Route Origin Authorization

$ rpki-client -vvf k11.rrdp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          aj7/yjduT5rcockZwtcmqGs7SewBfQXpiBPSUICmbII=
Subject key identifier:   DC:60:B4:86:D2:E7:72:2F:72:5A:86:51:7E:49:9C:B7:D5:2C:79:78
Certificate issuer:       /CN=F96E64D7F120AFB73405CED5D346902A496B69C8
Certificate serial:       34F087B366C93B6EFAFABB8E6DBB84AD695447C3
Authority key identifier: F9:6E:64:D7:F1:20:AF:B7:34:05:CE:D5:D3:46:90:2A:49:6B:69:C8
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/F96E64D7F120AFB73405CED5D346902A496B69C8.cer
Subject info access:      rsync://k11.rrdp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:39:48 +0000
ROA not before:           Wed 27 Mar 2024 19:34:48 +0000
ROA not after:            Wed 26 Mar 2025 19:39:48 +0000
asID:                     208162
IP address blocks:        158.220.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:87:b3:66:c9:3b:6e:fa:fa:bb:8e:6d:bb:84:ad:69:54:47:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F96E64D7F120AFB73405CED5D346902A496B69C8
        Validity
            Not Before: Mar 27 19:34:48 2024 GMT
            Not After : Mar 26 19:39:48 2025 GMT
        Subject: CN=DC60B486D2E7722F725A86517E499CB7D52C7978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:6c:d7:9c:a0:17:fd:38:e4:dc:42:83:4c:
                    71:6b:bb:c4:97:bc:85:59:1d:d7:e1:5e:96:c0:22:
                    41:e1:06:9e:36:47:3b:88:55:43:1a:b8:a8:72:28:
                    ea:66:eb:f9:9b:ae:5e:3e:3e:20:d2:67:7c:aa:ff:
                    a5:79:a9:b5:cb:41:8c:b4:b4:1e:44:cd:b3:3b:25:
                    a7:ab:5b:a2:2b:6e:21:bc:0c:76:b5:5b:e9:3b:f3:
                    b2:5f:22:59:b6:00:07:ef:36:6b:ff:96:01:75:fb:
                    28:b2:33:a1:19:81:27:ff:70:80:3f:2e:4b:41:57:
                    ef:5b:d4:23:15:10:ea:a0:4d:ca:5c:e0:12:4c:49:
                    32:25:4d:9f:39:41:e6:d5:68:a7:e4:9b:45:29:8b:
                    5e:56:14:2a:25:5f:c3:a7:2a:90:0d:e4:f2:7c:06:
                    b8:3d:05:7b:8c:9c:9b:88:00:73:a1:14:fe:63:5d:
                    38:d8:0b:52:30:41:67:8c:b9:1e:c0:ba:fc:ab:11:
                    30:b4:ae:f2:73:bc:cc:26:08:ad:33:11:d0:d0:87:
                    c5:78:28:0e:8b:ea:e0:f6:33:67:da:00:ac:03:29:
                    b4:c3:51:aa:6b:63:88:5a:31:1e:03:64:a9:57:0a:
                    06:6b:76:08:df:27:1a:4b:af:8b:5e:33:cc:29:3c:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:B4:86:D2:E7:72:2F:72:5A:86:51:7E:49:9C:B7:D5:2C:79:78
            X509v3 Authority Key Identifier:
                keyid:F9:6E:64:D7:F1:20:AF:B7:34:05:CE:D5:D3:46:90:2A:49:6B:69:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k11.rrdp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/F96E64D7F120AFB73405CED5D346902A496B69C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/F96E64D7F120AFB73405CED5D346902A496B69C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://k11.rrdp-rpki.athene-center.net/repo/k11-rpki-athene-center/0/3135382e3232302e3134302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:24:4a:3a:91:2a:07:15:92:30:9d:05:db:97:a2:55:5e:
         fb:10:88:cb:f3:c8:63:14:b8:1e:3a:b2:ad:c3:4a:51:df:4b:
         af:c0:3f:01:5b:7c:eb:52:71:b5:65:a2:13:48:8c:12:7f:00:
         37:16:e4:cd:de:a2:d6:36:78:7e:da:78:10:6c:3b:64:5c:80:
         50:f3:a1:60:92:90:63:8c:66:6c:16:66:08:8c:5b:18:32:6e:
         77:e2:c0:8c:7b:44:c3:19:75:0d:43:14:2a:75:29:54:44:d6:
         b6:c1:94:47:e4:be:67:2a:24:12:e5:59:dc:2e:46:a4:98:44:
         d4:3c:92:ea:31:02:da:b6:ed:d6:9b:98:46:ab:99:f8:4e:bb:
         ce:4f:a8:13:bd:e1:a4:76:cc:d0:ad:07:b8:ed:23:97:83:d0:
         54:71:39:30:b2:2b:24:62:e5:a4:19:06:ca:d4:bf:05:04:1e:
         cd:a4:20:30:52:93:ea:e8:2b:4e:57:5b:25:18:a5:57:f8:31:
         bb:21:3a:ec:11:58:20:e0:a7:eb:88:ed:5e:6e:f5:2c:b4:da:
         97:e0:bf:41:8e:1f:14:2d:07:5f:c1:cd:92:8b:53:d5:d4:74:
         97:c9:09:a2:94:44:95:1d:83:17:29:93:31:f4:a6:ad:2e:7a:
         07:8c:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org