Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D332CCFADA2011EFB0AB1194762E951A.roa
File:                     D332CCFADA2011EFB0AB1194762E951A.roa (raw, json)
Hash identifier:          QfQ52d3RyScNmfVkwm0PoTN3chW0vrvMzRNSLK4qAdo=
Subject key identifier:   AD:24:45:6F:68:4F:92:36:E1:91:83:B1:F8:80:3D:56:32:26:C6:DE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       014405
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D332CCFADA2011EFB0AB1194762E951A.roa
Signing time:             Fri 24 Jan 2025 06:59:59 +0000
ROA not before:           Fri 24 Jan 2025 06:59:55 +0000
ROA not after:            Sat 01 Mar 2025 06:59:55 +0000
asID:                     44559
IP address blocks:        154.203.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82949 (0x14405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 06:59:55 2025 GMT
            Not After : Mar  1 06:59:55 2025 GMT
        Subject: CN=67933a6f-39f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:4c:f0:2a:37:0a:85:94:a0:9a:08:1d:23:ac:
                    6d:7e:26:5a:dd:79:63:b9:48:2c:18:03:89:f6:57:
                    eb:28:6f:a6:91:8e:60:e0:da:50:7b:88:2d:74:1b:
                    17:c1:a1:6d:22:a3:d3:37:31:51:cc:8b:8d:a0:37:
                    74:77:eb:63:38:5a:43:18:9a:e1:d4:59:1c:c2:6b:
                    16:60:df:b2:98:24:22:e5:ba:da:47:59:17:23:4b:
                    9b:a0:c2:ae:eb:9f:28:0a:af:a6:70:65:fc:48:84:
                    ac:89:55:8e:25:34:2b:6a:79:43:8b:e9:ee:7e:62:
                    8c:d1:d4:5d:89:c6:66:5a:77:b5:27:06:90:f4:6a:
                    a5:4f:88:6d:71:92:53:ab:58:29:b3:19:3c:e7:be:
                    1f:59:2c:39:9e:5b:21:a2:d3:a6:5c:2f:5c:c8:e7:
                    c1:7d:ee:28:a8:54:6e:72:81:67:89:a5:a9:0a:25:
                    9c:2d:f8:aa:47:07:40:a7:18:c2:6b:73:bb:14:1e:
                    2e:e9:bd:75:c1:e9:62:14:f6:84:35:fd:f7:dd:5c:
                    0d:f0:7e:79:f1:f4:17:e3:88:5b:94:e1:7b:dd:d5:
                    df:ad:39:dd:bc:8e:66:89:11:d9:db:23:43:90:24:
                    82:ab:ec:d7:62:87:0f:db:65:c4:cb:a7:6f:b8:81:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:24:45:6F:68:4F:92:36:E1:91:83:B1:F8:80:3D:56:32:26:C6:DE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D332CCFADA2011EFB0AB1194762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:01:98:d7:0c:64:a5:70:53:b6:e8:56:70:ac:e8:4e:97:fd:
         2f:48:51:07:1c:57:9d:cc:f1:73:32:0d:63:5b:3a:5a:7f:50:
         b3:d9:31:63:d0:5e:fb:a9:5c:b2:ee:8d:3c:7d:18:77:53:21:
         ee:36:7d:f9:fc:ce:46:14:9e:06:bf:62:09:50:0f:7c:cd:23:
         42:d6:18:35:f2:93:04:9d:92:1a:b5:6e:19:60:bb:f9:c3:a8:
         6f:9d:5f:a9:a2:ef:1c:60:bd:96:2d:02:19:fe:af:b0:3a:cd:
         95:0f:c2:f5:c9:87:ba:8d:3c:37:fe:4a:b8:76:87:39:8e:68:
         08:5c:3d:6e:35:93:46:2e:22:af:29:70:03:f5:e1:8f:af:44:
         e7:04:8f:c9:dc:fb:64:05:48:27:7a:9d:e6:51:60:34:86:00:
         e5:3d:ac:5f:e0:ee:8e:a5:4c:49:2f:c5:fd:50:18:ab:37:4c:
         b2:5c:a6:a8:50:03:41:09:f3:49:0c:63:b3:02:6a:b8:69:cb:
         1f:4b:a4:c3:d3:7b:5d:0d:a9:6e:20:0a:e3:9b:6b:b3:95:e0:
         a2:fd:1a:67:df:3e:df:85:44:ac:b3:fc:cc:bc:1b:7f:e5:e7:
         1d:c9:b2:9f:aa:3f:e2:0a:68:f2:bd:1d:99:55:76:e1:38:b1:
         ad:32:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:18 2025 by rpki-client