Route Origin Authorization

$ rpki-client -vvf k10.pp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          CraRyTWSATsjgaZULDqBDnVbzjjENuBuX6aI8rUlAQA=
Subject key identifier:   65:90:7C:D1:10:1F:78:07:4B:61:26:CA:A0:2D:FD:9F:AB:76:AE:97
Certificate issuer:       /CN=1804B04CDD739094126A15E0F10458FB6A5E7450
Certificate serial:       17912ED4D01E3F068075E845FB23BB75709E5C22
Authority key identifier: 18:04:B0:4C:DD:73:90:94:12:6A:15:E0:F1:04:58:FB:6A:5E:74:50
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1804B04CDD739094126A15E0F10458FB6A5E7450.cer
Subject info access:      rsync://k10.pp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:26:01 +0000
ROA not before:           Fri 22 Mar 2024 10:21:01 +0000
ROA not after:            Fri 21 Mar 2025 10:26:01 +0000
asID:                     208162
IP address blocks:        158.220.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:91:2e:d4:d0:1e:3f:06:80:75:e8:45:fb:23:bb:75:70:9e:5c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1804B04CDD739094126A15E0F10458FB6A5E7450
        Validity
            Not Before: Mar 22 10:21:01 2024 GMT
            Not After : Mar 21 10:26:01 2025 GMT
        Subject: CN=65907CD1101F78074B6126CAA02DFD9FAB76AE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:a5:82:9e:a0:90:34:9a:31:ca:5b:b8:6e:
                    89:3d:08:68:98:3f:3f:9c:4b:85:02:3c:1c:fe:81:
                    83:ce:25:dc:52:cf:43:01:3e:8a:6e:71:6d:61:55:
                    5a:af:b2:42:7e:d7:fa:71:da:1f:4a:31:d2:c8:01:
                    0e:e9:42:42:dd:a5:d6:dd:92:ed:85:1c:9a:32:97:
                    05:12:40:a7:38:87:fe:36:a5:34:75:2e:a9:9c:4a:
                    b9:89:20:71:f5:35:2a:8f:49:09:61:ba:ee:2a:ab:
                    7a:15:51:63:4d:eb:24:91:e5:1e:43:43:63:80:f9:
                    dc:15:d0:a0:b9:ff:43:07:e3:ae:e5:26:0b:c9:91:
                    16:88:8d:86:34:2c:ea:3e:86:88:5e:d5:2c:eb:d3:
                    8d:25:78:3c:40:96:b5:fe:71:12:ea:fb:e4:02:bd:
                    d6:0e:95:48:53:ca:12:db:19:eb:a7:c0:2e:7d:a6:
                    c1:be:83:da:97:99:67:ba:69:7c:09:5c:8b:d3:72:
                    d0:35:f0:e0:ff:f0:a0:3e:ef:72:8b:03:54:e1:0e:
                    e2:ef:80:7b:7d:e6:29:de:8e:1b:78:cf:38:32:34:
                    4e:4d:20:27:64:55:f3:fc:03:df:a9:9e:30:02:dd:
                    59:fb:77:39:75:0f:c2:b8:ad:b9:48:34:06:6b:05:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:90:7C:D1:10:1F:78:07:4B:61:26:CA:A0:2D:FD:9F:AB:76:AE:97
            X509v3 Authority Key Identifier:
                keyid:18:04:B0:4C:DD:73:90:94:12:6A:15:E0:F1:04:58:FB:6A:5E:74:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k10.pp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/1804B04CDD739094126A15E0F10458FB6A5E7450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1804B04CDD739094126A15E0F10458FB6A5E7450.cer

            Subject Information Access:
                Signed Object - URI:rsync://k10.pp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ab:72:0f:66:4f:42:75:3e:46:d7:c4:66:aa:07:9d:39:2a:
         ff:fa:26:b5:77:30:7c:53:37:46:58:62:d8:af:12:f2:24:db:
         b7:76:44:e2:9d:af:5e:7e:fb:bc:fc:d5:57:eb:65:9f:45:cb:
         a6:44:73:bb:83:e4:6b:bb:ca:fa:fd:82:ee:1c:d4:27:6f:17:
         4a:12:4f:a1:33:34:95:d9:f2:6b:c5:34:b0:fd:20:f5:11:7b:
         c9:58:ab:7c:8c:21:27:31:d1:d2:33:2b:54:1c:91:18:6f:bc:
         b1:bd:f0:9c:d6:20:6f:48:57:c4:a8:74:73:48:0b:6e:20:53:
         16:67:80:fb:40:13:c1:90:24:2f:b6:bc:63:79:09:78:ca:cd:
         97:e8:bb:ce:1f:64:92:3e:a8:ab:42:7a:e3:ad:cc:62:04:b1:
         cc:cf:4d:00:75:bb:11:d0:ad:ea:7e:98:3e:84:23:bb:44:2c:
         c6:75:a1:7a:52:5b:4d:a0:74:72:40:29:d4:81:d2:c0:fc:4b:
         b9:04:7a:ab:45:19:04:81:e1:7a:71:4d:fc:b9:1b:b6:ac:84:
         d5:99:6a:45:79:03:b7:08:13:8e:ea:19:f1:ad:69:82:0b:d3:
         99:30:84:86:c2:9c:f1:45:51:ce:32:de:78:38:37:d2:b3:a3:
         4d:9b:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org