Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9329F87EA78111F184AC77B8CE1D38B0.roa
File:                     9329F87EA78111F184AC77B8CE1D38B0.roa (raw, json)
Hash identifier:          4E9LvBg1U56bHpD7KPXSkFY/qRFRVAAIKjfgsO3cwGQ=
Subject key identifier:   BD:9C:37:24:60:A1:F7:11:DB:87:94:D3:C0:CB:AB:C9:14:DE:2E:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D302
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9329F87EA78111F184AC77B8CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 10:23:59 +0000
ROA not before:           Thu 03 Sep 2026 10:23:55 +0000
ROA not after:            Thu 22 Oct 2026 10:23:55 +0000
asID:                     401701
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119554 (0x1d302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 10:23:55 2026 GMT
            Not After : Oct 22 10:23:55 2026 GMT
        Subject: CN=6a994abf-11da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:f9:9d:2e:96:3d:eb:80:af:64:67:b9:80:
                    e8:f2:67:c1:c8:25:c9:e1:bd:ea:84:e4:3f:7e:e7:
                    11:a0:5a:af:7d:6b:76:e1:68:73:00:ed:73:69:62:
                    a7:1b:be:a2:d4:7f:2b:c0:e7:dc:58:cb:e1:a3:07:
                    e3:59:9a:91:60:2e:5c:87:73:da:9d:46:8d:d4:48:
                    1b:6f:5e:84:0b:d8:d4:30:10:b7:c5:8d:f7:ba:f2:
                    43:ce:d3:55:7f:68:45:13:63:e3:ad:78:f9:5b:37:
                    a0:0c:31:4a:43:d4:1a:cb:09:44:83:96:c9:05:31:
                    c7:15:d1:b0:f3:35:66:9d:d7:80:ec:95:a5:f7:57:
                    bc:e2:9d:6e:2c:2a:39:c3:6a:87:d2:43:ac:ff:d9:
                    a5:ae:da:3d:3f:a1:7d:db:db:c1:59:75:db:40:0f:
                    19:ec:08:e7:06:f7:f7:16:a9:02:c1:7d:4a:b5:34:
                    57:17:48:56:fa:19:98:2e:b8:67:87:d5:e0:57:86:
                    dd:35:de:33:dd:5a:a9:1a:2d:51:25:43:24:13:90:
                    5d:31:bc:a9:f5:e7:9b:ad:70:b3:8a:60:8c:02:b1:
                    78:fb:0a:c1:78:30:50:4d:80:79:26:2e:38:89:39:
                    53:f1:b7:c8:78:d4:01:56:cb:0f:75:08:50:a8:5d:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9C:37:24:60:A1:F7:11:DB:87:94:D3:C0:CB:AB:C9:14:DE:2E:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9329F87EA78111F184AC77B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:55:48:fc:9c:64:6c:a1:09:20:4b:9a:0d:7a:f2:8f:b9:
         4a:7b:64:f2:3b:d7:53:e9:56:6e:5c:cd:08:a1:af:91:99:a9:
         09:05:5a:21:ca:6f:e3:01:e0:94:cd:f3:a1:11:7c:7a:ee:05:
         7e:29:04:4a:98:78:35:62:ed:02:6a:85:2b:95:1b:07:70:1e:
         d3:f5:8b:f9:99:ff:93:ba:c6:10:4a:93:74:04:36:b8:65:86:
         3a:2b:69:07:6c:cf:2e:14:ac:2e:30:4f:64:7c:10:be:ab:8c:
         72:b2:85:07:72:6c:ef:0e:9d:56:26:92:83:1c:c3:e5:7b:73:
         9d:83:fa:46:b1:10:90:8d:3d:e8:fa:40:10:b0:c4:01:35:87:
         86:5c:fe:80:82:7e:a4:fd:40:5e:f0:ce:04:67:e7:4b:23:2c:
         f7:13:b4:3c:ba:15:31:a8:fa:d6:e3:f4:95:68:d7:9b:c4:0f:
         fa:ef:46:3f:09:6d:3e:e0:1a:6d:f7:f6:78:eb:f8:d7:12:ec:
         45:f3:a8:9b:94:d7:9a:2e:46:d8:88:bd:17:d1:af:3d:99:5a:
         d8:fd:85:8f:d5:04:1b:5b:82:77:41:fe:6a:fb:92:8a:77:69:
         6e:f0:54:68:d1:42:39:5c:77:29:24:d2:fd:37:0e:7a:09:30:
         20:2e:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----