Route Origin Authorization

$ rpki-client -vvf k09.pp-rpki.athene-center.net/repo/k09-rpki-athene-center/0/3135382e3232302e3133382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          tZBKM+77R6qpP5EC9d0N886Wb3uYAdEIYaJ+/taeKvE=
Subject key identifier:   56:23:82:B6:3D:C7:76:F3:EC:AC:99:64:C6:88:54:14:1E:5A:85:6A
Certificate issuer:       /CN=0097B465D820BAF7C51169C55577036BABB5F393
Certificate serial:       52DD023C9D9092C27CAA8D7C0F6EDA1D64CA11C3
Authority key identifier: 00:97:B4:65:D8:20:BA:F7:C5:11:69:C5:55:77:03:6B:AB:B5:F3:93
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0097B465D820BAF7C51169C55577036BABB5F393.cer
Subject info access:      rsync://k09.pp-rpki.athene-center.net/repo/k09-rpki-athene-center/0/3135382e3232302e3133382e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:25:50 +0000
ROA not before:           Fri 22 Mar 2024 10:20:50 +0000
ROA not after:            Fri 21 Mar 2025 10:25:50 +0000
asID:                     208162
IP address blocks:        158.220.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:dd:02:3c:9d:90:92:c2:7c:aa:8d:7c:0f:6e:da:1d:64:ca:11:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0097B465D820BAF7C51169C55577036BABB5F393
        Validity
            Not Before: Mar 22 10:20:50 2024 GMT
            Not After : Mar 21 10:25:50 2025 GMT
        Subject: CN=562382B63DC776F3ECAC9964C68854141E5A856A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:2b:67:2c:0e:77:e5:30:30:c2:85:8d:75:
                    21:63:18:7d:8a:11:cd:12:d3:91:1e:38:40:48:cd:
                    35:af:6e:16:ab:72:b4:01:45:74:3c:43:50:e3:29:
                    04:49:62:c0:b1:a2:54:64:8d:7c:33:8d:05:37:b2:
                    c8:b2:0c:5b:03:7b:05:b0:c3:c1:3e:bd:a3:21:55:
                    b9:c2:bb:95:b2:f5:7d:b4:57:cb:88:d7:6c:4b:3f:
                    5b:cf:95:0d:b4:f5:6e:26:4f:d9:27:5a:68:ef:c4:
                    b6:7b:5f:e2:82:62:f4:76:6f:8b:f4:40:1a:51:13:
                    a0:78:f4:75:b2:93:e8:55:d2:06:7d:bf:b6:50:64:
                    f3:d6:ea:5a:a0:29:49:6e:36:9e:c8:78:ce:e3:0f:
                    99:34:40:90:fc:8e:ed:5d:27:5c:fe:df:b1:b2:dc:
                    05:85:79:d6:f7:9a:19:36:2b:c2:1b:5a:e0:f4:70:
                    1a:6a:75:0a:46:e8:d2:a6:b7:ea:ce:cf:20:b1:4d:
                    f5:a9:46:8a:c2:b9:c8:97:a3:1a:3a:51:cb:cb:39:
                    9b:d1:b0:3c:26:6e:7c:a0:41:e5:be:f8:44:3a:6e:
                    11:dd:ed:e8:63:a9:8b:81:0b:8c:14:3b:5c:a2:2c:
                    d4:f2:de:f9:3d:d6:f1:19:6b:86:82:9d:1c:e1:7b:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:82:B6:3D:C7:76:F3:EC:AC:99:64:C6:88:54:14:1E:5A:85:6A
            X509v3 Authority Key Identifier:
                keyid:00:97:B4:65:D8:20:BA:F7:C5:11:69:C5:55:77:03:6B:AB:B5:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k09.pp-rpki.athene-center.net/repo/k09-rpki-athene-center/0/0097B465D820BAF7C51169C55577036BABB5F393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0097B465D820BAF7C51169C55577036BABB5F393.cer

            Subject Information Access:
