Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDE72752F38E11EF80C52881762E951A.roa
File:                     FDE72752F38E11EF80C52881762E951A.roa (raw, json)
Hash identifier:          jZIyJIt0DnMMh9It06qUIadNm0N2qUv4E4KzfQrOeZc=
Subject key identifier:   17:F6:C5:FF:42:4E:CE:14:B8:D8:DF:41:B9:EA:F5:E4:8A:67:A6:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       012E70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDE72752F38E11EF80C52881762E951A.roa
Signing time:             Tue 25 Feb 2025 15:41:34 +0000
ROA not before:           Tue 25 Feb 2025 15:41:30 +0000
ROA not after:            Wed 09 Apr 2025 15:41:30 +0000
asID:                     63139
IP address blocks:        45.197.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77424 (0x12e70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Feb 25 15:41:30 2025 GMT
            Not After : Apr  9 15:41:30 2025 GMT
        Subject: CN=67bde4ae-25d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:1e:6c:94:f0:1b:92:fa:31:59:32:c7:e4:
                    d5:fa:5e:d6:45:c4:80:c0:43:2e:41:50:db:bf:69:
                    73:a6:dd:bf:78:0a:eb:71:ad:d3:4e:7d:f1:47:2c:
                    48:f2:05:7d:f5:ac:31:4a:85:4b:09:9f:7d:aa:35:
                    4d:89:04:f6:10:5e:7e:6f:b7:1f:d1:47:3a:ee:b6:
                    da:83:f8:0b:b4:7a:60:3a:50:06:ce:21:5f:6b:5d:
                    a3:5c:20:5f:36:cd:22:b2:1b:37:8d:1f:fb:a2:32:
                    78:85:a3:d7:1d:96:67:18:77:75:7a:50:08:28:d7:
                    7f:5b:e1:d8:e9:39:22:af:d9:28:28:2e:e4:19:6e:
                    34:58:b8:c7:68:a9:0e:2e:4b:34:4b:68:df:f5:bd:
                    28:2b:b3:6c:c3:60:2b:6a:a5:e8:45:8f:06:4b:c1:
                    25:b7:c2:bb:3e:c0:95:74:b8:40:94:d6:c7:6e:07:
                    bd:02:4b:bb:69:1a:f2:ae:ba:dd:d7:50:19:7f:cc:
                    2f:b4:d5:22:31:6c:dd:50:67:6b:23:6b:9d:4c:a2:
                    b2:b8:9a:f3:7d:8b:93:62:3d:e9:01:3f:69:68:da:
                    c0:a0:0f:8a:4c:05:f6:58:8e:66:bd:c9:1f:0c:22:
                    7e:7b:a6:69:3f:1e:5b:1e:6f:ad:12:3c:a4:50:7e:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:C5:FF:42:4E:CE:14:B8:D8:DF:41:B9:EA:F5:E4:8A:67:A6:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDE72752F38E11EF80C52881762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:35:35:60:4b:a5:29:95:7f:b2:b4:81:b2:dd:97:73:74:
         0d:71:f3:bf:4e:ee:0e:2c:c3:e5:9b:32:8d:1f:19:26:2d:b6:
         a3:08:ad:33:0e:38:a0:cb:a8:e2:2f:1b:91:3c:6a:21:95:a2:
         34:2e:b8:fc:75:f6:38:6e:f2:8f:c8:14:8d:86:05:21:eb:4d:
         5c:b1:0c:60:63:2b:b0:e1:c0:40:f3:2c:7e:b7:da:d2:17:11:
         04:fb:6d:1b:62:89:c3:aa:4c:af:ae:f8:9a:78:32:70:ce:e3:
         28:17:34:7b:2c:bc:00:3e:d9:2a:2e:0b:2c:5a:0f:7b:2f:4a:
         e7:72:34:45:2d:a5:33:d2:f4:01:e1:45:05:25:f3:06:e6:ee:
         25:f3:20:2f:9e:22:41:c1:38:d2:1f:71:b1:87:df:79:96:cf:
         3f:ce:3c:6a:b1:47:5b:09:08:b1:b3:63:8e:3a:ad:d4:ef:eb:
         71:52:5b:7a:17:97:79:df:cb:bd:cb:f7:2d:5e:8c:52:77:4a:
         57:13:3c:29:8d:65:ac:53:f2:0b:7f:86:94:c1:8f:cd:6a:90:
         a8:f6:61:f1:eb:8b:b3:ff:dd:99:e9:35:71:d5:3f:a3:0f:fc:
         46:b3:64:60:e9:e2:28:42:18:d3:3a:0b:b5:a8:6d:ed:9e:23:
         9e:d9:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:22 2025 by rpki-client