Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57619C90DA8511EFACA2B9B8762E951A.roa
File:                     57619C90DA8511EFACA2B9B8762E951A.roa (raw, json)
Hash identifier:          QF/OcCCy4/xB0W8SQsY+8u9j08i8LkQcDjOntuJHOfM=
Subject key identifier:   16:E1:F7:5A:F0:BD:D1:44:25:79:90:FC:6B:39:AA:21:7C:B6:D4:7B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01102C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57619C90DA8511EFACA2B9B8762E951A.roa
Signing time:             Fri 24 Jan 2025 18:59:31 +0000
ROA not before:           Fri 24 Jan 2025 18:59:27 +0000
ROA not after:            Tue 25 Feb 2025 18:59:27 +0000
asID:                     202656
IP address blocks:        45.192.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69676 (0x1102c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 18:59:27 2025 GMT
            Not After : Feb 25 18:59:27 2025 GMT
        Subject: CN=6793e312-4256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:39:d7:3c:6a:4a:39:f3:53:12:fd:2f:f0:
                    d2:74:89:bc:74:6c:52:47:fd:51:cb:37:6f:d7:5f:
                    37:e0:af:c1:46:05:11:9a:41:0b:17:f8:b5:a1:2a:
                    95:05:c4:27:17:f1:d6:02:ec:3c:4b:06:22:09:be:
                    85:f5:01:bf:8e:e4:f2:42:06:69:5a:7e:ea:24:90:
                    36:0f:7a:48:6d:4b:24:fc:51:47:b1:e0:dd:30:ec:
                    2a:b8:6d:44:60:d4:d2:ee:9f:0b:80:14:42:c3:b4:
                    8f:f8:04:98:fa:7f:b6:8f:3a:1c:aa:85:d2:ad:7d:
                    f8:54:3c:4a:c0:6c:3c:ef:35:c3:31:b5:11:f0:42:
                    d0:4c:6d:3e:a7:26:a5:3f:79:d3:43:dc:82:42:34:
                    f9:bd:ce:48:b4:81:d4:db:2f:4b:4c:cb:6a:07:6e:
                    18:b7:c6:aa:0d:59:36:42:58:59:e5:23:ea:a5:4a:
                    55:80:4c:72:8d:23:2f:77:56:c7:91:c7:0b:e6:ab:
                    51:8b:d5:30:42:e8:98:7a:16:9d:74:15:37:52:eb:
                    58:b2:86:55:a6:f6:de:9f:43:b3:c6:ba:e4:a4:03:
                    94:5b:26:c4:1d:94:90:01:f8:8f:13:e8:60:75:a7:
                    12:20:98:c0:40:53:01:d5:de:52:6e:65:4b:2d:82:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E1:F7:5A:F0:BD:D1:44:25:79:90:FC:6B:39:AA:21:7C:B6:D4:7B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57619C90DA8511EFACA2B9B8762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:89:8c:8d:56:b3:df:32:91:22:2e:32:6c:fd:53:fe:c5:
         3a:f9:90:ce:76:48:77:9b:e0:3e:2a:24:49:53:f7:3e:25:0f:
         50:7f:ee:58:97:e2:09:db:e6:79:bf:a2:47:7d:a6:7f:a8:89:
         5c:c1:0b:9f:be:6e:ad:9e:34:c5:1f:9c:59:f4:b6:9b:b9:93:
         12:89:33:59:12:81:6a:68:a0:29:e7:08:4b:e7:e9:48:51:d9:
         9e:8d:49:1e:04:48:6e:38:f6:8e:2b:25:73:e4:5a:af:21:2e:
         07:bf:3c:a1:77:45:54:71:0c:1c:e4:de:09:b1:67:21:db:19:
         d8:f5:eb:68:5e:b3:03:60:87:ed:ac:5f:44:b5:43:df:b9:f3:
         9c:09:b5:3c:82:10:70:9f:e5:0e:d0:f8:3b:2a:c8:f6:76:1e:
         23:cb:e2:0c:ab:0b:5b:b3:e0:5e:b3:c2:4a:71:6b:65:67:d7:
         d8:94:9d:28:41:96:79:c0:f0:23:28:7e:4d:a9:7c:bc:c4:80:
         46:03:a3:6a:51:13:8d:02:81:9b:42:d9:35:28:0c:cb:bc:ee:
         49:7f:f2:93:da:c8:79:be:fc:24:58:2f:a7:fb:1f:73:e5:ea:
         80:fd:3c:e3:47:fa:f1:a1:46:f5:bc:ca:03:96:da:5d:56:0c:
         f6:ae:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:00 2025 by rpki-client