Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36940B5/52E9A7E0641F11E89062E828F8AEA228/9D2FB186642011E8986FC72AF8AEA228.roa
File:                     9D2FB186642011E8986FC72AF8AEA228.roa (raw, json)
Hash identifier:          oaOUhie/iyccY/EszAajR6Qb3Z1DYswXsQDRtZ9k2Mk=
Subject key identifier:   A1:36:87:60:72:30:92:D2:82:2F:50:D1:49:F1:15:BD:50:22:91:60
Certificate issuer:       /CN=F36940B5AR/serialNumber=42EBCB0F1CC606C2D26FFC7AC1568BE0679BBF14
Certificate serial:       02
Authority key identifier: 42:EB:CB:0F:1C:C6:06:C2:D2:6F:FC:7A:C1:56:8B:E0:67:9B:BF:14
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QuvLDxzGBsLSb_x6wVaL4GebvxQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36940B5/52E9A7E0641F11E89062E828F8AEA228/9D2FB186642011E8986FC72AF8AEA228.roa
Signing time:             Wed 30 May 2018 15:46:28 +0000
ROA not before:           Wed 30 May 2018 15:46:11 +0000
ROA not after:            Tue 30 May 2028 15:46:11 +0000
asID:                     32437
IP address blocks:        160.119.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36940B5AR/serialNumber=42EBCB0F1CC606C2D26FFC7AC1568BE0679BBF14
        Validity
            Not Before: May 30 15:46:11 2018 GMT
            Not After : May 30 15:46:11 2028 GMT
        Subject: CN=5b0ec753-249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:e1:23:dc:b3:56:df:1e:8e:0f:d4:58:5a:
                    90:0d:fa:f7:64:1b:b4:cf:71:1d:03:34:4b:4c:88:
                    4b:38:1c:7a:aa:7b:8b:f4:d5:74:68:65:70:66:d9:
                    83:8f:e3:f6:67:aa:43:e1:35:93:da:07:95:3d:ed:
                    6c:66:0c:3c:2d:25:e5:07:c2:8e:c9:84:e6:05:82:
                    31:05:16:22:bd:3c:95:85:b5:e5:e2:0b:ea:ea:58:
                    6f:8d:8c:6b:3e:0c:d9:fb:c3:d7:30:eb:07:36:18:
                    50:b7:9b:98:53:a8:fc:01:7e:bc:8f:7c:91:e3:d6:
                    b0:72:37:79:ee:ce:67:83:e2:ce:91:18:fa:ba:96:
                    1d:c6:e9:54:31:39:f1:8c:f4:00:91:3f:07:d0:2f:
                    d5:dd:f1:03:bf:8b:b3:62:65:0f:a7:b9:ec:1a:a3:
                    3a:fb:8f:45:3a:da:1f:46:70:22:33:ab:49:a1:bd:
                    75:95:a7:62:ec:29:55:44:45:4e:59:66:d8:90:3c:
                    dc:d9:4a:96:a7:08:3d:10:98:63:cd:f1:95:44:5d:
                    b8:05:dd:29:b3:81:96:2d:ba:02:b0:ad:72:fa:6b:
                    e8:0d:a2:0a:cb:5c:98:81:a3:48:a5:14:73:f3:b2:
                    da:67:8d:f2:26:d4:f0:1d:78:64:83:38:59:4b:44:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:87:60:72:30:92:D2:82:2F:50:D1:49:F1:15:BD:50:22:91:60
            X509v3 Authority Key Identifier:
                keyid:42:EB:CB:0F:1C:C6:06:C2:D2:6F:FC:7A:C1:56:8B:E0:67:9B:BF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/52E9A7E0641F11E89062E828F8AEA228/QuvLDxzGBsLSb_x6wVaL4GebvxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QuvLDxzGBsLSb_x6wVaL4GebvxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/52E9A7E0641F11E89062E828F8AEA228/9D2FB186642011E8986FC72AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:92:e6:75:78:cf:3b:d1:46:9f:85:d6:99:92:3b:9d:6e:
         d1:03:c0:52:33:97:8e:82:ab:d6:9f:41:3a:db:e3:6a:77:b4:
         39:42:a8:a7:f9:dd:09:3e:ae:a9:78:46:16:1d:b1:7b:de:ba:
         9f:28:76:cb:ad:ca:b2:91:6e:d0:be:c2:64:c3:16:0a:0f:45:
         85:85:36:1b:dc:31:e5:97:aa:b9:64:8e:e3:4f:fa:b5:64:b7:
         6d:b5:68:dd:40:7a:72:a2:d6:be:d0:8b:17:96:ae:63:71:6f:
         2f:b7:ab:c7:de:f7:48:26:c1:54:a1:ea:fd:27:b7:b7:b8:d6:
         88:9b:de:15:03:7b:07:4c:79:39:2e:8f:35:33:b9:92:b2:6d:
         88:db:10:ab:64:32:a0:cd:9c:5d:7b:cb:71:31:06:fa:d5:76:
         94:ac:4d:76:09:ee:cf:7f:d5:80:15:74:73:64:11:2c:60:d1:
         46:68:e4:7d:39:a8:d4:ff:23:0a:34:54:dc:73:b9:52:98:8c:
         a1:c8:34:13:76:37:95:ea:c8:7f:b8:2e:1d:7d:8a:be:82:22:
         5d:43:4c:b9:ad:1f:f8:98:75:bb:72:f5:49:be:44:aa:77:70:
         51:a2:4c:ed:5a:b4:f9:29:3d:cd:28:62:b5:d6:f7:18:41:16:
         e0:2c:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org