Route Origin Authorization

$ rpki-client -vvf k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          VKG+Zu8+dL0B0dn/T9/iLzRnPhg2oD23WbLui/t01WY=
Subject key identifier:   CA:D2:1E:7A:EB:A9:B9:AB:F7:AF:DA:70:80:FF:B4:25:09:4A:89:9D
Certificate issuer:       /CN=CB803D5AE60BEDE8802912F568EADC8FA7CF69A7
Certificate serial:       6B727717CC68178C64083E6379479422B7E983CD
Authority key identifier: CB:80:3D:5A:E6:0B:ED:E8:80:29:12:F5:68:EA:DC:8F:A7:CF:69:A7
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/CB803D5AE60BEDE8802912F568EADC8FA7CF69A7.cer
Subject info access:      rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 11:13:13 +0000
ROA not before:           Fri 22 Mar 2024 11:08:13 +0000
ROA not after:            Fri 21 Mar 2025 11:13:13 +0000
asID:                     208162
IP address blocks:        158.220.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:72:77:17:cc:68:17:8c:64:08:3e:63:79:47:94:22:b7:e9:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB803D5AE60BEDE8802912F568EADC8FA7CF69A7
        Validity
            Not Before: Mar 22 11:08:13 2024 GMT
            Not After : Mar 21 11:13:13 2025 GMT
        Subject: CN=CAD21E7AEBA9B9ABF7AFDA7080FFB425094A899D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:8b:34:41:8f:90:8b:20:28:ac:3b:45:5a:
                    09:83:e1:15:ec:d3:b9:4b:9f:c3:74:df:04:8b:d3:
                    7b:00:90:10:a1:32:69:8c:af:99:64:cf:af:1b:cf:
                    90:5b:8c:51:84:b9:d0:18:44:08:4b:32:88:12:3f:
                    69:30:30:84:9e:00:01:17:0b:2e:be:c7:c0:05:33:
                    b8:29:2b:06:8a:34:2e:65:6f:8d:fe:44:82:41:5e:
                    c5:af:f7:78:df:19:33:16:11:7a:a2:fb:56:8c:70:
                    a6:f9:c3:64:f8:47:58:0f:9c:58:56:14:0a:a8:9b:
                    39:43:96:49:0c:60:20:7f:23:e0:82:71:2b:eb:41:
                    31:ba:a1:dc:72:ec:8a:39:2f:7b:3a:b3:70:35:c4:
                    c0:5d:6e:4b:05:97:65:c3:ec:44:0c:12:40:7e:d3:
                    01:d5:f7:52:4e:4e:c9:f5:ca:3e:2c:e7:fa:40:f0:
                    18:8c:aa:7c:1c:f1:f7:73:04:07:47:09:ed:ba:6e:
                    a7:54:c7:86:f3:30:f5:6c:f0:96:11:42:ef:c5:a1:
                    dd:b5:0f:65:dd:32:f5:cc:30:ef:41:16:fc:26:3a:
                    7c:d0:22:49:5e:b4:16:a0:6d:0e:fc:69:0f:5b:5c:
                    df:dc:2a:72:30:70:6a:f1:9b:a1:35:c8:28:b0:49:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:1E:7A:EB:A9:B9:AB:F7:AF:DA:70:80:FF:B4:25:09:4A:89:9D
            X509v3 Authority Key Identifier:
                keyid:CB:80:3D:5A:E6:0B:ED:E8:80:29:12:F5:68:EA:DC:8F:A7:CF:69:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CB803D5AE60BEDE8802912F568EADC8FA7CF69A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/CB803D5AE60BEDE8802912F568EADC8FA7CF69A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:e6:03:85:d8:f2:1e:d1:25:63:a6:bf:cc:1d:3e:91:36:
