Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/3467C85EB57811EFBB258E50762E951A.roa
File:                     3467C85EB57811EFBB258E50762E951A.roa (raw, json)
Hash identifier:          7B5t76JYb0weJx5foAylkCd79y67MwjACrJXbPrLiGo=
Subject key identifier:   F3:12:38:F4:10:43:8E:0A:4C:5A:1F:A3:47:9C:AE:60:9F:5B:0A:88
Certificate issuer:       /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial:       0D86
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/3467C85EB57811EFBB258E50762E951A.roa
Signing time:             Sun 08 Dec 2024 15:22:15 +0000
ROA not before:           Sun 08 Dec 2024 15:22:11 +0000
ROA not after:            Wed 01 Dec 2027 15:22:11 +0000
asID:                     132839
IP address blocks:        160.124.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3462 (0xd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AR
        Validity
            Not Before: Dec  8 15:22:11 2024 GMT
            Not After : Dec  1 15:22:11 2027 GMT
        Subject: CN=6755b9a7-fae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:1e:f8:e8:cf:5d:7c:79:3a:53:f6:01:39:
                    f8:e7:8a:0e:51:1e:5a:d7:a2:86:e2:b1:46:71:a9:
                    5d:c5:69:c1:3f:ee:64:bf:4e:dc:47:2f:02:f6:aa:
                    0a:d5:13:f5:98:2c:13:fd:4f:86:c0:57:52:82:d4:
                    c7:31:71:39:b5:a2:4c:d2:3a:b0:f8:c0:83:c7:3f:
                    45:61:67:97:15:35:d8:6f:a7:4f:80:1a:31:ef:62:
                    ad:b1:d7:38:2a:41:40:5f:26:a2:96:cf:ab:9d:2d:
                    1f:81:1a:4d:b3:1b:fd:28:95:60:6a:8d:53:64:73:
                    bd:57:c2:c2:04:4d:24:bb:97:a1:3a:f1:e4:84:a9:
                    62:ed:9c:cd:dc:eb:4e:8f:ec:a8:2e:2b:1c:20:92:
                    57:82:8d:d1:75:4e:26:d4:67:ff:e2:77:36:5d:88:
                    d8:c7:5c:4a:92:a7:9d:ca:ea:63:25:f6:02:fb:a6:
                    61:4b:c7:f9:1b:a6:ee:ae:f7:92:d0:24:fe:45:67:
                    fb:ad:d2:1a:13:74:ad:58:41:41:1e:51:9c:12:b4:
                    69:33:89:37:b2:25:62:d7:89:7d:5a:bb:b5:3b:2d:
                    71:06:1b:87:5e:8c:1b:55:dd:df:93:ba:11:a0:c1:
                    57:c6:3f:10:8e:67:e5:a6:d8:f9:c8:92:57:e2:1b:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:12:38:F4:10:43:8E:0A:4C:5A:1F:A3:47:9C:AE:60:9F:5B:0A:88
            X509v3 Authority Key Identifier:
                keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/3467C85EB57811EFBB258E50762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:47:18:b3:dd:78:59:07:db:b8:18:4a:81:68:c9:ed:b5:8b:
         44:9e:4a:2f:f6:be:4d:a7:51:0b:d3:b6:84:3c:2f:be:cf:f8:
         11:3d:36:1b:f4:26:05:b1:ca:dc:4e:d2:60:51:ab:eb:7b:92:
         ea:57:35:5a:cf:3d:27:de:c3:df:3c:84:ca:68:d7:14:85:26:
         ab:bf:d2:82:5b:f3:c6:48:08:e2:31:e4:ce:14:5f:0d:d9:e4:
         e0:59:4e:47:ac:1f:d4:a9:98:89:34:72:d9:5f:41:72:ac:20:
         df:bb:b0:bb:dd:24:02:8a:fa:8d:8f:10:75:cf:fe:45:81:5d:
         9e:07:44:5c:25:cc:a3:a9:a8:3e:44:a3:7f:5e:db:36:8f:a7:
         1a:97:1f:ef:18:d5:f5:7b:19:ab:f5:82:ba:00:59:7f:0c:c5:
         0b:aa:32:7f:21:48:7d:b7:fb:ea:b2:67:42:54:7f:c8:68:52:
         53:8c:75:6b:4c:1f:07:bf:1a:0f:ec:aa:66:88:f2:37:07:39:
         c9:26:b2:74:33:00:21:89:a2:34:74:4c:a3:30:6f:f4:94:ac:
         c2:ea:f0:7b:e3:0f:21:d6:53:82:7d:5d:17:7b:11:fa:6b:70:
         fb:14:01:6a:6a:3f:a9:32:7f:9c:12:f5:8c:f3:27:1a:12:2d:
         cb:8b:55:79
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYyQzNBUjExMC8GA1UEBRMoNEJCMDMyNjFGMTREMDRCMDBCMjZCMjk3MjVFNDIw
RUU1MzlFRkFDMTAeFw0yNDEyMDgxNTIyMTFaFw0yNzEyMDExNTIyMTFaMBgxFjAU
BgNVBAMTDTY3NTViOWE3LWZhZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzBx746M9dfHk6U/YBOfjnig5RHlrXoobisUZxqV3FacE/7mS/TtxHLwL2
qgrVE/WYLBP9T4bAV1KC1McxcTm1okzSOrD4wIPHP0VhZ5cVNdhvp0+AGjHvYq2x
1zgqQUBfJqKWz6udLR+BGk2zG/0olWBqjVNkc71XwsIETSS7l6E68eSEqWLtnM3c
606P7KguKxwgkleCjdF1TibUZ//idzZdiNjHXEqSp53K6mMl9gL7pmFLx/kbpu6u
95LQJP5FZ/ut0hoTdK1YQUEeUZwStGkziTeyJWLXiX1au7U7LXEGG4dejBtV3d+T
uhGgwVfGPxCOZ+Wm2PnIklfiG8LzAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU8xI4
9BBDjgpMWh+jR5yuYJ9bCogwHwYDVR0jBBgwFoAUS7AyYfFNBLALJrKXJeQg7lOe
+sEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MkMzLzgwQTVCQUVDNTU2OTExRTU5QjlBQUE4MUY4QUVBMjI4L1M3QXlZ
ZkZOQkxBTEpyS1hKZVFnN2xPZS1zRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1M3QXlZZkZOQkxBTEpyS1hKZVFnN2xPZS1zRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkY2MkMzLzgwQTVCQUVDNTU2OTExRTU5QjlBQUE4MUY4QUVB
MjI4LzM0NjdDODVFQjU3ODExRUZCQjI1OEU1MDc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCgfDANBgkqhkiG9w0BAQsFAAOC
AQEAQEcYs914WQfbuBhKgWjJ7bWLRJ5KL/a+TadRC9O2hDwvvs/4ET02G/QmBbHK
3E7SYFGr63uS6lc1Ws89J97D3zyEymjXFIUmq7/SglvzxkgI4jHkzhRfDdnk4FlO
R6wf1KmYiTRy2V9Bcqwg37uwu90kAor6jY8Qdc/+RYFdngdEXCXMo6moPkSjf17b
No+nGpcf7xjV9XsZq/WCugBZfwzFC6oyfyFIfbf76rJnQlR/yGhSU4x1a0wfB78a
D+yqZojyNwc5ySaydDMAIYmiNHRMozBv9JSswurwe+MPIdZTgn1dF3sR+mtw+xQB
amo/qTJ/nBL1jPMnGhIty4tVeQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:12 2025 by rpki-client