Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6813380DFDD11EF9594A24B762E951A.roa
File:                     C6813380DFDD11EF9594A24B762E951A.roa (raw, json)
Hash identifier:          tKqy1UHc6bS3kXeajsD6Rk8/4IIXhNb6UhajIsQYpUE=
Subject key identifier:   BA:D4:6B:28:4E:16:E5:EA:F5:E2:7E:01:19:9B:C7:F3:73:7A:34:78
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       014DB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6813380DFDD11EF9594A24B762E951A.roa
Signing time:             Fri 31 Jan 2025 14:15:08 +0000
ROA not before:           Fri 31 Jan 2025 14:15:04 +0000
ROA not after:            Mon 10 Feb 2025 14:15:04 +0000
asID:                     135377
IP address blocks:        154.202.66.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85425 (0x14db1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 31 14:15:04 2025 GMT
            Not After : Feb 10 14:15:04 2025 GMT
        Subject: CN=679cdaec-aaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:e2:0d:3c:86:3d:78:bc:b7:94:71:e2:73:
                    a1:6f:5e:1c:86:ae:71:01:2f:63:aa:31:9d:5f:1f:
                    0c:53:79:dc:2e:bb:3e:fd:6d:88:9d:1d:46:24:e4:
                    af:63:7f:3e:74:17:12:2e:3f:93:91:39:63:03:6e:
                    eb:09:74:2b:7d:c1:2e:c9:84:09:7d:b6:05:dc:ad:
                    83:90:b1:74:6b:f9:1a:5e:3c:24:be:56:d7:44:1a:
                    31:65:dd:b3:80:71:8a:af:95:f2:f6:b6:4e:aa:ff:
                    ff:af:9c:65:a8:65:32:75:8a:ba:82:a3:b3:c3:62:
                    04:d8:fa:ae:0e:4c:c4:0c:be:ec:dc:e7:f4:e2:e3:
                    b9:a6:1a:aa:d0:5b:00:c7:90:21:ef:0e:04:45:af:
                    79:83:23:68:48:ee:8c:2a:4d:f7:73:e5:3d:80:be:
                    11:ec:5e:11:7f:d1:e0:eb:ec:c9:15:66:be:77:68:
                    37:90:f0:45:c3:45:c2:55:d9:5c:e6:73:90:73:7a:
                    3e:65:49:fd:10:f9:e3:df:72:b2:9d:56:fa:b5:43:
                    a0:39:80:92:cc:2a:e8:83:fe:a7:c6:67:1f:2d:87:
                    7e:0e:f7:74:9c:b1:52:48:c9:bd:9d:27:dc:23:ce:
                    02:3d:b1:d1:df:a4:fa:0d:cb:9e:72:67:0e:f0:5f:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:6B:28:4E:16:E5:EA:F5:E2:7E:01:19:9B:C7:F3:73:7A:34:78
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6813380DFDD11EF9594A24B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:e4:3d:20:1a:a8:e6:3a:52:84:23:f9:2e:4d:d1:0b:6d:
         11:a0:67:46:3c:d7:0a:16:d6:13:cd:25:32:1d:ec:2d:5c:19:
         8e:8a:09:e9:d3:27:fb:9c:96:05:31:ea:8c:82:d8:ce:0d:a8:
         52:6e:66:da:f2:10:5b:97:ec:93:a6:4c:d0:4b:c9:b6:ad:e5:
         14:42:e8:b4:41:bc:7c:82:bd:c8:b7:28:dc:3f:c3:32:b1:62:
         75:12:06:15:61:56:84:b0:89:81:5a:d6:7a:e2:47:c9:37:2a:
         8a:65:99:be:80:88:51:be:0b:8e:13:e4:67:00:a9:8f:14:c3:
         f0:0b:4b:bf:67:63:56:16:91:06:76:97:b0:10:2e:9f:60:55:
         9f:9c:fa:3a:ff:a7:da:05:e0:8e:55:02:cd:b3:b0:53:9f:15:
         7e:3e:36:6e:33:51:72:59:2b:d6:bf:e8:e1:2a:ff:65:c8:45:
         83:07:08:91:81:43:a0:1e:2e:7c:b2:03:88:c4:60:27:0c:0c:
         89:7f:b7:12:d7:13:bd:54:f4:9a:75:18:06:c5:71:42:87:38:
         98:f5:3f:23:7b:da:51:90:07:36:13:23:10:4f:3b:e1:33:32:
         7c:3c:18:18:04:a0:8f:56:c6:dc:40:ed:8f:9c:f7:5b:83:c5:
         3a:f9:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:20 2025 by rpki-client