Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8318BFAF36311EF92BA6661762E951A.roa
File:                     C8318BFAF36311EF92BA6661762E951A.roa (raw, json)
Hash identifier:          NhER6VRloTRSFrVstUzAegNCFhubTKUU4fm6IWHoCCU=
Subject key identifier:   92:D5:10:90:69:E4:51:BE:1B:E5:DF:99:81:B2:8A:60:8A:E7:E9:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       012E24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8318BFAF36311EF92BA6661762E951A.roa
Signing time:             Tue 25 Feb 2025 10:32:16 +0000
ROA not before:           Tue 25 Feb 2025 10:32:12 +0000
ROA not after:            Wed 09 Apr 2025 10:32:12 +0000
asID:                     63139
IP address blocks:        45.197.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77348 (0x12e24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 25 10:32:12 2025 GMT
            Not After : Apr  9 10:32:12 2025 GMT
        Subject: CN=67bd9c30-0e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:c1:5c:f5:a1:e1:19:24:74:eb:c3:42:ba:
                    6c:ec:34:bf:5c:6b:62:e2:76:9d:b9:4d:a5:dd:6f:
                    1f:87:46:91:dd:6b:cd:5f:59:2a:bd:a0:49:5e:a1:
                    00:e0:b1:f7:f6:fb:c2:80:68:da:3a:46:a7:78:93:
                    ce:e6:3b:e0:ef:33:be:78:76:5f:1d:0a:ee:80:67:
                    73:de:d9:62:8f:dc:b7:1e:e4:6d:c5:6c:a3:e0:14:
                    1b:b9:58:e0:c9:55:24:88:8d:5e:8c:57:58:56:c9:
                    10:24:b1:77:5c:6e:d1:62:6c:d5:50:da:2f:99:cd:
                    b4:2c:d7:da:15:51:33:b9:cd:31:57:66:1c:43:ac:
                    95:51:e5:71:59:31:ca:de:5f:35:2c:4e:87:ea:99:
                    78:27:7e:ff:e0:6e:3d:0f:3f:a4:84:16:b6:28:da:
                    b3:25:5a:03:e0:72:3e:e5:3c:36:d7:e3:93:6e:16:
                    84:55:c6:d0:2e:84:df:68:1e:35:fc:3e:ee:e6:a3:
                    3e:6e:ab:96:f4:2e:a8:f7:b3:e8:e6:89:73:c4:71:
                    50:62:52:59:ac:4f:b3:12:c0:f9:7f:4a:85:f7:ab:
                    e9:d7:fd:d9:c1:bf:75:ce:30:75:6d:9f:8b:3e:c9:
                    40:ae:06:be:a1:3d:29:8a:30:c1:3c:70:ad:2b:7b:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D5:10:90:69:E4:51:BE:1B:E5:DF:99:81:B2:8A:60:8A:E7:E9:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8318BFAF36311EF92BA6661762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:f0:3f:50:00:a6:2a:4c:f6:b6:b7:9e:74:46:71:32:7d:
         70:2b:b9:5b:f5:80:0f:d3:c8:24:74:5f:68:da:a6:37:9f:22:
         33:03:90:b8:e8:1f:71:c2:7a:10:f8:a8:d1:20:8a:47:01:29:
         c4:73:be:a2:5e:bb:f9:03:b8:f3:20:00:1b:83:18:e8:d5:85:
         db:38:8c:fc:2c:8b:e6:c9:4a:94:e9:dd:f1:0a:e3:9c:03:29:
         e4:81:7f:04:09:ac:69:d2:eb:60:75:c8:36:b7:ed:86:18:b2:
         14:73:72:e4:1c:e2:c0:b0:0a:61:24:8a:48:2a:08:c9:6e:ae:
         5b:5c:f8:14:c5:e5:d4:f2:1e:75:08:7d:b3:42:16:ce:0d:3c:
         57:c7:48:92:76:3f:81:2f:25:35:36:db:ad:a2:94:8b:83:75:
         a7:f7:44:bd:c3:08:7d:5e:4a:be:21:68:5c:92:85:2f:38:f2:
         be:bb:ed:93:e9:e4:7a:0d:76:e2:4b:57:ed:f4:ba:a8:94:c0:
         18:c9:ad:c6:17:c4:c0:bb:1b:de:64:08:d9:f3:69:86:f9:3e:
         14:af:76:f5:de:46:23:f5:73:9e:df:08:02:58:02:d4:75:ca:
         a6:fe:b1:bb:dd:46:f2:b7:fd:50:ff:2a:9f:d0:47:f3:1b:d0:
         e0:2c:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:57 2025 by rpki-client