Route Origin Authorization

$ rpki-client -vvf k04.pp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          wq/Q2UoG843gVhGHOWdrRmZPa36VCsW12ufVSm5zQoM=
Subject key identifier:   44:52:2D:FC:2E:2D:38:14:D3:4B:6B:88:AA:57:5F:B9:55:5A:14:C1
Certificate issuer:       /CN=4E9E5F9A4FB40062FDACBA5FDAEC2B7D36BD2A8F
Certificate serial:       2ACB7594C8515E3051FD7FD2F733E02B2C4C5B71
Authority key identifier: 4E:9E:5F:9A:4F:B4:00:62:FD:AC:BA:5F:DA:EC:2B:7D:36:BD:2A:8F
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/4E9E5F9A4FB40062FDACBA5FDAEC2B7D36BD2A8F.cer
Subject info access:      rsync://k04.pp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:18:02 +0000
ROA not before:           Fri 22 Mar 2024 10:13:02 +0000
ROA not after:            Fri 21 Mar 2025 10:18:02 +0000
asID:                     208162
IP address blocks:        158.220.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:75:94:c8:51:5e:30:51:fd:7f:d2:f7:33:e0:2b:2c:4c:5b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E9E5F9A4FB40062FDACBA5FDAEC2B7D36BD2A8F
        Validity
            Not Before: Mar 22 10:13:02 2024 GMT
            Not After : Mar 21 10:18:02 2025 GMT
        Subject: CN=44522DFC2E2D3814D34B6B88AA575FB9555A14C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:6d:15:87:f8:dc:44:59:7a:97:34:a0:e0:
                    07:8c:ae:65:28:71:5a:53:19:34:91:bd:ae:87:55:
                    16:60:19:4f:d7:03:e2:5c:01:bf:b1:53:8a:45:7e:
                    f6:85:04:6b:dc:e0:1b:43:fe:1a:a2:53:e2:9f:bd:
                    e6:f6:9f:b6:49:10:48:d6:fd:15:52:63:e8:b9:14:
                    bf:06:9a:a9:16:9a:50:9b:a0:48:72:60:ae:bc:7b:
                    e5:ea:9d:de:7b:aa:ae:c6:d7:ab:33:b1:93:dc:c4:
                    4b:c4:49:0e:d5:e5:56:de:bd:d9:4d:54:b5:b0:21:
                    c6:b3:8a:8d:10:c0:bf:8d:83:91:0c:d1:1d:27:df:
                    32:71:61:ac:cf:8d:38:7a:51:d8:4d:d2:8f:96:61:
                    74:be:67:b5:18:13:57:82:c7:57:ca:d7:a5:c0:71:
                    a4:9a:26:71:82:3c:bb:08:40:81:4b:4d:18:b4:3e:
                    f1:52:62:2b:65:4f:e3:15:1d:0a:31:83:6f:a8:b8:
                    04:c8:11:c5:a1:6b:14:f2:fe:ff:63:73:f2:c7:bc:
                    ce:c5:17:8d:92:8c:37:e5:b8:8f:7f:07:55:45:ce:
                    6e:9b:43:2f:5f:38:47:d4:eb:bf:70:99:a0:88:0b:
                    7f:26:5e:be:b4:9c:04:d5:5f:80:6d:bc:a9:c3:bf:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:2D:FC:2E:2D:38:14:D3:4B:6B:88:AA:57:5F:B9:55:5A:14:C1
            X509v3 Authority Key Identifier:
                keyid:4E:9E:5F:9A:4F:B4:00:62:FD:AC:BA:5F:DA:EC:2B:7D:36:BD:2A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k04.pp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/4E9E5F9A4FB40062FDACBA5FDAEC2B7D36BD2A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/4E9E5F9A4FB40062FDACBA5FDAEC2B7D36BD2A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://k04.pp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:3f:fc:49:ae:f3:c5:54:2f:b2:37:ff:3e:92:0c:92:71:24:
         cd:ea:8a:9f:51:52:fb:94:d1:c5:a0:8d:7e:07:ca:7b:dc:a6:
         8c:29:a8:0d:2a:40:a8:97:5f:30:79:65:41:d4:c7:4a:f4:d0:
         96:b9:31:9e:e2:2a:f5:08:a0:65:bb:91:f9:44:0a:64:ed:15:
         ce:70:4b:d7:a9:42:bb:d9:d8:69:94:e0:d5:f5:5e:cd:62:96:
         d8:26:ee:eb:9f:6e:05:67:f8:29:c9:59:41:1c:11:c5:e2:a2:
         7e:bf:28:0a:fc:0b:05:a4:20:d3:3f:c9:0b:94:da:de:05:0f:
         e0:42:1f:44:d9:48:36:ec:2e:f8:23:d1:72:73:8d:cb:43:72:
         81:6d:32:54:f5:20:c9:ca:37:40:21:af:e4:1a:77:60:5c:85:
         53:a0:18:12:7c:98:8b:16:33:c8:5a:7f:88:18:8c:ee:88:f6:
         ba:5b:61:54:d9:57:7a:a3:95:ff:7c:84:03:b1:b2:03:0e:ab:
         81:d9:ca:85:ea:fb:1e:18:6e:23:29:3c:bd:58:d5:0a:cc:89:
         f4:85:bc:6b:79:71:4c:ef:06:f3:16:cd:a1:85:a2:53:06:38:
         19:e5:2c:0e:e0:e6:cc:28:04:95:98:d2:7f:78:d5:92:f6:4b:
         9e:13:d8:29
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUKst1lMhRXjBR/X/S9zPgKyxMW3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU5RTVGOUE0RkI0MDA2MkZEQUNCQTVGREFFQzJCN0Qz
NkJEMkE4RjAeFw0yNDAzMjIxMDEzMDJaFw0yNTAzMjExMDE4MDJaMDMxMTAvBgNV
BAMTKDQ0NTIyREZDMkUyRDM4MTREMzRCNkI4OEFBNTc1RkI5NTU1QTE0QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJ20Vh/jcRFl6lzSg4AeMrmUo
cVpTGTSRva6HVRZgGU/XA+JcAb+xU4pFfvaFBGvc4BtD/hqiU+Kfveb2n7ZJEEjW
/RVSY+i5FL8GmqkWmlCboEhyYK68e+Xqnd57qq7G16szsZPcxEvESQ7V5VbevdlN
VLWwIcazio0QwL+Ng5EM0R0n3zJxYazPjTh6UdhN0o+WYXS+Z7UYE1eCx1fK16XA
caSaJnGCPLsIQIFLTRi0PvFSYitlT+MVHQoxg2+ouATIEcWhaxTy/v9jc/LHvM7F
F42SjDfluI9/B1VFzm6bQy9fOEfU679wmaCIC38mXr60nATVX4BtvKnDv5zhAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQURFIt/C4tOBTTS2uIqldfuVVaFMEwHwYDVR0j
BBgwFoAUTp5fmk+0AGL9rLpf2uwrfTa9Ko8wDgYDVR0PAQH/BAQDAgeAMIGBBgNV
HR8EejB4MHagdKByhnByc3luYzovL2swNC5wcC1ycGtpLmF0aGVuZS1jZW50ZXIu
bmV0L3JlcG8vazA0LXJwa2ktYXRoZW5lLWNlbnRlci8wLzRFOUU1RjlBNEZCNDAw
NjJGREFDQkE1RkRBRUMyQjdEMzZCRDJBOEYuY3JsMIGNBggrBgEFBQcBAQSBgDB+
MHwGCCsGAQUFBzAChnByc3luYzovL2swMC5wcC1ycGtpLmF0aGVuZS1jZW50ZXIu
bmV0L3JlcG8vazAwLXJwa2ktYXRoZW5lLWNlbnRlci8wLzRFOUU1RjlBNEZCNDAw
NjJGREFDQkE1RkRBRUMyQjdEMzZCRDJBOEYuY2VyMIGiBggrBgEFBQcBCwSBlTCB
kjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL2swNC5wcC1ycGtpLmF0aGVuZS1jZW50
ZXIubmV0L3JlcG8vazA0LXJwa2ktYXRoZW5lLWNlbnRlci8wLzMxMzUzODJlMzIz
MjMwMmUzMTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACe3IUwDQYJKoZIhvcNAQELBQADggEBALc//Emu88VUL7I3/z6S
DJJxJM3qip9RUvuU0cWgjX4HynvcpowpqA0qQKiXXzB5ZUHUx0r00Ja5MZ7iKvUI
oGW7kflECmTtFc5wS9epQrvZ2GmU4NX1Xs1iltgm7uufbgVn+CnJWUEcEcXion6/
KAr8CwWkINM/yQuU2t4FD+BCH0TZSDbsLvgj0XJzjctDcoFtMlT1IMnKN0Ahr+Qa
d2BchVOgGBJ8mIsWM8haf4gYjO6I9rpbYVTZV3qjlf98hAOxsgMOq4HZyoXq+x4Y
biMpPL1Y1QrMifSFvGt5cUzvBvMWzaGFolMGOBnlLA7g5swoBJWY0n941ZL2S54T
2Ck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org