Route Origin Authorization

$ rpki-client -vvf k07.rrdp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          E4esmX7uXdcv7WbMx2N4IR9fPqOxebyzEPflw7oj6+w=
Subject key identifier:   46:9B:E5:2B:60:2C:3D:5A:19:02:61:15:9F:94:C8:44:61:4F:9C:CE
Certificate issuer:       /CN=00D308C3C0C5D0A1FD291EBABC94A6C7E501E262
Certificate serial:       0310219CCD9799A29904332FA79C5C8E2C7E3E25
Authority key identifier: 00:D3:08:C3:C0:C5:D0:A1:FD:29:1E:BA:BC:94:A6:C7:E5:01:E2:62
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/00D308C3C0C5D0A1FD291EBABC94A6C7E501E262.cer
Subject info access:      rsync://k07.rrdp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:39:02 +0000
ROA not before:           Wed 27 Mar 2024 19:34:02 +0000
ROA not after:            Wed 26 Mar 2025 19:39:02 +0000
asID:                     208162
IP address blocks:        158.220.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:21:9c:cd:97:99:a2:99:04:33:2f:a7:9c:5c:8e:2c:7e:3e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00D308C3C0C5D0A1FD291EBABC94A6C7E501E262
        Validity
            Not Before: Mar 27 19:34:02 2024 GMT
            Not After : Mar 26 19:39:02 2025 GMT
        Subject: CN=469BE52B602C3D5A190261159F94C844614F9CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:f4:85:b2:62:e1:08:e6:f1:9d:da:c5:c9:
                    df:a7:5e:1a:c7:25:e0:1b:9d:b9:ec:27:5c:9d:ce:
                    c9:c4:de:00:77:b5:86:5b:41:94:19:2e:d9:db:83:
                    90:da:65:9b:59:ca:ce:b4:70:88:c6:18:c7:4a:58:
                    c3:06:f2:14:0c:e2:22:40:fc:73:cb:70:f4:b4:38:
                    98:e3:39:32:77:21:ae:1d:d0:4a:6e:50:22:cd:3f:
                    21:e7:84:57:aa:f4:ea:a0:ae:98:25:0f:34:b6:d4:
                    33:31:2b:a6:8b:72:63:06:01:4b:8d:2c:37:72:16:
                    ab:a7:c7:3b:9e:46:7d:dc:56:d4:a9:2f:9f:02:67:
                    46:1c:56:c8:08:c3:dd:3d:e7:0b:1b:6f:e4:44:ec:
                    e6:1e:91:39:b2:87:5c:50:6c:b7:6b:7d:30:08:a9:
                    b9:d2:7a:f1:2f:7a:52:d2:13:21:c4:2d:02:1d:a5:
                    d9:41:fc:3f:2f:58:7d:66:a7:5e:7f:fa:7f:48:63:
                    54:2d:f7:a5:dc:06:15:f7:1c:84:0d:9d:23:74:3b:
                    15:d0:6c:8a:94:6a:44:c9:7e:d7:31:f7:c9:cb:7c:
                    f0:ee:4c:09:1e:96:8a:bc:71:9d:5c:dd:c2:ca:bb:
                    35:18:71:a8:a3:ec:a8:38:0b:5a:bd:74:93:fb:09:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9B:E5:2B:60:2C:3D:5A:19:02:61:15:9F:94:C8:44:61:4F:9C:CE
            X509v3 Authority Key Identifier:
                keyid:00:D3:08:C3:C0:C5:D0:A1:FD:29:1E:BA:BC:94:A6:C7:E5:01:E2:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k07.rrdp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/00D308C3C0C5D0A1FD291EBABC94A6C7E501E262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/00D308C3C0C5D0A1FD291EBABC94A6C7E501E262.cer

            Subject Information Access:
                Signed Object - URI:rsync://k07.rrdp-rpki.athene-center.net/repo/k07-rpki-athene-center/0/3135382e3232302e3133362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:bb:14:af:c5:d5:6a:3a:b7:53:c0:33:05:36:20:3b:91:
         93:46:5f:35:9c:fb:27:d9:46:12:b6:8f:d2:b9:11:c9:21:3f:
         e8:14:87:0a:29:e3:30:a2:d9:3c:0c:ae:a7:70:25:63:c5:48:
         3c:63:35:d6:f0:e4:e0:57:17:0f:79:99:a6:d9:d0:8b:f9:12:
         cd:e1:94:8f:99:87:56:49:9e:d0:17:b1:ba:0a:6a:19:c6:59:
         27:ae:21:dc:86:5c:5c:5e:eb:1d:27:ee:d8:c4:0e:70:31:fa:
         d8:e2:69:a3:c3:a1:77:f2:ad:3a:fd:93:b4:48:47:03:26:14:
         25:e4:eb:c0:00:81:0a:ba:47:12:d0:00:fe:c6:30:03:4c:b9:
         6c:4a:fd:c0:5d:6f:cb:e2:fe:7c:5c:45:a8:c6:83:c4:88:db:
         a1:ce:91:d6:e9:ce:20:f4:63:12:e9:8d:2f:e0:8e:c7:3a:6c:
         1c:0f:5c:45:3a:7f:93:5e:e9:d9:11:ea:ac:82:f3:13:90:47:
         03:d8:b1:44:14:97:a7:71:c1:d6:95:e1:c7:b6:85:e0:4b:f7:
         a9:10:86:e5:ed:59:c0:6f:e1:fd:ec:c3:c9:4c:83:05:8c:a7:
         ba:a3:4d:f8:48:67:b8:76:d0:de:41:b7:89:7e:58:da:d9:98:
         78:94:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org