         31:1d:ed:53:4c:4a:95:5a:01:21:4a:40:15:33:35:2b:b1:bf:
         fc:da:65:fc:a4:7c:ef:84:79:6a:4a:6c:05:18:22:09:28:64:
         fd:37:6f:a2:6c:1a:2e:bc:59:e0:b5:8a:bb:2b:77:d2:de:22:
         3e:21:34:ee:7c:30:a7:4b:6f:9f:12:6f:01:43:2e:b9:39:c4:
         74:2a:a5:85:3c:51:9d:90:57:9d:c6:65:a8:1d:2c:4f:ea:3f:
         b4:e0:62:fa:28:00:72:77:f7:e3:0c:85:30:30:b1:77:9d:df:
         55:1b:90:b5:f6:60:67:af:cc:c3:84:4e:78:fd:01:03:7a:a0:
         9b:d4:f0:d9:27:0e:84:6f:b5:44:71:80:d9:63:2f:c3:c7:ae:
         17:49:d3:6e:85:85:8f:05:2a:a3:f0:8d:47:9c:32:77:9e:3b:
         08:e6:23:96:be:bd:24:11:ae:4f:e5:fe:f9:05:dd:bf:1d:98:
         62:ba:09:71:7f:85:d7:5a:c4:55:52:71:47:41:ba:4d:c9:13:
         bd:f0:76:ee:04:2d:0f:b5:52:f6:a2:c8:c2:db:88:75:3b:31:
         ed:4c:ba:b6:f8:00:67:cb:38:9d:a4:54:34:f5:db:5c:40:d6:
         70:3a:26:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa3J3F8xoF4xkCD5jeUeUIrfpg80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4MDNENUFFNjBCRURFODgwMjkxMkY1NjhFQURDOEZB
N0NGNjlBNzAeFw0yNDAzMjIxMTA4MTNaFw0yNTAzMjExMTEzMTNaMDMxMTAvBgNV
BAMTKENBRDIxRTdBRUJBOUI5QUJGN0FGREE3MDgwRkZCNDI1MDk0QTg5OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5Is0QY+QiyAorDtFWgmD4RXs
07lLn8N03wSL03sAkBChMmmMr5lkz68bz5BbjFGEudAYRAhLMogSP2kwMISeAAEX
Cy6+x8AFM7gpKwaKNC5lb43+RIJBXsWv93jfGTMWEXqi+1aMcKb5w2T4R1gPnFhW
FAqomzlDlkkMYCB/I+CCcSvrQTG6odxy7Io5L3s6s3A1xMBdbksFl2XD7EQMEkB+
0wHV91JOTsn1yj4s5/pA8BiMqnwc8fdzBAdHCe26bqdUx4bzMPVs8JYRQu/Fod21
D2XdMvXMMO9BFvwmOnzQIkletBagbQ78aQ9bXN/cKnIwcGrxm6E1yCiwSXWvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUytIeeuupuav3r9pwgP+0JQlKiZ0wHwYDVR0j
BBgwFoAUy4A9WuYL7eiAKRL1aOrcj6fPaacwDgYDVR0PAQH/BAQDAgeAMIGBBgNV
HR8EejB4MHagdKByhnByc3luYzovL2swMC5wcC1ycGtpLmF0aGVuZS1jZW50ZXIu
bmV0L3JlcG8vazAwLXJwa2ktYXRoZW5lLWNlbnRlci8wL0NCODAzRDVBRTYwQkVE
RTg4MDI5MTJGNTY4RUFEQzhGQTdDRjY5QTcuY3JsMIGBBggrBgEFBQcBAQR1MHMw
cQYIKwYBBQUHMAKGZXJzeW5jOi8vcnBraS5hdGhlbmUtY2VudGVyLm5ldC9yZXBv
L3Jwa2ktYXRoZW5lLWNlbnRlci8wL0NCODAzRDVBRTYwQkVERTg4MDI5MTJGNTY4
RUFEQzhGQTdDRjY5QTcuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUH
MAuGgYJyc3luYzovL2swMC5wcC1ycGtpLmF0aGVuZS1jZW50ZXIubmV0L3JlcG8v
azAwLXJwa2ktYXRoZW5lLWNlbnRlci8wLzMxMzUzODJlMzIzMjMwMmUzMTMyMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACe
3IEwDQYJKoZIhvcNAQELBQADggEBAIrn5gOF2PIe0SVjpr/MHT6RNjEd7VNMSpVa
ASFKQBUzNSuxv/zaZfykfO+EeWpKbAUYIgkoZP03b6JsGi68WeC1irsrd9LeIj4h
NO58MKdLb58SbwFDLrk5xHQqpYU8UZ2QV53GZagdLE/qP7TgYvooAHJ39+MMhTAw
sXed31UbkLX2YGevzMOETnj9AQN6oJvU8NknDoRvtURxgNljL8PHrhdJ026FhY8F
KqPwjUecMneeOwjmI5a+vSQRrk/l/vkF3b8dmGK6CXF/hddaxFVScUdBuk3JE73w
du4ELQ+1UvaiyMLbiHU7Me1Murb4AGfLOJ2kVDT121xA1nA6JtU=
-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:51 2024 by rpki-client on console-ams.rpki-client.org