Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/603C32625DB511EC97DF61A85A40D577.roa
File:                     603C32625DB511EC97DF61A85A40D577.roa (raw, json)
Hash identifier:          Ha3FTiHyxxwIKC0kmynVkJPe9+deriOge21xJozPE+I=
Subject key identifier:   E3:21:80:28:E5:B8:68:D1:EF:98:70:24:50:90:29:04:8D:DC:A4:0E
Certificate issuer:       /CN=F36B2DFEAR/serialNumber=018BC6EB0B22C51D3143CEF08A5F0BAF399AB439
Certificate serial:       04
Authority key identifier: 01:8B:C6:EB:0B:22:C5:1D:31:43:CE:F0:8A:5F:0B:AF:39:9A:B4:39
Authority info access:    rsync://rpki.afrinic.net/repository/arin/AYvG6wsixR0xQ87wil8LrzmatDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/603C32625DB511EC97DF61A85A40D577.roa
Signing time:             Wed 15 Dec 2021 14:43:33 +0000
ROA not before:           Wed 15 Dec 2021 14:43:22 +0000
ROA not after:            Mon 15 Dec 2031 14:43:22 +0000
asID:                     37658
IP address blocks:        45.221.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2DFEAR/serialNumber=018BC6EB0B22C51D3143CEF08A5F0BAF399AB439
        Validity
            Not Before: Dec 15 14:43:22 2021 GMT
            Not After : Dec 15 14:43:22 2031 GMT
        Subject: CN=61b9ff15-7680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:b8:ac:2e:88:80:b7:33:b3:4e:03:99:0c:
                    ac:53:6e:25:9f:0d:c7:c9:ac:eb:68:b9:a9:4a:dc:
                    76:77:23:d3:ea:3e:e5:00:0f:b7:8e:05:ad:5d:4e:
                    87:45:79:3a:35:8e:e6:e4:72:6c:ad:12:f1:26:dc:
                    01:91:db:79:fc:d1:c2:83:7f:79:b6:39:89:70:e7:
                    92:97:ac:43:89:72:d4:0c:f3:56:ba:b6:a2:bd:03:
                    32:27:e9:41:fa:23:2c:71:e1:bd:81:01:13:c0:34:
                    dd:50:0a:76:97:ae:01:5a:87:e3:af:8b:8a:e0:ea:
                    bc:c1:5b:b2:98:8b:df:2e:ad:c6:ca:55:d2:32:7a:
                    21:df:e9:2f:1d:0b:a9:dd:15:4e:6c:45:fe:c7:51:
                    8b:e6:49:75:25:bf:c0:39:ab:8b:fc:fd:3b:96:9d:
                    c4:e0:ad:90:42:13:7a:af:33:cd:0a:91:19:73:a9:
                    5b:10:f0:af:3d:88:5a:8f:da:ef:cf:bc:4d:37:75:
                    02:72:d7:7c:7d:cd:2b:95:82:8c:b6:04:52:2b:89:
                    a9:80:29:a5:4b:6c:a5:ed:45:bd:0c:79:5b:21:46:
                    95:06:a3:50:70:99:10:6d:f8:27:96:81:cc:24:73:
                    fc:dc:03:f7:5f:d9:eb:e4:ce:38:08:ae:ff:75:2a:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:80:28:E5:B8:68:D1:EF:98:70:24:50:90:29:04:8D:DC:A4:0E
            X509v3 Authority Key Identifier:
                keyid:01:8B:C6:EB:0B:22:C5:1D:31:43:CE:F0:8A:5F:0B:AF:39:9A:B4:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/AYvG6wsixR0xQ87wil8LrzmatDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/AYvG6wsixR0xQ87wil8LrzmatDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2DFE/3912A1405DB411EC8234EFA45A40D577/603C32625DB511EC97DF61A85A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:47:7c:c9:c5:64:51:e2:59:40:a7:ca:c6:8e:48:00:25:
         37:3b:39:2e:d9:44:a2:10:2a:43:45:98:10:6c:4f:fb:09:df:
         94:e1:d8:64:96:fe:f9:a8:c1:f2:23:74:cb:53:96:98:9e:49:
         9b:30:ec:68:74:46:b4:5b:24:f0:6d:a7:3a:a7:24:39:7e:a3:
         87:e5:4f:1c:47:e5:06:91:91:fc:88:74:5b:e2:e5:e9:01:6b:
         b5:be:b4:6c:80:b9:65:f4:e1:66:52:c3:9c:20:92:c5:1d:5a:
         20:90:c8:fd:af:d3:9f:12:dc:9a:c1:df:e5:08:0b:af:40:a3:
         1c:fe:98:95:28:a6:e0:77:6f:83:0c:cb:78:46:04:0a:84:14:
         d4:2f:56:28:b2:0d:2a:62:7d:20:a0:ad:b4:cb:1f:43:64:18:
         d9:ec:1f:1c:54:2f:6d:ad:57:00:94:dd:45:89:e2:01:5b:c5:
         62:66:87:50:03:7d:f4:4e:4d:37:be:47:cc:a7:c3:ac:33:6d:
         8f:eb:55:b9:72:52:29:51:9f:a1:dd:32:35:6d:44:ee:c6:94:
         0e:0d:2a:ea:43:0a:84:6c:44:6d:dd:29:3d:88:46:ba:0c:95:
         8e:bf:da:84:b0:3e:8b:14:f3:fb:a0:d2:9f:34:46:98:8a:dc:
         27:11:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----