Route Origin Authorization

$ rpki-client -vvf k11.pp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          MNBFWVVwQroVYzHtvX39OrlhfMwK5687SQyabBbdOVQ=
Subject key identifier:   B0:99:BB:EA:FD:A5:50:C9:76:11:DF:53:5F:1B:BC:6D:32:02:9E:A7
Certificate issuer:       /CN=46E5B1FF0242C35C9EE500DA46513BAFBB571F17
Certificate serial:       32D93CB624A77AB68D33B34E491A0735474FEE3C
Authority key identifier: 46:E5:B1:FF:02:42:C3:5C:9E:E5:00:DA:46:51:3B:AF:BB:57:1F:17
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/46E5B1FF0242C35C9EE500DA46513BAFBB571F17.cer
Subject info access:      rsync://k11.pp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:26:12 +0000
ROA not before:           Fri 22 Mar 2024 10:21:12 +0000
ROA not after:            Fri 21 Mar 2025 10:26:12 +0000
asID:                     208162
IP address blocks:        158.220.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d9:3c:b6:24:a7:7a:b6:8d:33:b3:4e:49:1a:07:35:47:4f:ee:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E5B1FF0242C35C9EE500DA46513BAFBB571F17
        Validity
            Not Before: Mar 22 10:21:12 2024 GMT
            Not After : Mar 21 10:26:12 2025 GMT
        Subject: CN=B099BBEAFDA550C97611DF535F1BBC6D32029EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:49:65:cb:66:d3:19:1b:0b:67:e0:83:c3:31:
                    04:fb:74:c1:7b:bd:d5:2d:09:56:95:20:b4:6d:23:
                    59:54:09:36:86:78:06:ac:e9:30:d0:fa:bf:39:6a:
                    7b:dc:df:e0:ce:ae:59:cf:09:f3:97:93:23:78:c5:
                    0a:a6:c7:f8:02:94:16:8e:c5:e0:40:89:de:e5:32:
                    2d:11:09:31:4b:f6:cd:cf:4b:fb:89:2c:8e:74:cd:
                    78:cd:39:f9:aa:e3:92:ed:19:65:c2:d6:a8:57:eb:
                    c6:1b:4a:e9:97:2b:03:69:83:3f:8d:4e:0c:fd:2a:
                    08:01:42:43:f0:20:58:92:42:05:88:63:1a:ee:4e:
                    dc:e8:ca:80:3f:d0:37:f9:01:1d:3c:77:0a:eb:74:
                    fa:1c:17:e4:b4:55:1a:a6:7d:45:ad:fe:56:80:0e:
                    4f:4e:63:3d:9c:34:f5:40:93:59:49:e9:3e:3b:89:
                    cf:8d:1b:1a:8d:dc:9e:c5:bc:a6:5c:46:f1:c9:e0:
                    53:a0:85:82:eb:1d:94:1f:ef:a7:94:f2:ad:7d:d1:
                    e9:cd:b1:02:1c:55:16:6d:f6:56:b9:f1:2f:20:62:
                    68:fa:ea:8c:1e:a3:48:35:9e:e2:42:fa:f3:e6:a7:
                    94:4c:da:b3:be:4b:cb:ea:11:38:03:79:35:76:f3:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:BB:EA:FD:A5:50:C9:76:11:DF:53:5F:1B:BC:6D:32:02:9E:A7
            X509v3 Authority Key Identifier:
                keyid:46:E5:B1:FF:02:42:C3:5C:9E:E5:00:DA:46:51:3B:AF:BB:57:1F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k11.pp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/46E5B1FF0242C35C9EE500DA46513BAFBB571F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/46E5B1FF0242C35C9EE500DA46513BAFBB571F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://k11.pp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:31:f2:53:01:38:52:c6:c0:a8:74:86:46:15:7e:25:17:3c:
         bc:16:56:1f:52:2e:3b:ff:f8:1b:bd:30:2d:9f:29:2d:26:30:
         ed:1d:0c:b0:4d:bc:6a:c0:66:b8:86:07:04:5e:cf:a6:93:6f:
         53:52:c5:a0:06:26:f1:5d:4c:6b:d2:db:16:58:54:6a:53:02:
         25:f3:ad:df:8c:8f:13:e1:eb:ed:4f:a3:32:74:9d:9a:7e:b5:
         9f:7c:e6:f4:e6:e1:e8:84:99:6c:ac:59:43:ac:fa:aa:93:3f:
         f5:02:dc:a2:8e:01:a1:c4:c5:b6:98:b3:21:2a:8d:b8:b6:79:
         6f:dc:e3:41:3a:8f:37:8c:d8:f0:6f:b8:f6:37:2c:6c:e1:62:
         05:d1:fb:bc:3d:9e:52:36:10:4f:4d:f1:4c:7b:94:12:a3:d4:
         45:e0:bc:d3:3a:32:4f:ee:e4:18:2c:26:64:ae:d8:a1:29:cc:
         69:73:77:0f:07:eb:df:da:c6:17:bf:a9:f6:f9:68:db:27:01:
         85:36:b1:1c:a6:af:d0:2f:05:58:e7:66:98:37:e4:10:c5:73:
         3c:54:01:34:83:4e:e4:5f:3b:34:66:f9:40:bc:d9:88:f2:ee:
         16:62:e6:20:f2:5e:a1:a7:bf:11:14:c1:86:6f:3b:2e:08:3f:
         e0:bb:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:52 2024 by rpki-client on console-ams.rpki-client.org