Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88840C60F40A11EF97B26A52762E951A.roa
File:                     88840C60F40A11EF97B26A52762E951A.roa (raw, json)
Hash identifier:          ImezNDdyed1KGl4r20adxOzHBMVisU7oatvesJzO0NY=
Subject key identifier:   08:EF:BD:6A:C5:97:B5:CB:00:F9:22:1C:1C:74:76:8E:E1:60:8A:56
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       13EE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88840C60F40A11EF97B26A52762E951A.roa
Signing time:             Wed 26 Feb 2025 06:25:55 +0000
ROA not before:           Wed 26 Feb 2025 06:25:51 +0000
ROA not after:            Fri 26 Feb 2027 06:25:51 +0000
asID:                     834
IP address blocks:        102.129.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5102 (0x13ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF
        Validity
            Not Before: Feb 26 06:25:51 2025 GMT
            Not After : Feb 26 06:25:51 2027 GMT
        Subject: CN=67beb3f3-7018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:5c:12:74:b2:9f:b8:28:6d:07:28:54:20:
                    11:e5:01:ea:e5:69:41:be:8b:90:dd:26:11:4f:d7:
                    8b:a6:25:ff:4d:ab:2b:b8:1c:47:33:5d:6c:25:ac:
                    31:ae:e7:bb:49:73:68:12:f4:64:a3:39:fb:e4:56:
                    54:6d:82:b8:40:c1:1f:47:01:71:06:02:b5:df:ab:
                    05:5f:f5:d7:c7:ba:9c:17:36:b7:79:ba:81:c9:1d:
                    fb:17:03:0a:38:c7:f5:ff:ea:a7:52:e0:3d:e7:f1:
                    d3:0a:58:0e:b2:14:bb:5d:57:8e:ab:29:b0:62:a1:
                    32:c7:0d:fc:9e:4b:b1:34:13:59:83:71:ce:0f:fd:
                    1f:52:8a:69:5b:8a:e3:7d:fa:77:55:60:8b:62:eb:
                    84:52:ef:c3:61:a3:37:5e:9a:44:17:4c:03:1a:3a:
                    8d:18:2c:a6:4b:49:be:22:1f:b5:3b:17:16:8f:e4:
                    bb:46:46:db:c7:ac:85:32:f9:7a:fa:0a:a3:81:05:
                    cc:6f:95:64:d3:2c:d9:38:8d:70:d8:e1:27:49:46:
                    91:f7:63:4a:31:b3:1c:26:c8:db:be:3f:d5:26:44:
                    0f:e6:a4:97:58:b3:a7:a7:de:26:40:9a:b9:3a:d9:
                    c2:a6:c1:b2:e4:db:dd:98:20:f2:7b:3a:70:b2:a7:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:BD:6A:C5:97:B5:CB:00:F9:22:1C:1C:74:76:8E:E1:60:8A:56
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/88840C60F40A11EF97B26A52762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:9e:8a:61:be:f5:1c:df:ab:c4:76:bd:27:f1:e7:57:47:
         c5:d2:08:f2:72:3c:8d:c9:06:34:7d:70:a9:07:e8:11:57:04:
         20:02:90:2d:22:05:ec:8a:ff:b7:d4:89:c3:5e:84:56:76:c2:
         89:a2:f2:38:bf:b5:76:55:3f:2a:6b:6a:4b:d4:ee:34:26:e8:
         b8:1a:6c:67:f5:6a:bd:bf:0f:54:d1:b1:88:66:4f:5c:3d:ef:
         35:1e:33:22:71:d0:30:14:5a:9c:24:4d:71:8d:3f:26:8c:a2:
         39:23:57:fb:c2:a3:46:f6:b4:32:98:9c:de:f4:5a:cc:8b:99:
         86:ac:8f:d4:e3:85:7c:ca:11:f1:35:bf:df:9d:96:f6:06:bf:
         a6:c7:ac:4f:9f:45:68:31:37:75:dc:85:f4:22:12:e4:7f:58:
         ce:33:42:29:e3:6e:50:2e:8e:89:b1:1b:29:9a:7b:c0:a2:4e:
         50:74:1d:d5:b6:1f:d0:8c:94:01:0a:f5:9c:77:f5:70:d8:67:
         17:4e:fd:76:36:41:cd:a2:10:77:f8:0c:cc:21:18:69:b0:30:
         c9:4d:df:2b:ab:12:7b:b7:8d:51:3d:15:26:c8:54:c4:fc:8b:
         71:8e:b1:45:a8:0f:44:44:ab:a6:9c:45:83:92:1c:de:64:22:
         cf:ac:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:48:11 2025 by rpki-client