Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD341A44DB5711EF800E0746762E951A.roa
File:                     AD341A44DB5711EF800E0746762E951A.roa (raw, json)
Hash identifier:          o3WgOOeIlQs6n7KPSCRqDjkbsFljdNU+VjtGORuxFwI=
Subject key identifier:   DA:77:E9:DD:F3:B6:95:2D:48:A4:7E:D8:9C:60:41:86:02:80:D1:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0112F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD341A44DB5711EF800E0746762E951A.roa
Signing time:             Sat 25 Jan 2025 20:05:09 +0000
ROA not before:           Sat 25 Jan 2025 20:05:05 +0000
ROA not after:            Sun 09 Mar 2025 20:05:05 +0000
asID:                     63139
IP address blocks:        45.197.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70389 (0x112f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 25 20:05:05 2025 GMT
            Not After : Mar  9 20:05:05 2025 GMT
        Subject: CN=679543f5-ccf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:48:24:64:dc:fb:f2:b2:6f:d0:05:70:9a:
                    aa:4c:02:b6:26:c0:39:db:92:c7:44:c8:6d:3f:14:
                    b6:ed:7a:55:0b:64:98:2e:74:2f:3e:22:45:da:34:
                    bf:0d:3f:23:68:6b:df:56:41:a1:a3:46:a8:83:10:
                    13:ba:27:39:66:d0:bc:38:c1:41:44:05:e0:f3:2e:
                    f7:8b:da:f2:63:dd:76:1f:fb:67:e9:da:48:28:df:
                    46:ad:56:eb:02:ff:93:f6:0a:37:50:ee:53:7b:9f:
                    6b:65:25:27:cb:8b:0d:a0:99:76:58:f4:b7:6f:7a:
                    65:c1:31:f2:d5:42:b5:8d:36:21:bd:ed:6d:f2:7e:
                    2d:05:f5:8c:a1:61:6d:8a:4f:c5:a3:09:df:0d:fb:
                    f4:b2:af:15:e0:fc:65:e4:62:0b:9f:6e:27:0f:66:
                    c0:f5:a4:ef:d1:83:10:c0:e5:2c:a2:d7:e6:be:5c:
                    78:1a:cb:39:55:bc:e4:1c:c9:c8:b7:78:04:7c:63:
                    2b:60:e2:01:15:e5:7e:d5:34:b9:b3:0d:71:fc:36:
                    89:13:9d:28:51:2c:fb:b9:4a:22:8f:ba:c7:2e:47:
                    74:de:ee:ab:59:18:44:22:a2:76:eb:6d:91:00:b4:
                    b8:c6:46:00:e5:26:93:2e:0c:d0:a9:3e:d9:b0:ba:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:E9:DD:F3:B6:95:2D:48:A4:7E:D8:9C:60:41:86:02:80:D1:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD341A44DB5711EF800E0746762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:85:94:67:ed:48:9b:fd:19:32:d8:30:96:ea:8a:f8:e3:bd:
         38:d6:80:bb:28:e2:e7:e8:16:dd:80:a1:f4:4a:22:01:97:af:
         95:04:b3:86:85:ca:7f:b1:b3:5d:e1:ec:3a:04:bb:b5:d5:31:
         4e:8a:1f:ff:cc:7f:78:4a:7c:b9:bd:c7:c6:b0:ad:85:93:e7:
         5c:6e:f9:c6:fa:03:46:21:24:d7:78:12:f2:42:9a:a5:9b:d5:
         97:51:a1:af:d4:32:ba:1a:4e:15:6a:f4:a4:da:3b:66:84:47:
         99:2f:b9:96:4d:7b:aa:68:29:ed:f9:e6:33:da:04:80:26:ec:
         95:80:03:9e:23:c2:3c:45:fe:78:68:d3:5b:2b:dd:11:a8:8d:
         13:26:74:4b:1c:c6:65:f8:05:7b:38:3f:de:c9:5c:38:45:5d:
         95:13:e4:ac:5c:1f:19:75:7c:f1:29:c5:12:d4:ee:5b:a1:77:
         b5:53:4d:65:9c:60:5e:4d:10:74:f4:1f:a1:bf:1f:c0:dc:9d:
         5f:26:1e:9d:f8:48:1a:1d:ac:84:1b:8b:4a:ac:d1:68:a4:98:
         38:70:d2:61:c7:8e:d7:05:9e:5f:78:fa:65:5d:42:3a:2f:65:
         25:8e:2a:af:7e:ee:e9:0e:07:bf:02:59:f7:37:73:d9:01:10:
         03:bf:fa:5e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARL1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI1MjAwNTA1WhcNMjUwMzA5MjAwNTA1WjAYMRYw
FAYDVQQDEw02Nzk1NDNmNS1jY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3uBIJGTc+/Kyb9AFcJqqTAK2JsA525LHRMhtPxS27XpVC2SYLnQvPiJF
2jS/DT8jaGvfVkGho0aogxATuic5ZtC8OMFBRAXg8y73i9ryY912H/tn6dpIKN9G
rVbrAv+T9go3UO5Te59rZSUny4sNoJl2WPS3b3plwTHy1UK1jTYhve1t8n4tBfWM
oWFtik/FownfDfv0sq8V4Pxl5GILn24nD2bA9aTv0YMQwOUsotfmvlx4Gss5Vbzk
HMnIt3gEfGMrYOIBFeV+1TS5sw1x/DaJE50oUSz7uUoij7rHLkd03u6rWRhEIqJ2
622RALS4xkYA5SaTLgzQqT7ZsLr6ywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNp3
6d3ztpUtSKR+2JxgQYYCgNEPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDM0MUE0NERCNTcxMUVGODAwRTA3NDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcVyMA0GCSqGSIb3DQEBCwUA
A4IBAQCvhZRn7Uib/Rky2DCW6or447041oC7KOLn6BbdgKH0SiIBl6+VBLOGhcp/
sbNd4ew6BLu11TFOih//zH94Sny5vcfGsK2Fk+dcbvnG+gNGISTXeBLyQpqlm9WX
UaGv1DK6Gk4VavSk2jtmhEeZL7mWTXuqaCnt+eYz2gSAJuyVgAOeI8I8Rf54aNNb
K90RqI0TJnRLHMZl+AV7OD/eyVw4RV2VE+SsXB8ZdXzxKcUS1O5boXe1U01lnGBe
TRB09B+hvx/A3J1fJh6d+EgaHayEG4tKrNFopJg4cNJhx47XBZ5fePplXUI6L2Ul
jiqvfu7pDge/Aln3N3PZARADv/pe
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:51 2025 by rpki-client