Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EEE2A2ECA7EC11EFA3C3EB7E762E951A.roa
File:                     EEE2A2ECA7EC11EFA3C3EB7E762E951A.roa (raw, json)
Hash identifier:          3o9isAT3PY+KuHvqWSMoaC5JDhh/ddthSh41cPSSZkw=
Subject key identifier:   C1:9B:8D:79:DE:5D:DB:2D:46:70:42:28:3D:3D:28:58:EE:B1:A4:86
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       12E9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EEE2A2ECA7EC11EFA3C3EB7E762E951A.roa
Signing time:             Thu 21 Nov 2024 09:42:33 +0000
ROA not before:           Thu 21 Nov 2024 09:42:30 +0000
ROA not after:            Sat 21 Nov 2026 09:42:30 +0000
asID:                     62240
IP address blocks:        102.165.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4841 (0x12e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF
        Validity
            Not Before: Nov 21 09:42:30 2024 GMT
            Not After : Nov 21 09:42:30 2026 GMT
        Subject: CN=673f0089-7851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:15:57:fb:d8:3a:c1:ca:66:fd:77:53:3e:
                    1c:48:aa:8a:bc:f4:db:c5:90:ca:5d:15:91:e6:84:
                    90:80:6e:31:a3:00:95:58:16:e7:18:44:9d:a9:89:
                    2e:95:e1:9d:09:58:a4:bd:30:a1:c1:04:18:51:03:
                    f7:bc:e6:67:da:d0:f9:40:f1:da:a9:78:f4:02:a7:
                    d5:aa:c3:f6:48:7c:d7:f2:01:e2:95:95:26:48:c9:
                    84:82:4f:49:6f:e6:4d:0a:c1:79:b4:f0:ff:4b:0c:
                    3a:f6:09:d8:eb:79:eb:5d:34:d9:90:c8:ff:da:bd:
                    19:74:e0:42:09:f2:de:01:ca:df:d0:73:ec:79:cd:
                    c0:6f:5a:24:a1:4f:73:1d:62:ea:5e:98:f5:49:46:
                    05:68:23:da:b7:1c:86:6b:28:08:73:11:f0:ce:b7:
                    f3:c2:b7:92:46:5c:f1:1e:f4:24:dc:0b:04:d4:46:
                    8b:17:af:7d:4c:84:32:95:49:5f:63:8c:dd:ec:4d:
                    8e:66:f0:4f:03:be:14:72:38:85:b9:d0:47:70:03:
                    be:7e:ff:f9:69:12:29:be:db:47:83:37:d7:0e:da:
                    ba:11:27:62:aa:d0:7f:2a:dd:89:a2:5c:c7:dc:ab:
                    82:50:e1:78:5b:bc:8a:bd:cc:38:75:b2:07:61:3f:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9B:8D:79:DE:5D:DB:2D:46:70:42:28:3D:3D:28:58:EE:B1:A4:86
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EEE2A2ECA7EC11EFA3C3EB7E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:5b:1a:7c:d2:b1:be:10:14:27:c2:ef:9e:ee:96:47:e2:91:
         88:1e:40:8e:e0:f6:ec:90:9e:fd:52:34:df:a8:e7:56:4a:e2:
         63:d7:b6:79:3f:40:17:b7:7c:25:13:87:69:2f:16:9c:f6:45:
         fc:40:78:b9:15:e3:80:23:8c:bd:e2:9e:55:53:58:9e:94:4c:
         2d:49:eb:b0:17:a2:67:52:87:d3:6b:08:0e:78:d3:e0:f4:68:
         f8:ea:8a:fa:c3:2b:b7:5f:8d:0e:fa:49:05:43:7e:df:7a:7d:
         7d:02:e0:3d:26:b3:ba:13:f1:a2:f4:2f:f6:36:25:57:ef:fe:
         e5:38:34:bb:ab:a0:3a:36:ae:51:af:2f:19:df:67:5b:8d:46:
         6d:d2:3b:eb:d7:5f:a5:94:c8:14:f1:73:2b:9f:68:4f:c4:d8:
         f7:44:8a:cd:32:bd:54:73:38:03:98:c1:3e:22:31:c6:0f:37:
         1b:cc:ed:4b:4d:d2:bb:b9:9d:45:69:c9:24:c5:8d:c6:c5:ad:
         02:c1:0b:1b:ee:81:f3:b0:4c:68:36:93:c9:07:c7:11:c2:de:
         0c:f2:87:c7:ff:3f:13:9e:53:83:55:32:6c:28:6c:c4:2b:30:
         40:7d:06:b9:4b:37:f4:cf:f6:2b:0f:90:9b:6a:d7:de:56:21:
         8f:0a:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:15:17 2025 by rpki-client