Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ADA0722EA8BA11ED99796DE6F1222468.roa
File:                     ADA0722EA8BA11ED99796DE6F1222468.roa (raw, json)
Hash identifier:          jznUm4SUCvjRjvCxW9uSMRS0+fy6RkYUWCNhvL7LI1A=
Subject key identifier:   E7:56:3E:B2:5B:B5:CC:83:9C:CA:5C:EA:95:3B:33:81:3A:89:0C:A4
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       0332
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ADA0722EA8BA11ED99796DE6F1222468.roa
Signing time:             Thu 09 Feb 2023 20:45:25 +0000
ROA not before:           Thu 09 Feb 2023 20:45:21 +0000
ROA not after:            Fri 09 Feb 2024 20:45:21 +0000
asID:                     207990
IP address blocks:        154.73.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF
        Validity
            Not Before: Feb  9 20:45:21 2023 GMT
            Not After : Feb  9 20:45:21 2024 GMT
        Subject: CN=63e55b65-54bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:1f:30:ba:d0:58:35:25:a6:6b:ec:51:46:
                    aa:56:a0:bc:22:14:ef:7c:9d:e5:43:30:d6:42:66:
                    9a:35:cb:95:63:2f:f0:ed:d6:21:65:48:a1:3c:e5:
                    8e:4a:df:da:09:db:31:96:a7:e2:a5:98:be:f4:c4:
                    bc:ce:fc:4d:3e:ea:29:7c:a4:37:0a:9a:91:a5:35:
                    a6:f9:94:ff:27:ea:ec:69:c3:32:8e:0c:d7:f3:4e:
                    97:ed:22:ed:51:47:86:12:fa:f3:64:bc:5e:79:ea:
                    c2:09:12:b9:aa:42:60:c6:5c:ec:8f:22:65:10:ac:
                    cf:a8:a9:b6:a4:a2:15:00:42:bd:3f:b2:08:83:c1:
                    03:13:43:0e:f4:46:76:88:65:71:2e:39:34:2f:9a:
                    56:67:da:69:d6:8a:f3:ca:a1:bf:88:1e:ae:fd:1d:
                    f2:e6:c8:63:44:32:83:99:fa:ac:03:29:25:6e:32:
                    60:2c:fa:7d:67:05:c4:c8:95:b6:22:9b:e2:19:df:
                    4d:ce:43:00:a8:ea:4f:a8:d2:2f:90:1d:4d:52:75:
                    30:00:12:b8:c9:92:f6:ae:0b:99:ed:e3:25:70:40:
                    96:33:e5:34:ac:96:06:19:eb:1d:bc:2b:0d:3d:cc:
                    d4:b2:f1:1a:82:10:d6:88:a8:28:b9:53:8f:46:71:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:3E:B2:5B:B5:CC:83:9C:CA:5C:EA:95:3B:33:81:3A:89:0C:A4
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ADA0722EA8BA11ED99796DE6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:78:8f:14:34:f1:d8:df:44:7b:0a:6e:dd:fa:f0:72:0f:
         e6:a0:25:79:d1:1f:bb:c7:8f:2f:d7:70:61:2c:70:63:b1:bd:
         75:77:04:f6:c4:f2:cb:02:66:8b:bc:18:cf:86:8e:38:e8:d5:
         b6:70:1b:3e:99:95:ee:a3:67:3f:a0:e7:6e:a9:c4:6b:81:b7:
         66:c4:e8:c1:63:11:bd:0d:7a:53:cd:f0:f2:ad:a2:69:72:1d:
         d6:03:e6:c6:04:6e:8c:0b:1e:24:d6:9d:bf:e0:91:04:a1:59:
         09:93:7a:52:5a:5b:4b:66:dc:0c:ba:91:43:9e:35:58:65:13:
         77:5b:ff:e8:70:10:9f:ef:7f:dc:86:bf:ac:fd:db:49:ee:8e:
         72:09:3e:43:c9:41:83:e0:02:6b:dd:ff:48:61:c0:6c:c7:d5:
         05:16:5b:b1:32:86:ff:c5:db:19:78:5e:d7:3e:43:2c:2d:a6:
         99:de:05:db:a0:cf:4f:cc:47:51:46:b5:a4:d6:05:3f:60:de:
         12:f6:9b:86:c3:b4:7e:36:ed:60:6d:12:8f:83:6d:96:d6:02:
         25:60:35:c1:d8:71:bd:f5:43:01:ee:fe:93:7a:5f:05:1d:c9:
         0e:84:a3:50:a8:c9:ba:ec:c8:68:2a:0b:1d:62:53:50:15:88:
         cc:37:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:12 2025 by rpki-client