Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D13392F42411EF810E3784762E951A.roa
File:                     77D13392F42411EF810E3784762E951A.roa (raw, json)
Hash identifier:          a4xZyagvq/nFw2H24et7iltmAGbJQInV24gT3GcxSvc=
Subject key identifier:   91:49:EC:E3:30:DA:43:CC:34:9E:41:FA:F5:D8:D1:63:6F:54:CB:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       013079
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D13392F42411EF810E3784762E951A.roa
Signing time:             Wed 26 Feb 2025 09:31:34 +0000
ROA not before:           Wed 26 Feb 2025 09:31:30 +0000
ROA not after:            Thu 19 Feb 2026 09:31:30 +0000
asID:                     984
IP address blocks:        156.230.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77945 (0x13079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 26 09:31:30 2025 GMT
            Not After : Feb 19 09:31:30 2026 GMT
        Subject: CN=67bedf76-e2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:37:93:76:b9:8e:cf:d6:09:9a:4f:e3:29:
                    f6:90:f7:42:55:97:35:4f:01:14:41:21:c0:87:ae:
                    0b:e9:e7:02:f3:f6:d2:f2:96:50:3b:67:c5:ab:16:
                    e4:85:9e:b5:c1:43:98:4a:2b:30:f3:26:0e:78:65:
                    11:da:b4:d6:23:35:7d:78:7d:3c:a1:37:aa:05:4d:
                    49:b2:b7:d1:35:f0:33:92:72:fd:2c:2a:62:7a:f1:
                    14:0a:c2:2d:9f:20:7b:4b:f7:83:f0:55:7d:b4:25:
                    3c:4a:30:ef:53:d2:a5:8c:b3:76:0e:3c:b4:a8:87:
                    4f:5d:03:79:cd:57:45:f3:9b:bc:8c:c9:24:6e:65:
                    f1:bc:b2:c0:3f:90:b0:e5:85:e0:16:06:7a:92:de:
                    31:0d:04:9b:25:b9:66:98:6a:45:a2:b0:51:d9:cc:
                    d1:6b:c4:af:d8:87:30:84:23:07:21:2b:8f:c0:87:
                    2b:3c:d2:40:21:68:68:15:81:f0:23:28:df:69:11:
                    1e:01:bf:ff:af:e6:a4:bc:bc:ba:92:07:05:62:06:
                    3e:4b:72:92:63:0a:5f:d5:19:61:39:ae:d8:6a:9e:
                    c5:d5:ed:fd:a1:f4:35:da:6c:30:04:38:fd:c0:a0:
                    1d:99:dd:0c:24:c1:e7:72:3d:51:4a:31:09:83:74:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:EC:E3:30:DA:43:CC:34:9E:41:FA:F5:D8:D1:63:6F:54:CB:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D13392F42411EF810E3784762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:f4:d6:ba:6f:ce:6e:7c:c0:1f:52:c9:2c:e8:9a:5a:1d:
         a6:0a:d2:dc:04:8a:bb:85:44:14:3f:7c:04:54:64:57:ef:36:
         f3:60:3c:22:f6:74:f4:a0:b4:76:01:a9:06:4d:80:36:a6:2d:
         8c:1a:08:47:f8:b8:f1:4f:1b:ca:27:24:a7:46:28:a4:c0:ae:
         dd:5c:fe:2c:97:0a:72:0e:17:b1:f2:61:0b:15:b8:a5:0e:09:
         f1:9d:6c:a2:d9:52:2a:c1:82:cc:b4:ea:31:6f:be:72:4a:40:
         d5:21:0f:61:29:97:aa:13:63:e9:b6:cb:f5:b7:5b:28:49:91:
         45:6b:c9:2e:3e:a8:5c:97:cf:06:96:a2:2a:0b:03:d0:5a:91:
         6b:dc:d5:5e:2a:d3:b0:27:ab:cd:77:7b:69:ed:1e:cc:c2:38:
         6f:d7:56:3f:f8:55:16:7e:58:50:d0:7c:91:f9:8f:11:a3:a2:
         1c:37:42:22:fb:f0:6c:10:86:a0:90:ae:ea:49:63:e6:ea:1d:
         c7:b3:ab:32:97:51:86:5c:a5:d5:26:82:cb:ae:87:4a:25:49:
         c3:53:e6:ab:98:c8:46:8a:8b:d2:23:ce:5f:fb:0d:a9:63:d1:
         bc:69:be:68:a9:d2:89:c9:ce:8e:3b:bb:fe:96:60:61:76:ee:
         37:ea:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:23 2025 by rpki-client