Route Origin Authorization

$ rpki-client -vvf k01.rrdp-rpki.athene-center.net/repo/k01-rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          zB7/oADc7s+IsRvzK3fBAUav7eRICw2JX7golWmiNRA=
Subject key identifier:   21:0D:02:52:34:2A:97:0F:11:07:3B:5A:8F:55:56:DE:69:E5:F9:F7
Certificate issuer:       /CN=5C44EFAD0B5ECF5B0487D706CDD4AEB9F673AC02
Certificate serial:       4F36537E9CBD7E41CEAF7E5F909C6A56D7168D5A
Authority key identifier: 5C:44:EF:AD:0B:5E:CF:5B:04:87:D7:06:CD:D4:AE:B9:F6:73:AC:02
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/5C44EFAD0B5ECF5B0487D706CDD4AEB9F673AC02.cer
Subject info access:      rsync://k01.rrdp-rpki.athene-center.net/repo/k01-rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:37:55 +0000
ROA not before:           Wed 27 Mar 2024 19:32:55 +0000
ROA not after:            Wed 26 Mar 2025 19:37:55 +0000
asID:                     208162
IP address blocks:        158.220.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:36:53:7e:9c:bd:7e:41:ce:af:7e:5f:90:9c:6a:56:d7:16:8d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C44EFAD0B5ECF5B0487D706CDD4AEB9F673AC02
        Validity
            Not Before: Mar 27 19:32:55 2024 GMT
            Not After : Mar 26 19:37:55 2025 GMT
        Subject: CN=210D0252342A970F11073B5A8F5556DE69E5F9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:f9:6d:d1:51:d4:c2:49:52:d7:74:6a:28:
                    43:17:36:df:23:11:27:51:d0:2e:c7:07:cd:58:14:
                    08:cc:c8:10:04:74:df:dc:26:3f:41:55:fd:0d:3e:
                    c9:c4:9a:61:1e:43:87:6e:bb:dc:43:21:08:85:a8:
                    af:db:46:79:65:8f:bc:44:3a:c0:43:11:a9:cb:04:
                    47:27:d8:92:84:b1:93:bc:0d:dd:35:fe:d5:28:db:
                    f7:e2:da:cd:df:20:35:59:3e:3e:f4:00:97:42:12:
                    a7:be:43:9a:40:35:60:f0:6a:2c:f5:3c:97:52:3c:
                    fb:d4:5e:21:c6:3b:fa:35:96:21:79:10:df:12:af:
                    1f:90:fb:c3:ba:3c:42:d7:ae:fa:02:aa:7f:95:b8:
                    1c:bb:7a:14:3e:a5:c3:f1:ee:13:f1:28:36:dd:b4:
                    93:82:d0:95:3a:71:4f:b4:1f:46:cb:d8:4b:6c:b8:
                    35:c1:21:17:fe:ec:a5:95:97:84:29:c7:df:75:0c:
                    31:77:be:ea:a8:4b:ba:fd:48:6c:39:12:61:f8:be:
                    1b:1d:6e:91:f9:de:d6:d5:7c:5d:60:70:c2:97:19:
                    c3:bf:a5:ce:b8:ea:b8:ab:d7:66:e1:76:3a:be:f0:
                    b0:6b:5d:ab:53:e5:9d:6f:85:1d:2b:d4:ce:62:69:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:02:52:34:2A:97:0F:11:07:3B:5A:8F:55:56:DE:69:E5:F9:F7
            X509v3 Authority Key Identifier:
                keyid:5C:44:EF:AD:0B:5E:CF:5B:04:87:D7:06:CD:D4:AE:B9:F6:73:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k01.rrdp-rpki.athene-center.net/repo/k01-rpki-athene-center/0/5C44EFAD0B5ECF5B0487D706CDD4AEB9F673AC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/5C44EFAD0B5ECF5B0487D706CDD4AEB9F673AC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://k01.rrdp-rpki.athene-center.net/repo/k01-rpki-athene-center/0/3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:54:b6:ba:ea:5f:1c:71:5a:d2:99:08:d0:89:38:cb:9d:1a:
         f8:51:74:c0:81:8e:ad:b2:b2:7b:12:f1:74:65:87:9d:9e:56:
         37:38:fd:f9:77:5b:88:ce:20:82:7d:9b:dc:c1:c2:e9:30:14:
         cb:f8:77:fd:8f:60:cf:ee:04:87:ca:45:11:03:4e:56:4a:86:
         37:71:67:2d:27:99:78:dc:ba:9d:4b:8a:57:40:25:0d:e7:56:
         b0:13:bb:4b:65:dc:c7:46:08:97:c7:f8:83:d2:9a:0b:c9:a1:
         90:b6:29:35:57:d3:bd:41:fc:c1:7c:11:b2:be:5d:83:33:12:
         ce:ed:de:84:22:7f:d3:1d:69:7c:10:43:7a:16:08:27:b9:b6:
         26:7b:0c:5a:96:04:1e:40:20:d6:8c:aa:a3:70:7d:b4:e2:52:
         7e:6e:82:a5:38:31:e9:5f:be:5a:43:6d:70:09:7a:16:80:34:
         4d:81:e8:62:74:67:48:b4:23:2e:99:33:59:c7:90:2d:63:2b:
         cd:91:1a:c2:8d:89:ac:e7:c6:0d:a6:47:f7:97:14:07:a3:98:
         51:c0:fc:0e:58:3a:56:68:42:97:be:c0:00:1c:13:02:6b:43:
         ef:11:c4:35:cf:dc:1e:3d:ef:aa:8c:92:ab:5e:5b:09:8b:fa:
         c8:1e:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org