Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/22DB7C2C343B11ED93BC198DF1222468.roa
File:                     22DB7C2C343B11ED93BC198DF1222468.roa (raw, json)
Hash identifier:          MYN14FUjceVL/wAPb2hSaQa3Lgxp0KPz1gwNzEYrDaM=
Subject key identifier:   1F:B0:F2:50:FF:45:13:49:85:AD:ED:EF:54:7F:E3:7F:B4:D2:1A:9D
Certificate issuer:       /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial:       02
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/22DB7C2C343B11ED93BC198DF1222468.roa
Signing time:             Wed 14 Sep 2022 14:40:11 +0000
ROA not before:           Wed 14 Sep 2022 14:40:05 +0000
ROA not after:            Wed 14 Jan 2032 14:40:05 +0000
asID:                     327950
IP address blocks:        165.90.192.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
        Validity
            Not Before: Sep 14 14:40:05 2022 GMT
            Not After : Jan 14 14:40:05 2032 GMT
        Subject: CN=6321e7cb-3039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:d3:81:80:03:f2:8f:72:b6:ee:ae:f9:dd:
                    ff:cb:b6:85:b9:d3:1c:69:c3:52:75:86:a2:4f:19:
                    99:b5:8c:b6:79:31:02:c0:66:70:0a:fe:41:69:d3:
                    e4:b4:f0:f6:09:c4:61:a7:7a:0f:ba:a1:db:cb:17:
                    20:1a:61:51:13:e8:58:29:dd:a3:6e:18:f4:d2:72:
                    26:fd:f5:4a:3b:42:05:78:37:f0:54:2c:b3:aa:19:
                    00:3c:50:bb:ff:26:84:3f:48:41:e9:69:81:a1:48:
                    2d:66:fc:02:55:d6:94:08:f4:81:d1:20:e7:af:12:
                    ef:75:41:42:b9:99:70:65:a2:7f:e2:11:2f:a7:0e:
                    4d:d5:f6:94:ec:6c:5b:36:e6:c5:52:83:b7:ef:c8:
                    e0:6d:76:0e:68:63:6b:59:61:7a:67:05:71:57:cf:
                    8d:ef:17:b4:9d:c0:5e:3c:45:1e:be:37:d6:13:c1:
                    d3:2d:56:8a:4d:46:a3:49:69:e2:88:12:8f:a7:be:
                    8a:0f:42:a8:ea:0a:e6:b9:bb:be:87:25:25:81:c6:
                    91:e3:d1:5e:04:71:2a:f6:f2:f8:6c:27:7c:95:c0:
                    fb:82:e1:f9:28:51:83:42:a9:64:75:37:dc:a5:98:
                    3e:dc:68:59:d5:d7:9f:72:58:55:4b:80:31:29:2f:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B0:F2:50:FF:45:13:49:85:AD:ED:EF:54:7F:E3:7F:B4:D2:1A:9D
            X509v3 Authority Key Identifier:
                keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/22DB7C2C343B11ED93BC198DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:95:ea:02:7a:a4:d8:ff:f5:df:53:4c:d5:bc:e9:fd:ea:
         98:3e:3d:17:4f:f0:89:ee:e7:ff:67:f3:66:06:44:f6:45:f7:
         58:f7:81:6a:cc:3b:2e:a4:61:29:87:07:de:e3:96:72:c1:94:
         34:1d:dc:84:b6:e2:0c:eb:fb:6e:bc:a1:33:4d:66:5d:4a:db:
         bc:f7:69:01:7b:12:df:00:11:52:2d:31:8b:19:68:1f:52:2f:
         8f:71:b5:46:be:f8:69:cd:1a:26:3a:28:1a:ce:1c:c1:08:76:
         4a:d6:67:a1:e4:6e:13:82:4c:09:65:91:3c:70:f0:65:66:08:
         6b:f1:94:1c:1b:75:03:30:67:7e:0f:1e:62:93:d8:b4:a1:10:
         f2:2e:70:37:02:21:23:e3:84:49:0d:c9:62:4b:54:1a:96:07:
         b5:58:17:88:9c:e4:b0:22:b1:7b:5d:9f:34:95:63:b5:2b:9d:
         c8:e9:cc:c5:8d:8b:68:79:e6:a2:ce:43:1c:6a:d0:ba:2f:e7:
         c8:cd:ba:50:6f:f5:6b:d8:06:26:b6:dd:7d:94:7f:d1:6b:1b:
         4a:0d:c3:75:8f:3c:31:e6:0e:21:58:df:1f:d9:30:38:a5:0f:
         85:ed:c8:95:b1:4e:4b:8b:f3:73:05:b7:48:72:80:2a:8c:dd:
         a6:f3:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:33:25 2024 by rpki-client on console-ams.rpki-client.org