Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E74E5EE0F47211EF817584A9762E951A.roa
File:                     E74E5EE0F47211EF817584A9762E951A.roa (raw, json)
Hash identifier:          MCHhGYSBH2skzVT19CKWwhmm+DjUBxLOhklvsQozsEM=
Subject key identifier:   AC:54:29:11:87:6C:38:92:64:9F:F1:6A:75:C4:BA:57:55:D1:6F:D7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0136B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E74E5EE0F47211EF817584A9762E951A.roa
Signing time:             Wed 26 Feb 2025 18:53:02 +0000
ROA not before:           Wed 26 Feb 2025 18:52:58 +0000
ROA not after:            Thu 19 Feb 2026 18:52:58 +0000
asID:                     984
IP address blocks:        45.201.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79539 (0x136b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 26 18:52:58 2025 GMT
            Not After : Feb 19 18:52:58 2026 GMT
        Subject: CN=67bf630d-a6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:7c:1f:32:1e:91:37:3f:12:ca:03:dd:80:
                    78:ec:0b:49:c1:6d:56:d3:be:7b:7f:79:6d:9f:f4:
                    6f:7f:04:5b:cf:40:bd:b7:9d:81:91:32:f4:fb:18:
                    e9:5a:89:31:d6:c7:ea:78:07:27:ec:4e:70:c6:d5:
                    07:30:8f:68:23:04:23:f0:f5:d9:02:ad:a3:b9:4f:
                    7c:38:c0:44:5b:df:c5:a3:62:93:5a:55:e0:d1:20:
                    19:a5:f4:c4:f9:c7:d8:4b:b1:af:b0:52:0a:fe:75:
                    63:7f:16:cd:30:7b:b4:9b:3d:fb:d9:4e:43:84:cd:
                    59:ea:d5:9b:ac:f5:8f:7f:c0:53:62:e8:e9:73:95:
                    75:ad:f0:ea:c9:69:be:c0:ad:af:27:92:02:28:58:
                    70:19:c0:99:2c:10:e5:45:55:92:df:81:4d:f4:6c:
                    7a:84:00:5f:7f:19:a4:0c:b6:10:43:18:48:19:99:
                    e9:7e:c7:7d:e6:d3:e7:74:37:c9:b7:2e:99:3f:b6:
                    63:1e:86:83:de:71:ed:e9:4d:04:31:95:7b:85:91:
                    65:16:92:cf:db:93:dd:9b:2d:04:ec:95:07:b7:c4:
                    76:35:6c:53:19:f3:df:f8:9a:b4:cd:38:8b:2e:81:
                    ae:5d:ce:f0:7e:27:c3:56:a2:61:78:58:87:a0:5d:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:29:11:87:6C:38:92:64:9F:F1:6A:75:C4:BA:57:55:D1:6F:D7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E74E5EE0F47211EF817584A9762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:7b:91:ea:48:ff:c1:5e:14:95:01:29:a9:6a:23:ef:54:
         1f:d8:4f:1f:ec:f1:2c:30:48:df:83:7f:91:bb:bd:84:38:72:
         4b:fb:1a:12:9a:4e:e4:8d:78:e6:97:31:24:a9:0d:a2:08:ad:
         30:7e:92:4d:8b:95:76:ca:b3:54:81:b5:98:b2:82:8b:65:6d:
         ba:74:da:0d:cf:97:2a:5e:c1:69:37:85:de:e7:db:52:81:7b:
         4a:e3:ad:5d:ce:19:5a:6b:f3:be:f9:b5:44:ea:66:2e:f6:fa:
         58:4a:fa:82:15:0f:55:45:aa:6a:a7:3f:a0:ac:07:cd:a4:39:
         70:d9:fe:84:f1:fa:48:07:74:10:d2:0b:e2:04:f7:58:ef:e9:
         f7:ed:d4:7e:7d:4a:65:5e:e5:82:52:47:58:cb:b6:4b:6c:dd:
         e9:58:f6:79:68:ee:7d:a0:9d:f9:dc:0d:09:5c:3e:89:ff:d8:
         bf:0d:b6:0b:c8:ab:31:06:b6:bc:53:06:da:70:e9:2a:25:c8:
         6c:af:4f:59:3d:70:46:8c:c5:0b:4c:21:b1:48:06:14:b2:b2:
         bb:12:6d:01:47:a3:fc:92:b8:68:fe:7f:89:a1:3a:00:39:71:
         bf:d5:f3:bf:0a:54:a0:2c:f6:15:9d:88:04:c7:b1:f8:b8:80:
         1d:a0:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:18 2025 by rpki-client