Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE078542058211F08685DC69762E951A.roa
File:                     EE078542058211F08685DC69762E951A.roa (raw, json)
Hash identifier:          SM+sCNBsRHdAMqJBZ3wioMuXCE4mQq9VNsL9dlrqfZ4=
Subject key identifier:   1D:B9:E5:4B:A1:05:92:E0:C9:FF:F8:A0:5C:CF:E2:D5:12:3B:C8:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01474A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE078542058211F08685DC69762E951A.roa
Signing time:             Thu 20 Mar 2025 12:00:34 +0000
ROA not before:           Thu 20 Mar 2025 12:00:31 +0000
ROA not after:            Fri 01 Aug 2025 12:00:31 +0000
asID:                     55020
IP address blocks:        156.241.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83786 (0x1474a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Mar 20 12:00:31 2025 GMT
            Not After : Aug  1 12:00:31 2025 GMT
        Subject: CN=67dc0362-2b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:14:9a:fb:78:be:b6:60:77:b6:68:16:25:
                    77:0a:18:c5:d1:e0:8a:73:ae:f8:91:6a:77:19:7a:
                    86:84:ce:55:df:88:33:37:3b:95:13:fc:a4:42:23:
                    3e:31:e9:78:3b:68:3b:7a:84:a4:b0:4a:28:d0:bd:
                    1b:66:b0:cd:56:21:f8:8d:f6:2f:7c:a2:9a:a6:d7:
                    07:03:ed:52:b2:a6:b3:42:c5:72:3e:39:03:85:ad:
                    44:d5:75:32:c6:ab:0d:65:cb:a7:79:00:19:11:03:
                    c6:0f:53:a4:c4:ee:f5:a5:9f:38:41:b9:6b:66:be:
                    19:a8:e2:f2:cb:44:75:d7:c9:f6:70:a0:bf:e0:b4:
                    8c:94:c5:59:f3:ff:e3:38:85:59:ba:67:c0:25:45:
                    42:41:b9:0d:b6:05:a0:dd:12:b0:84:a2:23:f2:4a:
                    8d:65:e1:0b:52:dd:6c:9b:b9:2e:e0:ce:c5:66:f0:
                    fb:8d:bf:43:e8:83:2d:ce:34:5c:91:a6:89:49:c9:
                    7e:bf:8c:98:95:bc:cf:11:c1:f5:21:75:12:66:dd:
                    60:48:c7:41:e3:77:ad:fc:6e:80:b0:b3:cd:02:3d:
                    cf:be:2b:b1:a5:ad:ba:d9:36:9e:d4:0b:5b:b3:4b:
                    2c:78:82:f5:a9:2b:2a:64:0f:ad:b9:8c:af:d3:84:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B9:E5:4B:A1:05:92:E0:C9:FF:F8:A0:5C:CF:E2:D5:12:3B:C8:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE078542058211F08685DC69762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:82:69:9a:8d:ec:ce:a8:bb:46:e5:6c:d5:e2:b5:bf:b9:04:
         13:1b:c6:1f:6f:eb:c8:f5:15:d3:ed:70:ac:11:c0:74:2a:17:
         49:bb:62:25:ca:49:11:5e:c6:52:5a:86:59:57:b4:6e:29:96:
         b9:89:52:06:21:c9:cc:59:f0:20:6a:3b:bf:2d:91:8d:fd:f8:
         42:3c:45:21:18:aa:94:3f:88:61:0b:b9:f3:90:eb:e1:4e:95:
         ca:69:7c:f8:03:0b:a3:d7:a0:1f:e5:fc:c2:77:63:09:72:b8:
         87:3b:d3:e8:30:2b:63:b1:99:3d:9d:3b:4f:2f:56:10:f7:37:
         8f:c6:6b:8c:b4:53:7a:ca:33:c9:9e:9e:d1:3a:b2:44:c5:a7:
         0a:d6:7c:ef:50:3d:01:33:09:4a:0c:98:59:f3:7b:89:c4:68:
         14:70:e5:62:4f:58:19:53:5d:c2:a2:13:8b:ee:12:e0:0d:9e:
         d9:ab:01:d9:5d:e2:e2:99:83:13:4d:42:39:6e:28:16:f1:eb:
         3d:b4:45:23:9e:f2:6f:43:97:26:4d:14:68:30:14:7c:fb:61:
         cb:4b:53:7b:3c:2f:bc:64:74:47:02:0b:da:8f:b4:5b:3a:7f:
         fe:fd:fe:72:61:27:96:c5:dc:36:fb:3a:3d:4c:c3:ab:a9:e1:
         16:1c:a1:b2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUdKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzIwMTIwMDMxWhcNMjUwODAxMTIwMDMxWjAYMRYw
FAYDVQQDEw02N2RjMDM2Mi0yYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr+IUmvt4vrZgd7ZoFiV3ChjF0eCKc674kWp3GXqGhM5V34gzNzuVE/yk
QiM+Mel4O2g7eoSksEoo0L0bZrDNViH4jfYvfKKaptcHA+1SsqazQsVyPjkDha1E
1XUyxqsNZcuneQAZEQPGD1OkxO71pZ84QblrZr4ZqOLyy0R118n2cKC/4LSMlMVZ
8//jOIVZumfAJUVCQbkNtgWg3RKwhKIj8kqNZeELUt1sm7ku4M7FZvD7jb9D6IMt
zjRckaaJScl+v4yYlbzPEcH1IXUSZt1gSMdB43et/G6AsLPNAj3Pviuxpa262Tae
1Atbs0sseIL1qSsqZA+tuYyv04SUSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB25
5UuhBZLgyf/4oFzP4tUSO8inMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTA3ODU0MjA1ODIxMUYwODY4NURDNjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPGAMA0GCSqGSIb3DQEBCwUA
A4IBAQCsgmmajezOqLtG5WzV4rW/uQQTG8Yfb+vI9RXT7XCsEcB0KhdJu2IlykkR
XsZSWoZZV7RuKZa5iVIGIcnMWfAgaju/LZGN/fhCPEUhGKqUP4hhC7nzkOvhTpXK
aXz4Awuj16Af5fzCd2MJcriHO9PoMCtjsZk9nTtPL1YQ9zePxmuMtFN6yjPJnp7R
OrJExacK1nzvUD0BMwlKDJhZ83uJxGgUcOViT1gZU13CohOL7hLgDZ7ZqwHZXeLi
mYMTTUI5bigW8es9tEUjnvJvQ5cmTRRoMBR8+2HLS1N7PC+8ZHRHAgvaj7RbOn/+
/f5yYSeWxdw2+zo9TMOrqeEWHKGy
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:22 2025 by rpki-client