                Signed Object - URI:rsync://k09.pp-rpki.athene-center.net/repo/k09-rpki-athene-center/0/3135382e3232302e3133382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:95:49:65:bf:c4:27:8c:f8:e8:ca:8e:41:f1:6e:7f:cb:
         e8:cb:3d:1e:4c:57:db:5f:be:3e:1a:ad:98:31:ec:ec:66:ac:
         a0:37:a7:66:51:6b:63:fd:07:43:42:95:b3:20:62:18:92:15:
         74:14:3c:db:94:56:eb:62:6d:c4:31:a6:c9:3b:1b:47:e5:14:
         a7:31:2f:86:a8:26:2a:9e:b5:97:f1:68:4c:38:90:9b:dc:bd:
         07:ea:6a:d9:3a:35:48:db:d7:6f:d4:30:16:8d:98:42:ba:17:
         3e:09:d7:a2:07:ac:7a:ea:79:0f:17:74:60:64:ba:90:7a:53:
         e3:f2:09:e1:59:2d:d7:55:c4:97:ec:91:d4:88:ce:05:54:10:
         6a:38:d6:b9:b9:a8:fe:0b:3b:a9:6d:af:0b:a6:89:9a:c3:43:
         13:5b:6f:9f:2e:0f:76:70:8e:4f:f9:3c:e9:f3:1d:7b:9d:04:
         ed:f7:66:24:6f:c4:2a:85:1a:7e:ac:20:64:fc:d0:2b:85:a6:
         e5:ce:2f:4f:3b:11:85:72:e6:fb:04:5f:51:74:85:3c:97:c4:
         f5:eb:43:c4:76:f5:c9:75:d6:42:9c:ff:d7:ad:cf:a8:ee:35:
         6a:e4:42:e8:95:0e:e6:50:cd:d8:ea:18:31:0e:01:55:f5:dd:
         3b:f1:7d:fe
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUUt0CPJ2QksJ8qo18D27aHWTKEcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA5N0I0NjVEODIwQkFGN0M1MTE2OUM1NTU3NzAzNkJB
QkI1RjM5MzAeFw0yNDAzMjIxMDIwNTBaFw0yNTAzMjExMDI1NTBaMDMxMTAvBgNV
BAMTKDU2MjM4MkI2M0RDNzc2RjNFQ0FDOTk2NEM2ODg1NDE0MUU1QTg1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMitnLA535TAwwoWNdSFjGH2K
Ec0S05EeOEBIzTWvbharcrQBRXQ8Q1DjKQRJYsCxolRkjXwzjQU3ssiyDFsDewWw
w8E+vaMhVbnCu5Wy9X20V8uI12xLP1vPlQ209W4mT9knWmjvxLZ7X+KCYvR2b4v0
QBpRE6B49HWyk+hV0gZ9v7ZQZPPW6lqgKUluNp7IeM7jD5k0QJD8ju1dJ1z+37Gy
3AWFedb3mhk2K8IbWuD0cBpqdQpG6NKmt+rOzyCxTfWpRorCuciXoxo6UcvLOZvR
sDwmbnygQeW++EQ6bhHd7ehjqYuBC4wUO1yiLNTy3vk91vEZa4aCnRzhe8jxAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUViOCtj3HdvPsrJlkxohUFB5ahWowHwYDVR0j
BBgwFoAUAJe0ZdgguvfFEWnFVXcDa6u185MwDgYDVR0PAQH/BAQDAgeAMIGBBgNV
HR8EejB4MHagdKByhnByc3luYzovL2swOS5wcC1ycGtpLmF0aGVuZS1jZW50ZXIu
bmV0L3JlcG8vazA5LXJwa2ktYXRoZW5lLWNlbnRlci8wLzAwOTdCNDY1RDgyMEJB
RjdDNTExNjlDNTU1NzcwMzZCQUJCNUYzOTMuY3JsMIGNBggrBgEFBQcBAQSBgDB+
MHwGCCsGAQUFBzAChnByc3luYzovL2swMC5wcC1ycGtpLmF0aGVuZS1jZW50ZXIu
bmV0L3JlcG8vazAwLXJwa2ktYXRoZW5lLWNlbnRlci8wLzAwOTdCNDY1RDgyMEJB
RjdDNTExNjlDNTU1NzcwMzZCQUJCNUYzOTMuY2VyMIGiBggrBgEFBQcBCwSBlTCB
kjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL2swOS5wcC1ycGtpLmF0aGVuZS1jZW50
ZXIubmV0L3JlcG8vazA5LXJwa2ktYXRoZW5lLWNlbnRlci8wLzMxMzUzODJlMzIz
MjMwMmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMTM2MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACe3IowDQYJKoZIhvcNAQELBQADggEBABnvlUllv8QnjPjoyo5B
8W5/y+jLPR5MV9tfvj4arZgx7OxmrKA3p2ZRa2P9B0NClbMgYhiSFXQUPNuUVuti
bcQxpsk7G0flFKcxL4aoJiqetZfxaEw4kJvcvQfqatk6NUjb12/UMBaNmEK6Fz4J
16IHrHrqeQ8XdGBkupB6U+PyCeFZLddVxJfskdSIzgVUEGo41rm5qP4LO6ltrwum
iZrDQxNbb58uD3Zwjk/5POnzHXudBO33ZiRvxCqFGn6sIGT80CuFpuXOL087EYVy
5vsEX1F0hTyXxPXrQ8R29cl11kKc/9etz6juNWrkQuiVDuZQzdjqGDEOAVX13Tvx
ff4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org