Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/4E255618BFE511EFBA001F5D762E951A.roa
File:                     4E255618BFE511EFBA001F5D762E951A.roa (raw, json)
Hash identifier:          GmE395o260oALy2AawTNg8RfaRH2kAiHKRjO5vBbEiw=
Subject key identifier:   47:61:80:82:6D:CD:16:6E:4C:2B:EB:78:85:DC:29:02:0E:39:7E:F0
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       056A
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/4E255618BFE511EFBA001F5D762E951A.roa
Signing time:             Sat 21 Dec 2024 21:48:25 +0000
ROA not before:           Sat 21 Dec 2024 21:48:20 +0000
ROA not after:            Fri 21 Mar 2025 21:48:20 +0000
asID:                     55154
IP address blocks:        196.44.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF
        Validity
            Not Before: Dec 21 21:48:20 2024 GMT
            Not After : Mar 21 21:48:20 2025 GMT
        Subject: CN=676737a9-c313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:8c:c5:2a:1a:44:48:34:83:6a:ce:4c:bf:
                    d5:82:8a:0b:85:e1:eb:cb:23:8a:d9:cf:2c:5f:32:
                    80:ae:64:27:5b:69:36:03:2d:3c:c2:5c:a6:36:57:
                    ae:24:6b:41:78:bf:e4:d7:65:50:e4:c7:41:79:a2:
                    00:d0:2e:f3:c7:88:2b:e1:6e:12:36:c4:bc:9f:7a:
                    5f:1d:15:76:02:e4:97:a7:b3:5b:d2:fc:0d:bb:92:
                    99:17:67:ed:3e:df:96:69:76:fb:06:8d:d1:b2:8e:
                    07:f5:ad:88:84:0d:9d:7a:23:4c:20:7f:2c:b2:14:
                    a4:3b:73:fb:45:dd:29:d8:3b:fb:4b:06:ef:60:3b:
                    85:01:d4:88:de:a0:a1:5f:9d:cf:4f:a5:12:13:d2:
                    30:47:b5:54:10:5e:78:5e:f4:b5:5d:b6:f1:c5:0b:
                    08:40:24:ae:e8:0f:09:02:5a:c9:5d:33:56:bc:79:
                    a9:e5:91:04:7b:83:f6:74:cd:37:d0:43:c9:c8:f0:
                    0b:e2:cb:93:49:2d:82:2c:35:c5:21:bb:b1:b8:a0:
                    07:60:fd:00:c5:8b:6a:f7:38:94:95:e0:a4:e2:85:
                    99:65:06:42:7a:04:02:b0:9e:91:7c:ff:76:6e:67:
                    0f:bd:a8:d8:07:1c:5a:fb:84:6e:43:ce:9d:cd:ef:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:61:80:82:6D:CD:16:6E:4C:2B:EB:78:85:DC:29:02:0E:39:7E:F0
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/4E255618BFE511EFBA001F5D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:ad:6c:f3:f0:c3:be:bb:00:8e:b0:83:3c:4f:53:1a:80:
         09:69:ae:fc:d2:0b:a0:e1:a1:8a:da:70:8e:46:b5:2a:03:49:
         c3:f1:ae:bd:74:62:f3:2f:e4:77:75:14:94:a8:74:fd:92:19:
         d1:06:8f:52:b0:d2:49:d9:c6:06:1f:86:98:a9:cb:2a:e5:40:
         2d:f3:8c:53:ef:61:1a:71:c9:1b:b0:7c:70:2a:c8:4c:df:d7:
         7e:6a:89:fa:61:21:03:e8:ba:2b:70:9a:02:98:30:53:b5:af:
         3c:62:61:51:4d:5d:3a:81:9a:d2:59:8d:22:a2:da:79:bd:62:
         86:9e:53:d4:08:55:d8:df:32:fa:19:fd:ed:63:62:d5:09:95:
         94:a0:7b:9c:01:8c:b4:2d:ff:20:90:22:c0:ca:3f:41:e3:41:
         60:01:b6:87:66:55:fa:7e:40:6a:aa:a8:99:63:01:75:24:06:
         09:64:c9:d8:79:55:36:9f:5f:cc:3a:40:7b:8e:ed:61:c6:ba:
         c3:11:6e:61:39:76:af:6a:54:6b:8d:6b:9d:03:a1:7f:ba:8e:
         e3:ca:f6:16:06:9d:89:ce:af:09:6f:5a:ef:f4:2d:e5:39:38:
         12:a1:c4:b5:5c:88:3d:20:c3:8d:fb:95:b0:f3:b3:0d:90:9b:
         96:76:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:44 2025 by rpki-client