Route Origin Authorization

$ rpki-client -vvf k10.rrdp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          z1In1J1rMFR5tzTEgvBW0m0HvK3kKCV1ZQ8oot/qVBo=
Subject key identifier:   44:61:82:00:1E:C9:F2:9F:CB:D7:6C:9D:5F:19:04:A8:B7:82:89:4E
Certificate issuer:       /CN=B3615DF01BEF38DBA10EAE3D93939F4297D6F699
Certificate serial:       4B932009A684844289D2F7431BF815715E81A340
Authority key identifier: B3:61:5D:F0:1B:EF:38:DB:A1:0E:AE:3D:93:93:9F:42:97:D6:F6:99
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B3615DF01BEF38DBA10EAE3D93939F4297D6F699.cer
Subject info access:      rsync://k10.rrdp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:39:36 +0000
ROA not before:           Wed 27 Mar 2024 19:34:36 +0000
ROA not after:            Wed 26 Mar 2025 19:39:36 +0000
asID:                     208162
IP address blocks:        158.220.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:93:20:09:a6:84:84:42:89:d2:f7:43:1b:f8:15:71:5e:81:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3615DF01BEF38DBA10EAE3D93939F4297D6F699
        Validity
            Not Before: Mar 27 19:34:36 2024 GMT
            Not After : Mar 26 19:39:36 2025 GMT
        Subject: CN=446182001EC9F29FCBD76C9D5F1904A8B782894E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:26:e6:99:bb:50:b9:da:3a:54:16:a9:d1:
                    01:0a:17:96:ca:e0:d4:cd:bd:3f:7d:d7:63:44:fb:
                    66:a2:c6:9c:9f:c3:60:4f:92:92:cb:f9:52:de:a4:
                    5c:0c:ab:fb:5f:a5:1f:c9:2f:94:8c:b3:d4:d1:89:
                    51:76:36:24:69:73:85:7d:19:64:e2:aa:8d:6a:3c:
                    80:c1:3c:4b:39:ea:16:c7:2c:47:6f:5e:ab:07:fd:
                    ea:30:0f:19:fa:44:38:83:fe:6a:67:27:bd:38:b4:
                    1d:f5:7d:f6:26:4e:d2:0c:bf:6b:52:d6:49:6d:d3:
                    05:ab:f7:36:c3:91:e7:82:30:34:bc:cd:b9:fe:70:
                    0e:20:38:17:c4:42:66:47:86:75:42:10:91:da:0a:
                    72:df:b1:e3:f2:c5:74:ab:a4:67:a9:18:fb:12:23:
                    f5:98:a8:87:c6:0a:8a:da:c2:2b:b9:27:43:0b:cb:
                    9e:10:89:ef:75:af:bf:86:8d:d9:17:af:2f:cb:79:
                    e2:47:4d:97:ca:2e:56:a0:f9:b7:c6:76:59:56:60:
                    f4:0d:df:51:71:a7:b9:1b:d5:62:ba:25:a7:3f:3d:
                    dd:9b:c1:af:3c:21:0b:4e:22:59:18:21:61:f6:56:
                    12:c5:15:90:f8:2c:eb:d9:02:29:a0:1e:8c:f0:3a:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:61:82:00:1E:C9:F2:9F:CB:D7:6C:9D:5F:19:04:A8:B7:82:89:4E
            X509v3 Authority Key Identifier:
                keyid:B3:61:5D:F0:1B:EF:38:DB:A1:0E:AE:3D:93:93:9F:42:97:D6:F6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k10.rrdp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/B3615DF01BEF38DBA10EAE3D93939F4297D6F699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B3615DF01BEF38DBA10EAE3D93939F4297D6F699.cer

            Subject Information Access:
                Signed Object - URI:rsync://k10.rrdp-rpki.athene-center.net/repo/k10-rpki-athene-center/0/3135382e3232302e3133392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:60:3f:2b:d7:7b:ce:5e:4e:9b:fb:fb:6f:50:87:b7:02:
         c1:17:41:ad:d8:51:d0:10:0c:44:10:44:97:f5:a2:48:78:d4:
         d4:57:1b:f8:01:ff:a0:c1:a9:25:8e:b0:fa:90:87:d3:3d:42:
         d8:54:53:95:20:af:a0:a5:9e:5f:bc:3c:6c:c0:c2:ad:f1:7d:
         04:c4:ee:cd:99:17:63:3e:d0:02:a6:7d:45:d4:37:c7:67:44:
         5a:59:d0:94:7b:35:f4:35:9b:02:27:87:e3:ca:ca:e0:ca:b9:
         1d:d0:64:29:86:49:de:3d:1c:ba:42:1d:be:42:e6:6e:69:d3:
         ab:55:a9:7a:24:c4:65:b1:9b:ba:e9:78:43:31:8a:05:d2:b6:
         f1:28:ee:16:66:70:a9:7a:e2:60:ca:37:48:94:65:18:7f:98:
         bd:62:e9:74:93:10:58:d0:0b:7a:10:40:d6:7e:cd:37:dc:43:
         00:b6:a4:05:7c:89:eb:1a:96:e4:15:b6:a9:0e:c9:ca:1b:d7:
         34:f2:2b:73:87:37:86:3d:fb:26:66:46:ed:f5:ee:83:4c:cb:
         70:05:73:c0:c5:04:78:86:3d:f4:b5:dd:76:8e:7d:f3:a7:7f:
         a9:b2:fe:2a:cb:82:7f:7a:77:9b:f6:01:18:e1:00:64:a6:3b:
         af:2a:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org