Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1576090F47111EFBC4413A0762E951A.roa
File:                     A1576090F47111EFBC4413A0762E951A.roa (raw, json)
Hash identifier:          SigeXC9PR+67R3R0GX4y7E7oJJaz3jQeZti8C7nG0Jc=
Subject key identifier:   8D:D6:9C:5F:C1:0D:91:CD:CA:AD:CF:50:3B:FA:E6:2E:1D:A6:4C:8B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       013692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1576090F47111EFBC4413A0762E951A.roa
Signing time:             Wed 26 Feb 2025 18:43:55 +0000
ROA not before:           Wed 26 Feb 2025 18:43:51 +0000
ROA not after:            Thu 19 Feb 2026 18:43:51 +0000
asID:                     984
IP address blocks:        45.201.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79506 (0x13692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 26 18:43:51 2025 GMT
            Not After : Feb 19 18:43:51 2026 GMT
        Subject: CN=67bf60eb-efb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:73:87:f4:8b:ca:6d:38:af:95:84:92:4a:54:
                    ec:fb:07:a0:11:2b:b1:8d:b5:7d:53:9d:64:ca:8f:
                    4b:15:1d:07:e6:c0:36:f8:3e:06:c1:6f:ab:e8:49:
                    3b:ff:76:59:05:66:cc:2e:04:72:42:e7:4e:86:ac:
                    51:26:db:c2:5b:fd:7e:cc:35:4c:eb:08:9a:82:d4:
                    b4:af:1e:0a:9f:3c:b5:6f:0b:7d:2c:bb:c6:02:51:
                    8c:1d:13:be:64:5a:ee:03:a4:c2:81:b1:e9:d5:66:
                    28:ff:72:27:08:0e:a6:b8:93:94:b8:04:f8:0e:24:
                    ec:18:27:06:af:39:48:b4:e5:57:03:18:ba:af:6a:
                    5e:61:bd:82:e1:ff:c6:c8:25:0c:a1:91:4b:2c:03:
                    26:b5:87:1a:37:67:cb:fe:67:f0:89:c9:fe:99:ad:
                    69:9f:22:07:b0:41:52:04:97:13:38:8f:ff:11:54:
                    9a:5c:f8:5d:28:96:0e:b4:d0:b1:b9:bc:55:f7:16:
                    a4:d8:6c:b0:14:ff:ad:10:4a:12:34:b6:95:dc:49:
                    e7:2a:25:f0:9e:d5:a4:fb:5e:5b:ed:1e:9c:59:6a:
                    7c:2f:38:1d:1c:03:ce:9e:62:25:8d:c0:53:ad:fc:
                    2b:1f:99:fe:b8:16:6b:e3:75:da:1f:0d:7d:05:5b:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:9C:5F:C1:0D:91:CD:CA:AD:CF:50:3B:FA:E6:2E:1D:A6:4C:8B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1576090F47111EFBC4413A0762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:92:0a:99:8a:4c:06:7f:41:2f:a1:6c:25:e1:b5:19:3c:
         1d:8e:7a:f0:fa:43:8b:e9:13:15:b1:ad:ae:d9:5c:7c:a8:26:
         4b:2f:e2:41:84:02:28:fc:a4:9c:c3:fb:36:5d:58:27:24:a9:
         2c:c9:c7:24:84:19:3b:8b:fb:c8:fb:71:4e:29:0e:42:fa:4e:
         78:71:42:d6:bc:b8:22:72:6e:79:df:d9:c9:05:77:cc:64:2a:
         32:0a:8d:e7:91:d8:48:a1:9b:34:11:f9:b3:d8:56:af:72:66:
         90:eb:2b:49:90:6c:89:5a:30:95:f4:8b:f0:9d:18:ad:87:01:
         16:6e:d0:7e:b0:3e:2b:fa:f4:20:df:12:c6:83:ca:fe:8d:bb:
         5b:c9:8f:93:ac:bf:3f:8f:a0:2e:31:ed:20:dd:5b:1d:78:fd:
         08:96:03:30:05:f5:01:7e:f8:dd:11:83:2d:13:7f:f7:19:0f:
         df:02:2f:30:c1:0d:ad:46:42:a9:29:ca:29:dd:28:ae:1a:6b:
         5d:59:3d:6d:59:de:36:91:02:09:4e:25:f6:ee:67:4a:d5:4f:
         a9:c1:37:02:6d:a2:da:bb:57:01:30:84:7c:f7:9b:3c:25:83:
         36:36:5b:43:c4:32:f5:89:80:4b:43:14:20:a3:cd:18:be:bc:
         fe:8e:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client