Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/CC426D644A6811ED998C38A0F1222468.roa
File:                     CC426D644A6811ED998C38A0F1222468.roa (raw, json)
Hash identifier:          PdvAaa+zljWU0E2zdiBqzyA8HwzWykQR3zqT/Re871s=
Subject key identifier:   92:D3:38:F6:BA:41:14:7E:75:48:EC:9F:E3:64:B5:E3:79:D4:08:28
Certificate issuer:       /CN=F36B24EBAF/serialNumber=210144AD02258D7A5D11225BFD9981D981869B7E
Certificate serial:       08
Authority key identifier: 21:01:44:AD:02:25:8D:7A:5D:11:22:5B:FD:99:81:D9:81:86:9B:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IQFErQIljXpdESJb_ZmB2YGGm34.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/CC426D644A6811ED998C38A0F1222468.roa
Signing time:             Wed 12 Oct 2022 20:02:28 +0000
ROA not before:           Wed 12 Oct 2022 20:02:25 +0000
ROA not after:            Sun 12 Oct 2025 20:02:25 +0000
asID:                     328785
IP address blocks:        102.215.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B24EBAF/serialNumber=210144AD02258D7A5D11225BFD9981D981869B7E
        Validity
            Not Before: Oct 12 20:02:25 2022 GMT
            Not After : Oct 12 20:02:25 2025 GMT
        Subject: CN=63471d54-1552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:01:8c:f0:9c:18:9e:9c:75:2b:a6:80:06:
                    f9:71:52:ae:eb:46:bf:1e:4a:0b:aa:ef:8d:66:bc:
                    35:1b:42:11:57:e8:5a:c4:73:db:ed:2f:6b:5d:bb:
                    2b:25:39:e7:2a:fc:95:24:60:05:f0:95:39:1c:33:
                    fb:51:b7:67:c6:c8:d9:41:29:a1:ee:96:13:bc:b7:
                    3b:05:6a:69:4d:6d:78:04:dc:a1:00:ed:a5:02:2d:
                    5a:ee:6e:32:07:66:08:87:a6:01:0c:35:1b:49:a2:
                    cf:58:80:fa:38:76:0f:e0:36:46:e5:c3:2e:36:09:
                    c6:3a:b1:03:9e:53:fb:f2:93:03:db:85:d1:c6:2c:
                    2f:76:49:07:77:63:ed:ba:71:aa:ba:cf:e5:da:f7:
                    1b:b3:36:f9:ef:1c:97:3e:29:6c:c8:11:ae:50:d4:
                    34:9b:9a:95:b9:65:51:b3:b5:dc:b9:1b:b4:cb:8a:
                    62:2f:9e:6b:fb:3f:14:4b:4b:32:62:ba:82:09:92:
                    29:4f:bb:a7:fb:96:67:ea:dd:c4:42:a7:4b:23:3a:
                    23:4f:c9:56:70:f3:5a:24:b6:c6:f0:72:37:6b:36:
                    d5:57:f5:ad:80:bc:43:bd:f2:51:b4:f0:26:04:d4:
                    64:d9:94:5b:57:c2:14:23:92:a9:bd:21:c6:3d:59:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D3:38:F6:BA:41:14:7E:75:48:EC:9F:E3:64:B5:E3:79:D4:08:28
            X509v3 Authority Key Identifier:
                keyid:21:01:44:AD:02:25:8D:7A:5D:11:22:5B:FD:99:81:D9:81:86:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/IQFErQIljXpdESJb_ZmB2YGGm34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IQFErQIljXpdESJb_ZmB2YGGm34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B24EB/5AE7461E4A6611ED9487FE99F1222468/CC426D644A6811ED998C38A0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:a7:6c:ca:7d:e6:e0:27:eb:f4:90:f0:06:da:ad:b1:8b:8a:
         ed:f9:04:4c:65:1a:6f:1d:54:52:77:c9:e5:04:33:93:a9:39:
         bd:93:69:9c:62:6e:13:f9:69:12:ea:80:4b:8c:8b:a2:e6:0e:
         5b:8c:c2:47:7e:bb:03:0d:54:60:f3:8a:f7:de:f0:c0:cd:12:
         e4:ea:fb:51:84:46:e3:5f:67:9f:2d:d0:73:bc:ac:83:2d:6c:
         96:99:bb:dd:46:34:13:9d:07:99:c7:53:c0:dd:02:52:3f:df:
         5e:1c:4b:96:b9:8e:50:18:16:b1:d2:43:08:4c:19:31:c3:a0:
         64:97:74:88:3d:69:ca:b7:75:42:eb:b6:83:3d:e2:b2:80:10:
         03:34:3b:86:47:68:85:50:b7:24:73:ca:83:e6:48:db:ca:2b:
         d0:1f:96:ba:ac:d5:65:d2:43:02:f0:84:ff:12:8c:22:d0:cb:
         e9:ab:44:0e:69:0c:0c:8c:a0:f9:9a:1b:b4:f2:70:9c:f6:3d:
         1b:c6:0e:bc:92:11:0a:5f:8d:4b:67:df:d1:1e:ae:5d:d2:e8:
         bd:1f:07:15:37:d9:ae:46:b7:45:1b:9b:2b:b6:5a:6c:21:76:
         ac:7c:28:eb:f3:fd:8e:2c:5b:38:22:10:f1:55:12:be:6b:66:
         d8:bd:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org