Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A248844ED95911EF96D90356762E951A.roa
File:                     A248844ED95911EF96D90356762E951A.roa (raw, json)
Hash identifier:          scntkEsWjvTL6pPbQthVGm+vW5GTZN9JfHJkDU7bCpE=
Subject key identifier:   22:1A:CF:49:19:DB:A3:19:96:EA:80:27:F6:62:63:7E:4A:22:37:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       010EB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A248844ED95911EF96D90356762E951A.roa
Signing time:             Thu 23 Jan 2025 07:14:07 +0000
ROA not before:           Thu 23 Jan 2025 07:14:03 +0000
ROA not after:            Sat 15 Mar 2025 07:14:03 +0000
asID:                     138915
IP address blocks:        156.244.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69299 (0x10eb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 07:14:03 2025 GMT
            Not After : Mar 15 07:14:03 2025 GMT
        Subject: CN=6791ec3f-010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:77:ed:b7:a6:0d:84:19:00:68:ef:f0:04:
                    df:ad:f9:50:db:56:9e:01:22:d1:4c:e5:e7:2f:7e:
                    44:e6:03:bf:62:29:96:15:c8:35:1b:50:69:db:4b:
                    97:a6:ec:9f:6d:17:3f:a3:d9:13:9a:c9:9c:10:61:
                    f4:39:1b:d2:68:d7:4f:e2:9d:e7:92:30:a7:90:ee:
                    34:33:1b:a1:46:46:6c:68:f5:f0:58:29:2c:38:7a:
                    2d:70:ff:38:70:16:da:b9:43:aa:e5:7d:92:59:19:
                    b6:a3:3b:b3:90:31:49:df:ca:b0:6e:7c:8f:12:a2:
                    50:e0:ce:23:3b:d0:ae:ac:4a:71:e0:70:02:c7:c1:
                    f4:9d:39:e4:e0:11:39:e5:d9:25:78:98:ea:11:98:
                    48:a6:b5:57:39:8a:55:bf:89:72:04:83:a4:85:68:
                    75:00:6d:ea:0b:98:27:92:ee:66:a5:4e:65:9e:61:
                    88:bf:31:b8:bc:27:90:4c:a6:3d:da:d5:50:b7:9f:
                    08:45:ac:69:a8:4e:12:8d:15:a7:16:d2:83:4d:ee:
                    d5:d6:d5:e3:27:9e:bf:9f:8d:c2:73:78:31:ad:12:
                    d7:ba:55:7a:34:44:ca:77:a3:cd:20:56:2f:40:c8:
                    79:83:e2:47:9e:c3:9a:aa:dd:59:e3:12:21:15:c0:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:CF:49:19:DB:A3:19:96:EA:80:27:F6:62:63:7E:4A:22:37:4D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A248844ED95911EF96D90356762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:c4:a0:be:f6:7f:57:d5:4c:a3:75:2f:46:8f:7e:c9:cf:
         42:9f:2f:2b:ea:57:cc:15:1f:8e:9e:ba:5d:48:23:70:b5:fa:
         f4:9a:66:d1:41:3b:dd:10:2d:31:6c:14:37:62:07:12:fc:4f:
         a6:ca:2e:39:74:37:08:87:45:a4:7b:f5:39:5e:7d:84:72:e2:
         84:a9:40:61:02:0e:f0:e7:51:03:0b:10:03:49:cf:9c:28:14:
         b3:8e:98:ee:8d:ce:8e:28:83:aa:f9:6c:4e:26:85:64:38:71:
         f0:aa:6d:c4:0b:07:b4:10:97:70:2f:22:a5:db:30:c8:b3:bf:
         8f:29:f0:6a:e8:93:8f:7a:65:c4:2a:47:f2:87:fb:29:4f:f5:
         b7:78:df:3d:85:b1:0c:be:6c:82:b6:15:ef:b9:a9:28:06:b6:
         53:b9:88:ba:71:a5:4f:34:e5:73:06:59:e7:41:ac:7f:a2:2c:
         08:95:82:ac:ea:f3:82:94:ee:98:1a:a3:af:87:5f:9c:03:18:
         b3:77:e0:a3:22:74:19:bd:a4:ab:26:ac:6b:76:51:f1:91:54:
         6b:32:b0:22:2a:a8:cd:50:ef:01:d7:6e:5c:18:11:ae:96:93:
         75:6a:4f:4b:28:8e:ce:a8:bc:38:58:50:57:06:e5:b3:a1:1f:
         7f:f5:cc:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQ6zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTIzMDcxNDAzWhcNMjUwMzE1MDcxNDAzWjAYMRYw
FAYDVQQDEw02NzkxZWMzZi0wMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo1937bemDYQZAGjv8ATfrflQ21aeASLRTOXnL35E5gO/YimWFcg1G1Bp
20uXpuyfbRc/o9kTmsmcEGH0ORvSaNdP4p3nkjCnkO40MxuhRkZsaPXwWCksOHot
cP84cBbauUOq5X2SWRm2ozuzkDFJ38qwbnyPEqJQ4M4jO9CurEpx4HACx8H0nTnk
4BE55dkleJjqEZhIprVXOYpVv4lyBIOkhWh1AG3qC5gnku5mpU5lnmGIvzG4vCeQ
TKY92tVQt58IRaxpqE4SjRWnFtKDTe7V1tXjJ56/n43Cc3gxrRLXulV6NETKd6PN
IFYvQMh5g+JHnsOaqt1Z4xIhFcD6WQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCIa
z0kZ26MZluqAJ/ZiY35KIjdNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjQ4ODQ0RUQ5NTkxMUVGOTZEOTAzNTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQeMA0GCSqGSIb3DQEBCwUA
A4IBAQBHPsSgvvZ/V9VMo3UvRo9+yc9Cny8r6lfMFR+OnrpdSCNwtfr0mmbRQTvd
EC0xbBQ3YgcS/E+myi45dDcIh0Wke/U5Xn2EcuKEqUBhAg7w51EDCxADSc+cKBSz
jpjujc6OKIOq+WxOJoVkOHHwqm3ECwe0EJdwLyKl2zDIs7+PKfBq6JOPemXEKkfy
h/spT/W3eN89hbEMvmyCthXvuakoBrZTuYi6caVPNOVzBlnnQax/oiwIlYKs6vOC
lO6YGqOvh1+cAxizd+CjInQZvaSrJqxrdlHxkVRrMrAiKqjNUO8B125cGBGulpN1
ak9LKI7OqLw4WFBXBuWzoR9/9cwM
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:28:47 2025 by rpki-client