Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57E1F10A79511F1A6B7D1B0CE1D38B0.roa
File:                     E57E1F10A79511F1A6B7D1B0CE1D38B0.roa (raw, json)
Hash identifier:          bCEr1dZoNZUIccCjQ9Qbf8OujxVX0gMkrvJxc1te7YI=
Subject key identifier:   9E:5A:A0:46:9C:DE:00:80:13:C8:DD:B4:DA:31:6E:35:CE:0A:92:4E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D31A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57E1F10A79511F1A6B7D1B0CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 12:49:27 +0000
ROA not before:           Thu 03 Sep 2026 12:49:23 +0000
ROA not after:            Thu 22 Oct 2026 12:49:23 +0000
asID:                     401701
IP address blocks:        45.205.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119578 (0x1d31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 12:49:23 2026 GMT
            Not After : Oct 22 12:49:23 2026 GMT
        Subject: CN=6a996cd7-b5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:b6:56:1c:6d:6d:d7:04:0f:61:dc:d6:16:
                    dd:72:21:e5:c3:ea:e6:a6:ba:8e:bb:ba:7a:13:03:
                    99:26:de:6e:ce:39:2d:8c:dc:ef:0c:62:68:34:0b:
                    a0:22:0d:34:b6:94:63:c6:b5:ec:ed:d7:e1:a3:d7:
                    ec:e4:19:d6:5f:12:9d:f6:59:79:1e:00:1e:f8:9b:
                    bd:fb:b2:f7:95:25:ac:b7:3a:35:da:20:4c:c6:48:
                    c0:bd:9f:c2:a9:af:bc:cd:fb:da:69:17:1f:c3:43:
                    19:84:7f:a1:e5:43:dd:d0:76:0b:f6:68:35:71:59:
                    6b:96:34:48:df:8e:90:02:db:a4:ff:b8:d4:73:b8:
                    06:d2:e9:a5:a6:78:bc:81:7d:44:ab:af:d4:fc:6a:
                    42:0e:f8:c8:c6:c5:95:10:5c:35:31:61:7b:d2:1f:
                    ec:80:01:4f:e9:6d:78:79:6a:d7:c5:e0:08:49:ef:
                    f9:30:90:8e:a5:60:b1:cd:25:dd:57:18:bc:86:9f:
                    7e:d0:75:73:d8:11:f1:b7:dc:ce:bf:5f:69:76:ba:
                    2e:7b:c0:3d:a5:b9:fd:e7:90:c5:d7:7b:0b:d7:46:
                    d6:df:e8:b1:8e:0e:46:eb:f1:dd:72:5c:ce:90:ff:
                    dd:77:83:b1:2c:cc:34:34:d2:03:4e:19:7f:5e:df:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:A0:46:9C:DE:00:80:13:C8:DD:B4:DA:31:6E:35:CE:0A:92:4E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57E1F10A79511F1A6B7D1B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:42:d0:33:45:8b:2e:43:ff:b7:d2:45:f5:c3:bc:f7:87:88:
         0d:91:b9:f7:be:a8:76:e6:5f:d6:62:1b:7d:bd:7d:6a:bb:bc:
         94:08:9f:21:eb:60:77:23:c0:89:b4:4f:66:f3:d9:a5:6b:10:
         fc:d3:ff:b3:d5:8c:e1:00:5b:d6:9b:c8:23:ef:23:6c:dc:74:
         a2:77:8a:a2:bb:f3:f8:5e:ef:bc:a4:df:4d:f8:a7:0c:b5:57:
         27:d7:bb:6d:e1:2f:82:53:41:e9:7a:d2:c0:e0:b8:ca:14:b5:
         3e:70:7d:3d:b3:ed:b4:fd:64:e9:b7:04:3b:e7:0c:03:00:92:
         c8:1b:e8:9a:7b:b8:04:43:82:50:85:7c:ba:7c:30:9f:b4:da:
         23:15:da:d3:4d:11:88:f7:8e:da:28:0c:3e:e8:25:0b:ba:72:
         71:bc:59:b5:9f:03:c6:df:3d:32:64:37:5d:6d:49:c6:47:f4:
         81:91:a1:17:82:3d:5f:50:a8:6b:7e:d0:47:8d:b9:3e:39:87:
         2e:5f:85:9c:e6:b5:be:d5:a0:ce:c1:eb:31:d2:df:50:97:82:
         73:14:21:52:57:3c:7a:30:ff:cf:3a:57:1f:fe:a9:fd:2d:93:
         25:ea:0b:69:b3:8e:6e:32:54:65:dd:13:a4:4e:cf:97:7d:07:
         27:0b:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----