Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B75B67E03F211F0B81DC643762E951A.roa
File:                     8B75B67E03F211F0B81DC643762E951A.roa (raw, json)
Hash identifier:          MkAiePcod9tRcAHwh35QhF8J+oLgLggwopJvD8y1Ys4=
Subject key identifier:   D1:A2:28:36:C1:E1:34:11:13:1B:9E:63:70:8F:5A:9A:C2:60:6C:D5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0146B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B75B67E03F211F0B81DC643762E951A.roa
Signing time:             Tue 18 Mar 2025 12:14:30 +0000
ROA not before:           Tue 18 Mar 2025 12:14:26 +0000
ROA not after:            Sun 27 Apr 2025 12:14:26 +0000
asID:                     48031
IP address blocks:        45.200.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83639 (0x146b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Mar 18 12:14:26 2025 GMT
            Not After : Apr 27 12:14:26 2025 GMT
        Subject: CN=67d963a6-1065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:1d:30:9a:70:f3:5d:75:40:d2:62:92:c7:
                    f0:aa:b4:56:88:8f:5a:d9:20:dc:81:4f:0a:20:48:
                    de:18:c2:37:2e:42:76:46:20:da:1a:0a:99:9a:a9:
                    2a:bf:57:8a:6f:1b:5b:69:ae:65:7d:a1:90:24:b9:
                    26:ad:5d:73:cd:79:68:c1:32:4b:9d:1e:f5:ed:47:
                    95:0f:15:92:98:b4:93:9d:8d:dc:87:cd:c8:25:8f:
                    a3:66:85:6d:85:67:f3:e0:1d:42:00:4f:0b:98:7a:
                    b1:ff:16:48:fd:16:69:4c:9f:a5:10:9c:50:58:d0:
                    a5:6b:06:e8:ae:b9:a8:ef:ba:80:3b:b7:f2:ec:6d:
                    7d:d4:b0:68:76:06:91:c1:f8:21:b9:83:32:41:a9:
                    ac:14:32:57:b0:3c:c1:84:60:93:f2:47:67:5c:90:
                    02:aa:62:6e:c5:64:e9:7d:3b:d7:ac:52:40:f6:8d:
                    8f:84:03:39:bf:bb:34:92:1e:a3:20:50:d2:b9:10:
                    ed:22:64:e7:42:46:84:19:82:e5:20:e5:f4:1e:37:
                    7a:d5:8a:ca:2d:f6:9b:47:7f:b6:31:6e:f9:85:8a:
                    e0:48:9b:15:67:e2:8a:4e:92:a1:54:12:96:50:9b:
                    f3:62:8f:a5:2c:f3:31:cf:e1:e0:2d:b4:e3:2a:de:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A2:28:36:C1:E1:34:11:13:1B:9E:63:70:8F:5A:9A:C2:60:6C:D5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B75B67E03F211F0B81DC643762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:56:b4:17:dc:85:1f:bd:fd:d1:7b:a7:f5:a3:b8:06:5b:99:
         93:65:a4:69:6a:e7:1e:dd:1b:72:b8:14:a9:f5:ea:53:0a:29:
         bd:c0:a3:ac:b7:3b:7e:e2:2e:46:dc:5a:60:e1:0b:4d:0c:28:
         fc:32:31:d4:e6:b7:62:47:06:63:5c:1c:8a:80:b6:3a:b8:07:
         e5:52:85:cb:ec:78:f2:23:ea:bb:b1:e7:24:06:62:ce:f3:45:
         1c:15:b6:a9:bd:ad:d5:89:3c:70:68:86:71:47:26:1a:90:40:
         a6:d0:ff:7a:8b:d3:cc:fb:87:29:13:dd:1a:c0:1c:dd:4c:1e:
         98:12:b9:00:3c:38:32:ac:0f:77:31:c4:28:6f:53:6f:45:85:
         df:06:b8:bf:ff:08:1c:ac:2d:41:e9:b7:e6:0d:d4:26:85:b3:
         97:9d:0e:8b:e5:a0:c5:6a:6e:08:6b:2e:fc:0c:f3:77:c5:23:
         0c:7d:72:51:d2:6d:70:9e:d7:dd:a7:e9:12:81:6a:eb:cc:fe:
         f2:32:fd:07:19:1d:1d:2a:fd:50:f0:5d:31:ad:7a:ec:3c:ed:
         42:3b:4f:65:41:af:9f:32:f5:14:8b:af:29:62:2c:8c:f0:3b:
         07:05:0c:d8:e9:e3:75:d7:3c:f0:1b:70:62:e3:e4:05:7f:f5:
         82:ce:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:40 2025 by rpki-client