Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A226215ED80211EF8101DF6A762E951A.roa
File:                     A226215ED80211EF8101DF6A762E951A.roa (raw, json)
Hash identifier:          A8W5TEI+ZmTwFe27uQnxOAjLZ8t3MQEWjfASGRArbRo=
Subject key identifier:   E0:61:26:B7:A6:B2:64:EF:A6:CE:F0:80:AC:BE:4F:DC:0C:C2:6C:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       010E04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A226215ED80211EF8101DF6A762E951A.roa
Signing time:             Tue 21 Jan 2025 14:18:49 +0000
ROA not before:           Tue 21 Jan 2025 14:18:44 +0000
ROA not after:            Sat 01 Feb 2025 14:18:44 +0000
asID:                     62240
IP address blocks:        45.192.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69124 (0x10e04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 21 14:18:44 2025 GMT
            Not After : Feb  1 14:18:44 2025 GMT
        Subject: CN=678facc9-200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:3d:bb:5f:1e:1a:ec:5f:22:12:23:6d:14:
                    70:fd:d3:6f:64:62:0b:e3:09:d9:6b:64:bd:a6:e1:
                    32:a9:92:ec:8e:4d:3d:24:34:69:53:e4:c1:8e:1e:
                    8d:d8:cb:84:58:d7:87:d8:1c:6f:f3:3c:03:07:0c:
                    4f:26:e5:0e:9e:5e:e0:9f:48:af:48:d5:9b:8d:ea:
                    24:aa:f0:96:b2:63:96:e9:fb:93:2e:05:f8:4f:ad:
                    eb:97:45:a8:e2:12:36:26:67:b8:e7:62:75:1f:e8:
                    d8:29:e5:04:a5:23:ab:79:0d:33:a8:27:a2:44:cc:
                    65:72:29:b9:20:b7:45:86:da:9d:41:a8:b6:76:31:
                    82:99:92:f0:66:d5:c4:84:14:4b:7b:1d:70:af:df:
                    4f:96:dd:69:73:2b:8c:0f:5a:99:eb:ed:09:1f:2d:
                    c7:43:b3:62:2c:23:67:7a:ed:2a:69:eb:d5:fb:e6:
                    d4:9b:6e:ef:94:fa:9e:3a:b1:70:79:95:87:69:a3:
                    cc:60:f5:8d:f8:d6:78:4f:ef:dc:00:8f:f8:fc:64:
                    6e:e0:a1:76:fa:34:54:56:92:8a:02:dd:3c:cf:63:
                    ce:8f:d4:5b:6b:90:70:22:60:60:7f:52:94:a0:1f:
                    14:1a:d9:33:c8:8a:f4:23:38:18:1f:e5:02:47:e4:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:61:26:B7:A6:B2:64:EF:A6:CE:F0:80:AC:BE:4F:DC:0C:C2:6C:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A226215ED80211EF8101DF6A762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8a:3c:e7:3c:f2:fe:07:8f:18:48:43:c1:9b:59:bc:32:a2:
         05:71:df:7b:8a:ad:9a:e6:00:fd:ef:da:f8:18:0f:7b:82:68:
         28:55:62:5b:ee:7f:0d:32:b5:6b:55:20:32:23:45:9a:d7:0e:
         4b:60:e5:c8:b7:ce:67:8a:94:93:9c:f9:af:e7:d9:c3:d4:04:
         32:5f:d5:47:f4:d8:38:9b:50:06:9f:19:ac:ed:42:8f:9d:98:
         93:0e:45:de:3b:3a:24:74:f9:68:32:c6:e5:58:67:00:8a:de:
         18:70:ba:dc:ed:23:37:ac:59:2d:1d:14:04:d4:c4:cb:92:73:
         71:8b:08:63:1b:db:1f:9d:b7:46:89:96:e2:51:d2:5f:9d:3e:
         36:d4:1f:e9:09:ee:cd:99:4f:8e:a5:47:c4:d6:47:6a:ed:3e:
         a6:fc:e2:1e:d8:9c:3e:3b:23:1a:dc:14:cd:2b:9c:d0:16:cb:
         08:33:93:e3:fa:c2:58:bf:2c:7a:c2:7d:92:e4:f7:1a:9d:0a:
         06:30:e2:84:ed:74:3c:64:2b:70:77:7e:e5:ff:ba:08:93:b1:
         af:55:b3:36:c7:44:a0:c6:ac:09:a9:6e:a2:0a:0c:f9:52:97:
         6e:22:bb:55:87:e5:8f:78:77:43:4f:88:92:c2:a8:e4:cf:cd:
         88:22:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:02 2025 by rpki-client