Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93578736F34511EF9A6F9E92762E951A.roa
File:                     93578736F34511EF9A6F9E92762E951A.roa (raw, json)
Hash identifier:          rC1fvUBN9Uy7D6TQFVw3voGyhTJqcx4AaajM48gsNnI=
Subject key identifier:   0A:4C:B2:3C:E2:1C:9C:A5:58:EF:20:5E:7A:9A:A5:29:8C:96:4D:B9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       012D94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93578736F34511EF9A6F9E92762E951A.roa
Signing time:             Tue 25 Feb 2025 06:56:02 +0000
ROA not before:           Tue 25 Feb 2025 06:55:58 +0000
ROA not after:            Sat 19 Feb 2028 06:55:58 +0000
asID:                     17561
IP address blocks:        156.249.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77204 (0x12d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 25 06:55:58 2025 GMT
            Not After : Feb 19 06:55:58 2028 GMT
        Subject: CN=67bd6982-7569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:a3:ea:ac:49:43:e3:09:28:48:1f:db:b3:
                    72:38:16:76:48:37:ef:dc:f9:0e:df:d3:99:c9:2b:
                    d7:12:4b:1a:e6:f2:58:c5:20:94:c6:b1:de:5f:43:
                    18:03:ee:bf:b2:f6:dc:9e:a6:bd:ee:1c:c2:87:3d:
                    d3:77:20:3f:33:27:57:17:3c:d8:42:4f:9f:a1:0d:
                    03:a0:96:66:ea:80:dd:2b:f0:8a:72:ba:89:b1:aa:
                    bf:a8:b7:36:8e:01:9a:8f:58:a7:86:00:bd:01:9a:
                    6d:5b:da:10:97:0b:0b:d5:3b:c1:74:a2:53:82:22:
                    75:a6:4e:a2:65:45:a4:b6:c1:56:9e:fc:b3:31:2c:
                    05:e8:3a:3c:86:eb:03:1d:fa:b9:0b:40:0a:ac:eb:
                    0e:92:12:32:95:82:91:f3:3d:fc:bd:1d:be:89:6f:
                    53:93:f4:84:c5:2f:df:fc:e8:b5:9b:b8:61:8d:b4:
                    b5:49:4b:a4:04:54:84:8f:b6:9f:9c:fb:2c:59:dc:
                    10:07:0a:ca:c1:2e:35:6d:cd:7f:a1:fd:52:86:48:
                    a2:f3:20:66:07:69:77:cc:08:eb:50:ad:72:ce:37:
                    73:74:ae:14:aa:44:12:21:ed:4c:b2:3d:c0:ef:0e:
                    87:c5:15:ca:55:cf:34:07:e4:02:cb:b8:cc:f9:ee:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4C:B2:3C:E2:1C:9C:A5:58:EF:20:5E:7A:9A:A5:29:8C:96:4D:B9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93578736F34511EF9A6F9E92762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:9e:9f:42:9f:15:0c:db:ed:fb:f2:da:c5:e3:7b:37:69:
         67:dd:d6:37:3d:18:30:d1:fc:4d:d3:30:b9:a0:aa:7d:6a:80:
         48:36:37:9b:04:db:f9:a7:03:b9:12:ea:19:68:32:75:fc:39:
         d6:b3:83:4e:bd:92:03:f1:e5:22:8a:9f:8e:b8:ce:4c:b8:d1:
         94:29:5e:36:4a:02:56:f4:73:55:88:b1:bb:10:e0:00:f9:77:
         fc:92:f8:04:ba:f9:af:2c:54:8a:4f:49:36:1d:be:3e:90:0e:
         fe:6a:49:62:5e:cf:dd:15:c9:c2:1c:d8:16:57:33:c0:c8:fa:
         43:14:2e:66:41:02:14:0b:c3:85:9e:f4:26:2e:16:22:d4:db:
         2d:a7:b8:fd:dd:5c:54:2f:6e:32:b1:17:db:38:ae:27:00:42:
         d3:5d:79:ea:49:96:e1:57:8a:db:7c:c9:ea:26:69:b4:62:fb:
         4a:3e:a4:a2:ca:7b:04:03:a9:76:c0:de:14:83:2e:d1:1a:04:
         1a:d3:24:ce:51:4c:cf:bf:66:03:ce:72:74:f3:4c:e7:e6:f5:
         a4:9a:c9:37:0e:00:4d:87:c6:39:de:fd:fc:a1:1f:f7:51:92:
         0d:0b:a2:ea:83:35:cf:7c:47:71:0d:96:d6:ed:d4:77:04:5c:
         6d:f7:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:48 2025 by rpki-client