Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE29614F2DC11EFBD493048762E951A.roa
File:                     FCE29614F2DC11EFBD493048762E951A.roa (raw, json)
Hash identifier:          HIGkgl8wL5xMnfKjNUYFzcNtw3Ljt39AuczfJc4X/QE=
Subject key identifier:   BA:24:B0:B4:6B:48:03:18:C9:D9:5A:9D:D3:16:F1:C0:A5:E8:A6:39
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       012D44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE29614F2DC11EFBD493048762E951A.roa
Signing time:             Mon 24 Feb 2025 18:27:22 +0000
ROA not before:           Mon 24 Feb 2025 18:27:18 +0000
ROA not after:            Sat 05 Apr 2025 18:27:18 +0000
asID:                     42831
IP address blocks:        45.195.82.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77124 (0x12d44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 24 18:27:18 2025 GMT
            Not After : Apr  5 18:27:18 2025 GMT
        Subject: CN=67bcba0a-73bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:34:12:6c:e0:95:70:19:60:0a:1e:5b:92:
                    59:62:24:85:6b:66:98:df:92:ef:a8:db:09:b0:c7:
                    64:ee:89:c5:fc:b7:c1:38:f3:a5:48:58:84:22:90:
                    2f:41:64:0f:12:8f:cc:a6:e2:c0:ca:3d:a6:cf:e6:
                    d1:14:75:b1:57:fd:ed:99:b2:50:f5:46:6b:59:80:
                    9f:01:57:99:2d:74:b5:25:3a:fd:c9:56:54:47:ed:
                    31:a4:e0:dc:54:26:90:bd:2c:a0:52:9b:36:39:43:
                    1e:4a:fa:0f:2e:0a:c2:fa:77:db:3e:da:7a:ea:38:
                    ed:0b:3d:e4:ef:30:53:05:e4:a4:57:b6:e8:55:f6:
                    17:d3:6d:93:fa:a9:ae:0a:74:d6:0b:43:29:e6:4f:
                    4e:50:78:aa:41:2f:86:85:86:55:d7:23:64:22:ee:
                    7b:88:05:4b:7f:aa:ea:a7:69:da:73:e8:32:77:56:
                    12:4b:08:15:d7:4e:95:c8:32:2e:f5:1c:0d:13:68:
                    88:65:73:4a:a6:e6:9b:ae:2c:f9:02:2e:36:72:8f:
                    2b:7f:79:ba:92:d6:b6:b9:9c:da:2a:7f:16:8e:70:
                    dc:36:85:d6:88:b2:da:d6:37:03:6b:72:b2:4c:0b:
                    54:04:1a:a4:86:43:01:3f:60:35:a4:48:71:4a:c3:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:B0:B4:6B:48:03:18:C9:D9:5A:9D:D3:16:F1:C0:A5:E8:A6:39
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE29614F2DC11EFBD493048762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:ab:4e:51:62:e3:99:2c:e8:6d:df:24:5a:0c:bf:3a:81:
         9b:00:de:1f:93:be:fc:a3:eb:55:17:6d:03:af:17:cb:cc:ca:
         ee:4c:a5:0e:7c:16:2f:75:29:29:7b:15:fb:e4:99:83:19:76:
         e9:b5:3b:d4:2e:6b:37:91:e3:e0:3a:ff:23:37:ae:40:a2:16:
         9a:65:fc:6b:60:3c:cc:29:25:f4:ec:12:a2:c6:ea:88:4d:0d:
         6e:8a:6c:c4:0a:30:45:d3:61:13:64:db:29:64:93:0a:96:a3:
         8c:cc:c3:a3:44:9e:37:6b:0a:95:fb:c0:75:2c:8a:11:9d:79:
         cb:40:08:e5:a0:66:8e:f6:d3:2a:c6:40:7a:7c:4c:4a:3d:a7:
         ae:70:82:de:b1:e6:ab:8a:db:9c:07:ea:d9:a6:11:c8:ba:3d:
         5a:16:4a:3f:f5:1d:69:16:7f:0a:7d:8f:82:39:7b:3a:59:70:
         c2:8b:86:c7:0c:b4:b2:86:3c:00:76:c5:5c:e6:34:7a:1b:20:
         0a:02:30:19:83:5e:56:72:e0:3c:70:f7:4b:14:3e:77:74:13:
         59:a1:57:e4:4b:cc:94:9c:f7:f0:81:2f:2e:69:62:ad:47:e2:
         8d:c1:81:de:8e:ef:61:5d:83:50:ad:a0:f2:4e:35:18:47:f6:
         b3:30:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:04 2025 by rpki-client