Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8130414D70711EFAE69A781762E951A.roa
File:                     C8130414D70711EFAE69A781762E951A.roa (raw, json)
Hash identifier:          fLFGuU2h8xfxk+YrrtK6BBwOKLDSna1XEjMdf8o9frc=
Subject key identifier:   C5:8E:AB:BE:D2:2B:73:57:6C:EC:0D:E5:7F:3A:A7:89:7F:E8:77:3C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       010BF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8130414D70711EFAE69A781762E951A.roa
Signing time:             Mon 20 Jan 2025 08:23:09 +0000
ROA not before:           Mon 20 Jan 2025 08:23:05 +0000
ROA not after:            Sat 01 Feb 2025 08:23:05 +0000
asID:                     48031
IP address blocks:        45.200.184.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68593 (0x10bf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 08:23:05 2025 GMT
            Not After : Feb  1 08:23:05 2025 GMT
        Subject: CN=678e07ed-83cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:03:97:3d:a6:1a:63:cb:70:64:38:cd:e6:
                    bb:54:45:4c:46:1f:04:b2:ac:72:d9:c3:be:6d:c5:
                    5a:bc:22:00:66:2f:b2:7e:48:ca:f1:e7:93:67:5a:
                    fe:cc:27:94:59:21:11:1b:2a:d8:93:63:74:52:d1:
                    77:d8:f4:6d:6c:f7:fe:ea:b7:24:1b:a8:a3:22:45:
                    f9:52:b1:10:59:a2:b7:ed:22:4e:b3:3e:36:f3:ef:
                    bd:71:8f:f3:f7:3a:cf:54:fc:63:44:7d:d1:67:68:
                    80:e0:7f:ad:0b:b6:ba:19:ef:c7:2f:52:81:23:c3:
                    ef:78:45:9f:8a:32:be:12:4a:7f:c5:6c:ab:f2:d3:
                    e5:b3:89:4c:7a:93:1b:f4:99:1d:c4:e6:d3:d7:6d:
                    8c:96:a1:2e:12:45:29:f5:0b:ff:47:e8:13:5e:ee:
                    32:21:1a:d0:60:69:5f:b9:42:a0:05:f7:ac:18:02:
                    23:67:1e:9e:2f:83:74:d7:bb:0b:7b:81:82:a4:f4:
                    29:bb:ed:a4:08:9d:9c:41:95:a7:48:3f:8f:fd:55:
                    3f:5b:10:8a:6c:86:a2:71:25:9c:4e:28:25:e5:ab:
                    6f:58:35:b1:70:10:b1:fd:bb:ce:b9:e4:53:61:16:
                    d4:c5:ef:14:6c:07:f0:b8:e8:f2:2d:12:8f:71:f9:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8E:AB:BE:D2:2B:73:57:6C:EC:0D:E5:7F:3A:A7:89:7F:E8:77:3C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8130414D70711EFAE69A781762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:36:f5:04:b9:61:f5:cf:a0:53:1c:12:c6:23:a6:d4:97:
         aa:a1:a3:00:50:47:5f:39:59:f6:5a:8d:d7:22:e0:ae:b7:d4:
         97:94:a7:4c:d0:19:5a:5f:10:b9:1a:b9:86:b9:00:66:f5:dd:
         b8:2c:96:79:7d:51:a0:ef:a9:c1:22:90:4e:99:ef:cc:fc:bb:
         29:81:ef:67:d1:27:2a:9e:1a:db:8e:ae:26:bc:20:43:f8:d0:
         b3:86:95:de:aa:c2:2a:f5:ab:aa:da:18:26:bd:7a:0b:b4:07:
         c2:01:dc:ba:bf:c7:75:d0:93:65:6d:65:27:95:2f:56:b1:0f:
         c9:54:c7:98:cf:3e:b2:ee:12:f4:ab:78:de:2a:9f:6f:6a:cd:
         9d:41:c1:75:d4:0c:41:c5:ad:b6:b7:6d:fd:67:b0:20:59:5d:
         65:35:98:4f:7b:ee:4b:38:a3:11:34:55:f4:96:c5:65:6a:24:
         af:c1:7c:bd:78:de:28:69:10:6a:0c:81:8c:99:d3:4c:b2:d0:
         0c:a7:ca:67:af:f9:44:51:c9:51:3f:12:47:08:2c:0a:a1:69:
         76:65:5e:46:84:ee:f4:60:7c:1f:39:38:1a:a2:fb:76:a1:9d:
         78:82:90:aa:1e:c1:a9:66:b9:04:92:1f:fa:65:fb:c9:d3:b2:
         51:11:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:16:39 2025 by rpki-client