11EFB14320BB762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:fb:12:8e:75:2e:fa:53:ea:80:46:48:ef:6f:e6:cd:7e:08:
         61:73:b2:22:b6:22:6e:4b:9d:4c:5b:1d:74:41:21:52:a4:f8:
         f0:23:77:83:a7:a2:2d:a9:85:54:b5:5c:fe:d7:52:da:f5:23:
         89:eb:70:4a:2c:79:49:58:f3:6a:dc:9f:40:d0:06:3a:33:e6:
         d1:33:ed:b2:a3:c9:85:52:69:33:3b:d7:ae:fe:0e:cc:ad:c6:
         c8:fd:43:86:67:0a:68:e0:d7:a3:12:b9:02:0f:40:41:73:8c:
         66:ec:46:1b:5b:62:21:a4:28:7a:50:90:bb:79:90:df:22:f1:
         c2:8e:22:13:55:d7:c6:00:62:9b:ba:b3:55:d1:67:23:e2:96:
         41:58:fb:26:0c:7a:4c:fe:d1:27:a4:a1:fb:16:18:e8:85:81:
         81:f2:35:be:1d:5c:da:52:d0:db:aa:30:0b:73:c7:82:74:30:
         e0:9b:8d:60:5d:86:ce:9d:99:d2:47:41:38:ee:5b:79:c1:30:
         03:89:62:90:47:6a:95:97:b8:ef:6c:17:23:8a:b6:9c:f6:62:
         fa:92:86:43:fd:bf:36:bc:c7:d1:60:a3:61:12:60:66:f0:f9:
         f7:01:77:fb:3e:fa:8f:ec:d9:fc:88:7c:dc:8d:b1:61:8e:75:
         0e:48:68:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATEQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAyODMwWhcNMjgwMjIwMTAyODMwWjAYMRYw
FAYDVQQDEw02N2JlZWNkMi0yN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAttfcaiC86W2Q7HTfMPpNvziMZTumxPv/a72+p/fS2M8fg6MJyMKHTYEU
CdbCB4q9JSfGsTP02yn/FriJpTXdw9ZsqMqCVAapRhHEf3/G6Ivi0IaKMkjMRoOP
Fs4phQI5Uj7hRQ89FJFguqK9JourzaEoWBnDmhq9/aFrDapRFd08MyQrzxQ4vnq9
4tnDIeChwRevocHgO9jF3f2X07CJR73uvxtFUXYh1dlq0uF1AAFzk3TPcpWmPuaQ
G1DwvxXCaN8P4mHfFdhAy8f4n96GpsffBMQqP0nYB+pklQUwXzb7rKIjcMWbIhe6
FI892cBcpo7rTu6gr925Zut4YSP6BQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHWJ
udVtlnW1+nSoYUVlS+e35AwrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RTk3MjZCQ0Y0MkMxMUVGQjE0MzIwQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcufMA0GCSqGSIb3DQEBCwUA
A4IBAQAq+xKOdS76U+qARkjvb+bNfghhc7IitiJuS51MWx10QSFSpPjwI3eDp6It
qYVUtVz+11La9SOJ63BKLHlJWPNq3J9A0AY6M+bRM+2yo8mFUmkzO9eu/g7MrcbI
/UOGZwpo4NejErkCD0BBc4xm7EYbW2IhpCh6UJC7eZDfIvHCjiITVdfGAGKburNV
0Wcj4pZBWPsmDHpM/tEnpKH7FhjohYGB8jW+HVzaUtDbqjALc8eCdDDgm41gXYbO
nZnSR0E47lt5wTADiWKQR2qVl7jvbBcjirac9mL6koZD/b82vMfRYKNhEmBm8Pn3
AXf7PvqP7Nn8iHzcjbFhjnUOSGja
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:30 2025 by rpki-client